Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/261bc3e8-9cb1-3830-984f-d02d7c523a00.roa
File:                     261bc3e8-9cb1-3830-984f-d02d7c523a00.roa (raw, json)
Hash identifier:          Ty1bGaPgXnBrfmwC8AOxWBdDV8IHo7CENtDZ2NEK80k=
Subject key identifier:   C0:24:47:3B:88:7A:50:04:30:B9:77:1A:EB:DF:55:7D:30:DE:89:F0
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584F51D2C1BC5379D39E7D293000
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/261bc3e8-9cb1-3830-984f-d02d7c523a00.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     3561
IP address blocks:        172.252.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:c1:bc:53:79:d3:9e:7d:29:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=f82fefe6-34c1-4341-bd2a-6bdf9ec90047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:06:08:c0:34:cf:ff:61:78:81:9a:c6:4d:13:
                    18:72:cb:b1:76:1b:a7:d5:b1:54:10:0f:e7:23:8d:
                    c6:03:27:32:75:fe:67:af:01:ca:16:9a:9e:00:d0:
                    fc:c8:08:04:fa:5c:14:5f:a2:3d:f4:57:13:19:0d:
                    8d:7f:e6:c2:9e:82:e7:e3:72:ed:a0:a3:b6:2d:4d:
                    86:68:39:19:67:5d:7b:ad:44:31:97:a0:13:f6:02:
                    83:f3:4d:da:36:d7:9e:d9:86:22:1a:c1:85:0f:68:
                    85:b7:db:15:af:a6:2d:7f:9c:b1:49:cc:55:05:fe:
                    00:21:b7:bf:bb:14:d4:07:99:22:ce:97:7c:fe:7c:
                    f9:4c:f5:60:81:a5:c8:16:e5:c1:1b:20:33:c1:5e:
                    09:74:b5:83:df:5d:fc:c4:e7:95:86:34:54:30:1d:
                    88:a8:a1:86:f7:d8:07:2f:4c:c9:25:f5:bd:7b:50:
                    8f:6a:1a:dc:4f:18:d7:0a:10:47:eb:e4:ec:8f:d6:
                    9a:95:44:64:e6:5b:45:47:f4:aa:70:f0:a1:d6:40:
                    e8:a0:cb:e3:49:7b:44:39:6b:35:5b:a6:ea:80:30:
                    13:b5:7a:cd:a0:d3:eb:a9:5f:0e:b6:d0:21:98:cf:
                    d7:38:36:c9:21:72:54:d6:6e:a6:9a:5b:ec:fa:2d:
                    88:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:24:47:3B:88:7A:50:04:30:B9:77:1A:EB:DF:55:7D:30:DE:89:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/261bc3e8-9cb1-3830-984f-d02d7c523a00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:bd:b4:14:3c:e0:cc:50:4c:cf:85:6b:68:d8:5d:67:8f:cd:
         63:02:d5:c0:f8:0b:23:86:75:85:37:a9:90:ce:f2:59:9f:c6:
         3a:2e:f9:50:3a:ff:ce:43:8a:a7:ec:48:7a:7b:94:0c:f5:b5:
         80:94:3c:be:24:d5:52:27:e0:a7:ea:3f:d7:30:ae:34:87:62:
         f6:91:2f:8c:aa:ea:f9:8a:6a:71:8d:bb:0d:7d:4f:ad:52:56:
         f9:bc:e6:c9:48:1d:57:ac:91:88:7d:fa:d5:0d:98:40:b6:52:
         2b:47:d3:dd:88:4b:5c:65:31:ad:1f:e7:b0:19:a3:47:a6:e2:
         9c:44:90:45:e0:49:f2:87:8d:5d:2c:f4:5b:0d:19:d5:cd:00:
         99:2f:43:9d:97:0b:9d:57:0c:c1:d6:38:71:4c:e9:e2:e0:5b:
         64:a3:60:ee:b9:51:8a:c5:53:28:29:8c:1a:53:0a:90:29:3f:
         f7:83:64:50:89:ed:0b:f6:d2:d4:91:4c:fc:90:27:d9:52:3a:
         5e:2a:6b:cb:41:7f:c8:56:f4:35:5c:f2:95:46:09:37:9e:39:
         a4:1b:4e:6b:4a:c9:f5:d8:e3:ba:54:01:46:60:2b:bd:0a:24:
         06:0f:8d:dd:b4:d8:b8:7b:82:99:37:ab:d3:a5:1a:70:a9:ac:
         a2:2a:53:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:54:37 2026 by rpki-client