Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/dbc4688e-4078-3fcb-83a8-9ffc3320c7ce.roa
File:                     dbc4688e-4078-3fcb-83a8-9ffc3320c7ce.roa (raw, json)
Hash identifier:          B9KQG1em+zmuzjLncTrMM/mvD6lckt8SXJxJf5QalZ4=
Subject key identifier:   44:CB:DF:18:61:02:C7:4B:82:4F:44:3C:BD:CF:7E:41:FB:E4:54:F0
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CEE725781978CDA81EA00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/dbc4688e-4078-3fcb-83a8-9ffc3320c7ce.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     211440
IP address blocks:        172.252.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:ee:72:57:81:97:8c:da:81:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=11327afe-70e2-489e-b88a-1fcb156ccd63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7d:5d:51:93:77:72:27:74:6b:d9:07:01:f4:
                    a2:f6:06:16:46:7b:0e:f0:40:ba:8e:71:7c:06:4f:
                    79:67:77:56:e4:c1:7f:d8:d1:39:aa:39:51:61:a3:
                    c7:25:a4:fc:12:46:43:1a:5a:ab:f4:74:8d:65:82:
                    8a:38:60:cf:d9:46:f7:07:fd:49:9f:42:84:00:72:
                    9a:ba:22:5f:17:4c:b0:6d:66:be:20:26:07:82:4a:
                    a9:54:27:e2:a8:0c:25:87:22:7b:8a:83:9d:ad:15:
                    6d:84:ec:b1:31:c5:9e:26:68:15:f9:6d:17:02:1c:
                    d5:ec:93:e1:59:6b:71:b0:c1:94:05:ac:00:35:4a:
                    56:1f:3d:44:b1:bb:71:79:68:5a:9a:25:48:11:b7:
                    f6:7f:40:c0:5b:79:ee:39:bd:51:2c:55:27:ba:22:
                    2a:51:ef:46:dd:6b:a2:85:93:b2:d0:13:b9:c2:09:
                    aa:c6:9c:3b:8e:a2:a4:8f:53:3a:40:65:ff:05:c3:
                    5a:b4:6d:c0:4c:15:98:65:44:60:0c:70:c3:ea:dd:
                    bf:5c:7b:aa:23:78:ec:10:0b:33:80:e0:78:65:e4:
                    55:35:74:67:0d:36:11:8a:6d:4b:df:52:96:7e:92:
                    91:f1:bc:25:c0:c2:3f:93:4b:4d:98:7c:e7:29:67:
                    a1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:CB:DF:18:61:02:C7:4B:82:4F:44:3C:BD:CF:7E:41:FB:E4:54:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/dbc4688e-4078-3fcb-83a8-9ffc3320c7ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:c9:57:ef:13:8a:66:b1:74:7f:02:c2:b4:e8:cb:5b:07:75:
         2f:88:70:5d:67:5f:76:78:b2:08:d0:c7:f6:9e:4c:a6:1b:df:
         a3:51:2a:da:18:d0:50:a1:d0:fb:34:eb:c7:18:03:31:94:f8:
         37:0c:b9:4a:81:bc:b3:41:62:0b:ea:d1:43:a2:1d:c8:b9:90:
         85:3c:86:35:26:10:dc:63:82:61:ef:aa:d1:a4:89:e2:8b:77:
         10:48:9d:ab:c0:3c:82:4d:4b:cd:6b:0d:3d:10:2e:55:c0:ff:
         77:09:f8:27:cf:28:f6:69:6e:bd:df:54:4c:f7:e6:11:2b:0a:
         8b:82:2a:7e:6f:51:12:da:cc:81:5b:f0:36:7d:e2:c0:63:f0:
         d2:ba:fd:b9:68:d6:3a:44:52:cc:70:5d:d6:84:90:b4:6b:2b:
         85:43:61:21:6f:8a:88:98:59:93:67:c1:14:91:78:97:7a:ba:
         03:86:ee:8d:c0:19:c2:c9:0c:18:d5:ef:45:0d:e1:55:85:3d:
         30:ac:0a:2a:4b:68:41:23:e8:ba:c6:06:33:87:26:6c:30:92:
         48:96:35:dd:7a:88:f8:14:36:2f:74:e8:82:3b:33:c0:1f:77:
         da:85:3d:3b:0f:ee:5b:ad:7c:e2:70:06:88:75:1b:37:2f:fa:
         51:ca:61:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:06:52 2026 by rpki-client