Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/19d86dab-d0c6-3c8d-b5ae-b99e09bbebcb.roa
File:                     19d86dab-d0c6-3c8d-b5ae-b99e09bbebcb.roa (raw, json)
Hash identifier:          nOJJMe2RS7YeSFUFNs+6eZ5XeDIfVxpy7Z1CEGpLuOo=
Subject key identifier:   71:CC:B9:AE:E4:55:87:43:D4:45:CE:55:91:BD:4F:DD:B5:B2:88:81
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CAA7C21A650EECE690AA0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/19d86dab-d0c6-3c8d-b5ae-b99e09bbebcb.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     398781
IP address blocks:        172.252.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:aa:7c:21:a6:50:ee:ce:69:0a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=b7e4dbb0-f582-4631-aa14-33af4a68e2e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ff:56:f4:c0:a1:ae:5a:b2:9d:bf:81:fa:33:
                    a9:fe:a8:4f:28:2a:89:19:b5:29:14:9f:d9:9c:d8:
                    6c:89:22:22:8f:7f:c8:a6:bd:34:7c:9c:80:38:02:
                    2e:b1:61:0a:65:dd:e0:6b:29:d7:29:29:fa:d5:7d:
                    5b:f8:9f:cb:8d:2a:1f:2f:8d:9e:1e:99:00:e1:3b:
                    a3:29:36:17:b6:54:cb:31:cd:d6:e7:58:88:98:4f:
                    16:3b:04:c6:92:0e:03:6a:b7:dd:52:3c:1f:a6:8f:
                    6c:9d:60:4e:fe:5d:9d:21:26:14:72:3f:ba:3f:8f:
                    8e:fb:af:54:91:9a:34:55:cb:0d:ca:2f:11:51:c4:
                    8c:07:25:c3:b6:45:c4:11:25:bb:92:70:9a:0b:f7:
                    f5:ef:4e:f0:54:d4:d4:35:a5:e5:b8:69:6d:d2:4c:
                    a2:25:bb:50:76:20:cb:51:64:47:94:05:86:c7:cc:
                    fe:79:c0:03:08:14:b3:fc:7c:0c:c6:6c:9a:24:ba:
                    61:ed:83:a2:bc:84:76:e5:f6:99:c3:ec:37:98:3b:
                    0c:03:d4:61:a0:9b:00:f8:37:f5:a3:98:ee:5a:90:
                    14:8c:b9:1d:29:22:97:7f:3c:38:1c:d9:7d:9b:46:
                    bd:4b:f6:8d:12:0f:c2:1e:ff:ce:2c:4d:46:fd:b4:
                    69:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:CC:B9:AE:E4:55:87:43:D4:45:CE:55:91:BD:4F:DD:B5:B2:88:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/19d86dab-d0c6-3c8d-b5ae-b99e09bbebcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:dd:d0:b8:10:d5:28:2d:09:78:50:a8:ab:6b:a6:b3:d9:f9:
         39:69:15:5d:1d:78:91:8b:66:b4:63:9a:43:c7:a7:be:bf:7e:
         9d:80:64:5f:f6:ae:24:63:7f:ab:73:e2:00:0e:15:0c:f0:a4:
         19:14:30:d8:4a:07:1b:c8:07:34:1f:94:74:83:ef:7f:88:09:
         61:39:06:67:fc:27:4c:5d:53:9b:e2:28:a1:5e:1f:3b:01:70:
         94:d2:0d:3d:09:a2:18:b7:a1:e1:72:08:d4:6b:9b:9b:75:dd:
         a7:91:a0:49:99:2e:31:8b:92:b3:ce:cd:df:c7:8b:a2:22:ca:
         ad:54:e1:08:b5:0b:c2:62:56:e9:95:5b:14:17:70:77:aa:d3:
         59:94:05:c7:b3:41:4d:7e:44:4f:4b:29:1b:d1:6b:0c:59:7d:
         bf:f4:20:84:ba:59:8d:e6:bc:4a:2c:67:c5:20:3e:e6:65:fd:
         09:0b:a9:e5:19:f7:29:26:9a:09:25:a5:5d:c1:d1:91:2f:0b:
         ac:c4:6b:9d:b8:4b:c6:9b:8e:2c:14:2c:b1:7f:cc:60:a2:7e:
         b6:f9:49:86:f0:0b:a1:70:f7:db:48:a2:f4:56:7f:d5:0e:a8:
         d9:70:d5:07:fc:7f:78:28:f6:bd:a7:3d:e6:6b:30:83:b7:77:
         87:fe:7f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:17:48 2026 by rpki-client