Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/1fa2f74b-358a-3bf1-87b0-d249fcef25be.roa
File:                     1fa2f74b-358a-3bf1-87b0-d249fcef25be.roa (raw, json)
Hash identifier:          b2Q99ZyswR1Sp7l7Xow6I4n4FIta7Zs2YCTn3v8pNgQ=
Subject key identifier:   A9:20:36:C6:82:6E:15:53:84:20:E8:97:75:D1:0F:45:EE:DE:92:7A
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CDED19D633374A6C3B1C0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/1fa2f74b-358a-3bf1-87b0-d249fcef25be.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     6939
IP address blocks:        172.252.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:de:d1:9d:63:33:74:a6:c3:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=eee28d37-6da9-4ea3-85c7-b7aa453cbefb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:92:d4:05:e7:2d:0c:48:5d:20:bf:7f:8f:f3:
                    79:82:bf:ac:de:fd:5e:13:ed:e3:34:c9:98:cd:f7:
                    d7:74:f7:17:6f:7a:a9:17:5d:c4:1b:b6:e4:26:1d:
                    9e:c4:4b:98:65:d3:13:b6:c1:d6:df:41:de:98:82:
                    f0:ee:14:73:17:a1:5f:6d:d0:11:a6:84:6c:ef:55:
                    c9:52:bb:24:b1:aa:91:a7:f9:24:2f:ee:9d:cc:5b:
                    3f:8f:d8:02:6c:5a:ba:3b:0d:32:e5:bb:ae:f1:cd:
                    a8:9f:28:f6:7a:ec:64:11:b7:f4:a9:4b:ce:01:15:
                    00:80:a7:5b:4a:8e:35:9f:ab:8f:48:ba:29:5b:f6:
                    9c:39:08:20:e1:1d:99:99:44:8f:05:a3:4b:6e:f0:
                    73:8f:d7:47:c6:44:e1:2b:42:15:88:79:f2:16:9a:
                    69:a7:f7:09:c9:14:b5:bd:15:f3:f4:71:8f:47:86:
                    43:d4:f4:83:f9:e6:28:d3:ec:76:fa:96:18:aa:2c:
                    9e:18:fd:13:e7:17:59:ee:1d:2c:ad:1d:d5:7c:89:
                    61:3f:1c:13:6d:d9:29:2e:8c:e1:22:23:17:f2:a1:
                    38:4b:a6:b3:42:a6:fd:51:d0:f7:e6:f3:2f:34:26:
                    d1:f7:8a:7c:3e:d1:9d:d8:38:82:4b:4a:38:f1:52:
                    a3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:20:36:C6:82:6E:15:53:84:20:E8:97:75:D1:0F:45:EE:DE:92:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/1fa2f74b-358a-3bf1-87b0-d249fcef25be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:18:f6:6e:27:d8:de:69:12:0f:f5:7a:1f:bc:91:06:9f:e7:
         a1:8e:a8:85:30:18:f9:d0:fd:6d:91:a8:37:c6:88:5a:ca:23:
         5c:10:1a:e4:94:2b:93:6e:d7:82:99:6e:a8:16:f4:98:05:30:
         43:27:26:2f:e6:22:4c:48:11:f2:ad:58:85:6c:dc:ae:96:83:
         1d:00:a0:58:6b:55:99:17:ff:1c:39:0b:1c:ce:e2:e1:8b:24:
         3d:55:97:ea:32:63:a8:74:4b:b7:66:0a:1e:6d:6d:51:4a:70:
         8c:f6:c6:62:6b:a4:a9:e0:d9:48:19:61:aa:a7:48:3b:ea:f2:
         14:50:71:a9:d8:df:19:f1:30:0e:48:53:54:1a:5a:d1:60:48:
         07:a7:09:c9:2b:cc:0d:45:d2:3d:33:2a:f7:bf:5b:b0:3f:db:
         1c:81:9a:10:28:26:78:ff:d9:82:57:af:04:30:4d:9a:e3:2e:
         e9:2a:71:8e:24:71:ac:40:30:f3:6f:9a:83:8b:54:fe:7d:bc:
         6d:fb:37:3c:a3:86:ee:ec:87:53:c5:ff:91:cd:39:ff:65:16:
         58:2c:24:15:23:07:a9:36:1c:51:1f:4d:be:bf:aa:40:77:8a:
         1b:fc:90:3d:e9:8c:ae:84:a4:65:d1:83:35:ae:44:d2:ed:2c:
         ef:c2:e0:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHN7RnWMzdKbDscAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk
ZWVlMjhkMzctNmRhOS00ZWEzLTg1YzctYjdhYTQ1M2NiZWZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pLUBectDEhdIL9/j/N5gr+s3v1eE+3jNMmY
zffXdPcXb3qpF13EG7bkJh2exEuYZdMTtsHW30HemILw7hRzF6FfbdARpoRs71XJ
UrsksaqRp/kkL+6dzFs/j9gCbFq6Ow0y5buu8c2onyj2euxkEbf0qUvOARUAgKdb
So41n6uPSLopW/acOQgg4R2ZmUSPBaNLbvBzj9dHxkThK0IViHnyFpppp/cJyRS1
vRXz9HGPR4ZD1PSD+eYo0+x2+pYYqiyeGP0T5xdZ7h0srR3VfIlhPxwTbdkpLozh
IiMX8qE4S6azQqb9UdD35vMvNCbR94p8PtGd2DiCS0o48VKj5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKkgNsaCbhVThCDol3XRD0Xu3pJ6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvMWZhMmY3NGItMzU4YS0z
YmYxLTg3YjAtZDI0OWZjZWYyNWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPw/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACMY9m4n2N5pEg/1eh+8kQaf56GOqIUwGPnQ/W2RqDfGiFrKI1wQGuSU
K5Nu14KZbqgW9JgFMEMnJi/mIkxIEfKtWIVs3K6Wgx0AoFhrVZkX/xw5CxzO4uGL
JD1Vl+oyY6h0S7dmCh5tbVFKcIz2xmJrpKng2UgZYaqnSDvq8hRQcanY3xnxMA5I
U1QaWtFgSAenCckrzA1F0j0zKve/W7A/2xyBmhAoJnj/2YJXrwQwTZrjLukqcY4k
caxAMPNvmoOLVP59vG37Nzyjhu7sh1PF/5HNOf9lFlgsJBUjB6k2HFEfTb6/qkB3
ihv8kD3pjK6EpGXRgzWuRNLtLO/C4Jk=
-----END CERTIFICATE-----
Generated at Sun Sep 20 17:24:45 2026 by rpki-client