Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2e0ceedd-16a0-3e64-bbbe-2b9643ab4e14.roa
File:                     2e0ceedd-16a0-3e64-bbbe-2b9643ab4e14.roa (raw, json)
Hash identifier:          TZW6VWfTGtsyCpkEzQRL4XG0EWROH1O8K2Wieq2vGQA=
Subject key identifier:   DA:6E:B9:99:F3:9B:EB:FD:C4:E3:15:54:8B:51:FD:76:E2:52:AB:C6
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CC0E4A63B01FA40E6BCC0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2e0ceedd-16a0-3e64-bbbe-2b9643ab4e14.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     398781
IP address blocks:        172.252.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:c0:e4:a6:3b:01:fa:40:e6:bc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=3d0b2a04-bbd2-4d9b-a00a-3aed5f3c2fc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3f:a5:95:7b:a1:57:4b:3a:a3:5e:ff:b2:15:
                    65:65:2e:e1:d9:34:04:52:58:54:e3:99:dc:32:3b:
                    d5:76:71:8d:d4:6a:f5:0d:1a:a2:83:f7:6f:b1:28:
                    98:bd:3f:7f:cd:c2:b6:f1:1b:54:66:4e:ca:c4:71:
                    f3:65:6f:1d:6d:2c:fd:23:08:9f:d3:d4:67:ba:4f:
                    f0:50:5f:36:95:4b:0c:84:16:dd:e5:f5:87:a0:a4:
                    a0:9f:67:ae:c4:f9:66:ec:94:49:7b:57:3c:f7:a9:
                    69:fb:b0:44:21:95:05:42:fd:03:c1:a3:ab:1d:0f:
                    fd:90:35:33:de:50:7a:94:6c:e4:c8:87:43:6f:2b:
                    a0:af:ca:c4:30:50:40:69:40:73:7c:bf:84:f6:f1:
                    09:d1:54:35:09:68:55:69:07:68:13:1a:28:10:de:
                    06:3a:e1:a7:79:38:8c:17:e9:4c:7f:cc:51:a5:d5:
                    4c:c1:f1:f8:62:8c:dc:00:06:06:1f:19:40:66:96:
                    e2:39:b6:2c:d0:62:bd:12:3d:3d:be:46:df:e6:fe:
                    be:75:be:70:e3:8c:47:d6:d2:cf:8a:aa:4f:09:c9:
                    4d:1a:75:36:05:5b:c7:7d:67:de:19:24:10:6f:39:
                    44:2d:8c:1c:a7:e4:aa:9b:3e:f6:00:23:37:d2:ea:
                    cd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6E:B9:99:F3:9B:EB:FD:C4:E3:15:54:8B:51:FD:76:E2:52:AB:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2e0ceedd-16a0-3e64-bbbe-2b9643ab4e14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:38:4d:e1:f2:6c:89:c8:75:ea:1f:19:b9:72:ea:38:09:29:
         fb:d9:c2:d3:ca:78:43:81:40:65:d6:64:6b:48:b2:19:de:91:
         5b:e6:1a:e9:c9:47:19:4a:70:60:d1:64:0c:11:3f:69:71:23:
         82:5d:a9:da:fa:d6:47:a7:39:93:63:08:c2:1d:71:f4:fc:b8:
         23:a8:ef:4d:07:16:6e:62:12:51:98:71:83:ab:c5:77:dd:dc:
         38:36:cf:6d:73:f7:1d:f9:46:90:9a:d8:70:21:9e:a1:4f:1f:
         3b:8b:31:09:02:03:1b:65:fd:cf:c3:82:58:ad:12:6b:7f:82:
         e5:a9:90:3b:34:9c:fa:46:d1:f1:fd:64:06:30:75:e1:e7:a0:
         bb:27:62:b1:1c:00:8b:cc:40:92:1c:ea:98:23:0a:9e:0e:32:
         6c:ff:bf:66:a7:7a:77:d6:bf:97:e6:a5:90:a6:7f:a1:7a:63:
         95:e1:59:5f:c8:12:c9:cb:2a:d1:f6:16:2d:69:e9:94:f2:c7:
         da:20:c0:ce:ad:bf:2e:bd:7a:d0:75:dd:b8:95:f4:11:63:3a:
         f4:60:c7:89:4c:8c:be:06:88:27:b7:95:51:2a:e9:b9:32:bb:
         b3:71:7e:95:92:b7:89:98:3d:89:cf:07:61:dd:be:f4:a8:15:
         e5:2f:7d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:33:41 2026 by rpki-client