Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/ed3d3b9f-53ff-325c-8355-42f887a80e30.roa
File:                     ed3d3b9f-53ff-325c-8355-42f887a80e30.roa (raw, json)
Hash identifier:          LzMIKVuULxxzT1h6ommX0AQJRjnk2KVfLrAO+iuIzAU=
Subject key identifier:   8E:84:62:7B:03:5D:30:67:42:38:D1:7E:87:ED:32:F4:C7:74:93:8B
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584F498B0CF9068F43091A79F680
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/ed3d3b9f-53ff-325c-8355-42f887a80e30.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     3561
IP address blocks:        172.252.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:0c:f9:06:8f:43:09:1a:79:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=267d3083-b09c-435c-9c05-f40e8f7b2a49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ae:f0:85:1c:98:26:d3:cf:9f:b1:af:b0:a9:
                    f4:ca:a6:00:41:d5:ad:28:65:0a:d3:7c:40:d5:19:
                    be:06:ee:e2:b4:13:b6:ed:05:fb:1f:ab:5a:84:48:
                    cc:bc:93:e2:ec:d7:6e:f8:ec:dc:58:63:02:87:8b:
                    82:94:88:42:ec:84:43:39:86:05:dd:b8:22:87:0c:
                    f2:c2:95:eb:1c:5a:3f:13:22:f7:eb:cb:30:dd:c5:
                    6a:60:22:60:49:12:e0:ed:1e:20:8b:fb:79:7f:e7:
                    53:87:64:c6:f9:1b:1e:31:df:c1:04:7f:1b:ae:a2:
                    f6:95:43:a6:58:02:35:ae:bc:62:02:0b:14:7a:67:
                    71:2d:d5:fa:d7:5f:35:1c:0c:cc:e0:84:07:14:60:
                    62:8d:cf:74:85:54:98:92:be:22:1d:c3:73:a2:f4:
                    f8:9d:de:06:17:69:f3:52:43:e6:53:e4:9c:1d:65:
                    ff:d8:22:7b:1f:da:15:c2:fb:e3:00:30:26:bc:16:
                    9d:27:70:07:7d:03:c9:ee:f5:4a:df:fd:b2:1f:03:
                    ba:d1:54:b5:46:59:8d:15:ce:12:02:c5:07:e5:7f:
                    1c:cd:87:a6:d8:5a:bb:dd:8b:d0:67:37:00:7a:66:
                    bd:5a:0b:f2:72:ab:d8:56:bb:99:1c:55:89:f9:1d:
                    e9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:84:62:7B:03:5D:30:67:42:38:D1:7E:87:ED:32:F4:C7:74:93:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/ed3d3b9f-53ff-325c-8355-42f887a80e30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:64:e0:46:d1:af:26:7c:97:e9:a8:1b:02:42:6a:80:98:04:
         a8:8c:34:ed:9e:5b:9f:af:cf:90:01:ee:e4:5f:a4:5d:cd:ca:
         41:dd:01:5d:c4:74:c7:0b:69:52:f0:ff:54:0b:e8:ca:13:39:
         84:94:cb:a2:94:d4:2f:f9:c0:5a:b2:33:d7:5e:a2:d1:6e:4a:
         a0:6c:5d:69:e7:f9:07:90:20:68:fe:5a:33:f6:54:60:8b:f6:
         cd:f3:92:ad:47:2f:04:9c:3c:5a:3a:67:d8:36:60:f5:be:fc:
         71:43:f3:e6:d2:48:15:17:ea:06:f2:c7:20:42:d9:d1:3c:5b:
         ff:eb:3d:cf:e6:d4:18:5f:62:f0:59:57:0e:cc:be:af:b6:c8:
         08:f4:23:9b:c3:8f:72:e3:39:3f:cd:25:db:8f:7c:e7:d8:e4:
         7d:4b:c6:90:0a:bd:a7:59:d4:e3:34:d2:bb:c9:5b:ee:64:e0:
         18:25:11:db:65:fa:7e:d0:c6:01:28:4f:7f:b4:5d:c2:77:13:
         bb:54:04:bd:87:5e:4b:7f:7d:c6:49:ff:53:f9:7b:a8:f5:42:
         d2:42:ce:5e:e6:6a:b3:2d:99:3d:d9:2f:d5:eb:03:39:ab:ff:
         3e:51:2b:67:92:6a:d5:f0:67:98:35:da:92:a6:9b:b3:6a:6c:
         a3:fb:49:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:20:05 2026 by rpki-client