Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/14535b9e-8b67-3842-af6e-629affc280c3.roa
File:                     14535b9e-8b67-3842-af6e-629affc280c3.roa (raw, json)
Hash identifier:          oWgFrEz6UXR0OFViGB85HILnJpyu/b3oafoaVx88yS0=
Subject key identifier:   97:B5:EC:E0:6D:BE:23:15:BD:2B:05:62:22:8E:A7:3C:71:AE:7F:8E
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CE20B3DD72A4D5BAC5C40
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/14535b9e-8b67-3842-af6e-629affc280c3.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     212238
IP address blocks:        209.73.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:e2:0b:3d:d7:2a:4d:5b:ac:5c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=042d5181-ffb7-4072-83d8-55cc7d64f81b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d9:c0:5f:aa:ea:60:05:3f:56:7f:0a:ed:8c:
                    00:bc:ab:f5:5c:f8:b4:3c:80:e9:e2:1f:b0:41:2c:
                    87:cc:8a:36:98:60:10:b5:73:34:93:89:fa:4e:b5:
                    c5:94:87:68:f2:8b:f9:80:d6:de:51:18:da:a2:47:
                    f9:80:3b:55:87:99:9a:73:30:43:d2:05:6c:9d:eb:
                    95:82:2f:7e:18:40:4b:6b:9d:1a:37:4b:03:66:e6:
                    6d:77:f5:48:ef:6d:21:a2:9f:b3:cf:34:9f:57:6e:
                    75:f3:26:22:95:39:87:99:b5:5c:0d:56:1a:97:f4:
                    ac:61:07:e3:51:09:7a:2b:a8:74:c0:7c:c7:79:7c:
                    60:04:e2:38:a8:13:e6:df:b2:6e:2d:f6:69:2f:66:
                    0b:69:be:b0:3a:68:e3:dd:66:b5:68:9a:27:53:82:
                    d6:8e:86:98:be:09:7e:6c:33:23:18:da:23:c8:35:
                    31:de:91:cd:1f:93:69:0b:60:ab:9c:d0:19:33:49:
                    f7:17:8b:a3:5b:47:64:6b:df:22:e0:66:70:e4:e5:
                    13:8d:f7:5b:45:db:04:e6:6c:d7:da:55:9a:d9:45:
                    5f:f2:e7:f9:e2:03:a9:ea:7a:22:c9:54:d9:9a:b7:
                    8c:37:d0:95:68:ff:ac:35:22:4a:be:55:f7:21:93:
                    f1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B5:EC:E0:6D:BE:23:15:BD:2B:05:62:22:8E:A7:3C:71:AE:7F:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/14535b9e-8b67-3842-af6e-629affc280c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.73.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:18:a6:87:03:0c:48:64:00:69:53:34:24:20:2a:fd:bd:3a:
         ce:36:10:25:a5:c4:5a:5a:d8:ae:15:57:63:80:9b:55:82:5a:
         56:e7:e8:ee:7f:79:c0:de:77:88:4f:c5:f5:eb:76:25:f3:7d:
         96:50:e8:10:52:55:d0:e1:07:af:62:44:a1:57:53:c1:b2:19:
         a5:82:16:da:e8:ee:92:36:5d:cf:3c:dd:92:f6:c1:8d:98:19:
         51:06:62:e2:03:68:71:70:13:66:a2:b7:fe:23:9a:79:90:43:
         80:fd:0d:0f:ff:fd:d1:72:53:ef:f2:46:a9:ae:1a:32:16:16:
         d6:9e:cf:39:9e:75:6e:3a:0a:a9:49:a3:b2:0d:ac:37:ed:d7:
         cf:fa:dc:51:92:11:b6:df:fc:f7:88:04:bf:f3:d0:80:87:e5:
         c0:e3:75:1a:7a:fa:11:36:f1:ce:1c:20:26:ff:9b:28:48:3a:
         53:01:24:2d:b4:c6:c2:1f:49:24:5c:d1:14:9f:42:4e:3d:fd:
         35:41:c4:d6:4e:3d:82:2c:81:19:ff:86:99:8a:94:8d:22:f6:
         d6:36:b9:78:ee:4a:84:f4:a8:ec:4f:8e:12:31:36:82:5b:31:
         6c:c6:1f:4a:04:3f:92:fc:db:f1:73:ee:70:55:4a:8c:d3:4f:
         cf:88:ef:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:00:38 2026 by rpki-client