Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/cc39c7ef-fe68-3f4a-acf1-07016ce0c28b.roa
File:                     cc39c7ef-fe68-3f4a-acf1-07016ce0c28b.roa (raw, json)
Hash identifier:          7A4gPlfhnx5xxjfY+DN0Lewe5Zy1iKlDFpdmBBhgLBo=
Subject key identifier:   A8:57:B3:86:B4:B2:F8:D3:7D:94:45:A2:82:C4:92:3F:2D:F6:D8:E7
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584DC4131881C63B1BE3C3085B12
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/cc39c7ef-fe68-3f4a-acf1-07016ce0c28b.roa
Signing time:             Fri 08 May 2026 13:38:29 +0000
ROA not before:           Fri 08 May 2026 13:38:29 +0000
ROA not after:            Thu 06 Aug 2026 13:38:29 +0000
asID:                     18779
IP address blocks:        172.252.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c4:13:18:81:c6:3b:1b:e3:c3:08:5b:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: May  8 13:38:29 2026 GMT
            Not After : Aug  6 13:38:29 2026 GMT
        Subject: CN=e321da70-e648-4bc9-97c9-e1e3e53c8472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:cf:58:9e:90:37:73:47:93:51:c0:16:7b:09:
                    58:fb:36:d5:58:ac:56:8b:f9:60:cc:cd:58:de:5c:
                    f7:28:6f:01:96:98:65:8d:09:ee:13:13:c4:87:9f:
                    0a:14:c6:b5:37:91:e4:4f:d7:4e:b0:d9:bc:ad:4f:
                    63:4a:b4:33:57:83:f7:ae:7f:c5:25:cf:7f:85:7f:
                    ee:5f:fd:a7:89:bc:cd:06:6a:b9:bd:43:1f:79:5f:
                    f0:17:84:a6:d1:41:af:3f:d4:63:5b:f4:52:0d:41:
                    7b:bf:0e:ac:60:9b:19:71:3b:cc:2b:f1:6b:af:cf:
                    ed:a8:7d:b9:ac:25:e2:1e:fa:1e:35:73:13:1d:ef:
                    34:c6:95:24:a6:5c:7f:d9:81:58:19:a4:07:4a:d4:
                    b9:2f:24:c1:68:bb:78:fc:96:81:a3:41:92:ed:33:
                    fa:e1:db:4e:10:30:d9:4a:60:bf:5e:23:db:c8:9a:
                    18:32:65:72:d9:6b:a8:ac:f2:c5:95:7a:8b:1e:b6:
                    c4:e7:23:9d:25:25:a8:d1:d8:06:71:58:99:68:6a:
                    05:39:24:7c:dc:93:a1:02:da:6b:f0:5d:86:a5:80:
                    bb:26:d0:bd:93:26:d6:ea:1a:69:38:a9:02:15:9c:
                    32:fb:05:f4:af:cd:b4:d9:72:eb:51:68:b8:48:d4:
                    ee:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:57:B3:86:B4:B2:F8:D3:7D:94:45:A2:82:C4:92:3F:2D:F6:D8:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/cc39c7ef-fe68-3f4a-acf1-07016ce0c28b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:8c:55:bf:ba:7c:2f:fa:2f:87:16:6a:ba:74:75:b8:df:bc:
         0a:9f:97:93:c5:97:35:c6:ac:5d:9c:29:b8:ff:e9:9f:6d:6a:
         f4:37:42:3c:49:3e:92:52:69:41:32:4c:4f:8c:7b:4e:c5:e0:
         b5:f4:0d:bb:dc:57:c2:d8:be:4f:88:f9:d0:81:ff:43:49:00:
         3e:c2:b4:5e:bb:c0:5d:fc:9a:a9:e6:7b:6e:07:cd:b0:bf:b2:
         a8:d7:14:d2:13:92:fb:c9:bc:ef:bf:d8:bc:d2:9e:79:79:0c:
         0f:53:87:b4:32:9c:89:28:78:41:44:c9:83:63:f2:9a:5d:26:
         07:0c:8e:17:3d:2a:80:01:e6:15:3f:03:78:d6:8b:46:27:33:
         8d:98:e6:05:69:3d:75:ac:2e:a2:e4:56:04:5d:cf:04:0a:6d:
         48:8b:c1:e1:09:05:f0:53:90:1e:fb:d0:0e:fa:5b:4d:b8:3f:
         84:a6:26:79:ab:af:83:4a:13:ca:08:b1:7c:bd:56:29:1f:8d:
         b4:f8:b3:49:80:80:54:1a:80:4e:07:11:f5:1f:a5:7d:6e:c0:
         65:2a:f7:f1:41:59:24:2a:a2:8d:1f:c8:b1:6f:32:16:44:b5:
         cb:d9:72:9a:9f:1c:c0:2d:9b:ea:4e:fa:36:2a:dd:c7:eb:63:
         03:da:64:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:45:58 2026 by rpki-client