Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/30d949d9-61f9-34c8-95ea-a83a0db5987d.roa
File:                     30d949d9-61f9-34c8-95ea-a83a0db5987d.roa (raw, json)
Hash identifier:          ugnlqwZORm9UxtuKLzTbQO0jb8LCpdPCt5OCA4Qx7Js=
Subject key identifier:   1D:55:67:0B:47:01:06:69:A4:37:39:D3:94:E0:3A:DB:E3:F6:36:CE
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CABE0D66B55BF793A1FC0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/30d949d9-61f9-34c8-95ea-a83a0db5987d.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     57043
IP address blocks:        172.252.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:ab:e0:d6:6b:55:bf:79:3a:1f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=38ea2253-cd53-46ea-bd9e-97a59a478a91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9b:db:bc:32:ca:97:3e:bf:f1:b4:94:17:2b:
                    66:15:c2:7e:c0:9d:a2:e1:e8:1b:02:c5:5e:f1:77:
                    6b:6b:a6:3b:58:36:fd:79:28:df:38:2a:a4:ed:f9:
                    ce:7c:a3:fc:68:d9:c2:82:ad:a7:8d:a3:e2:ac:ad:
                    a7:ab:91:8c:26:ce:2e:d6:8e:19:1b:02:e7:93:30:
                    26:67:38:83:ff:28:df:1d:01:93:75:3c:48:62:02:
                    2a:18:9f:b8:00:5a:e2:b5:42:e3:df:1f:a5:17:39:
                    86:44:da:fd:27:3d:63:0e:1b:78:79:10:42:a2:36:
                    1d:8d:cf:06:72:3b:a9:08:ee:38:06:3b:08:6f:a9:
                    72:ea:b9:95:0b:9e:04:58:66:03:ff:6b:b5:30:49:
                    b6:d7:70:d4:da:f8:ee:2a:f1:a1:4c:1e:5b:05:93:
                    7f:03:cf:0b:ce:75:90:dd:b0:d6:a3:2d:6b:c2:cd:
                    f8:36:ef:e9:d5:9b:d1:56:53:af:72:15:8c:de:3d:
                    0d:1d:69:a1:4a:40:05:68:99:79:97:87:d8:02:88:
                    97:d6:68:8f:e4:d5:75:d0:2f:d9:f2:a9:c0:cd:e2:
                    e6:fd:4c:2e:46:c8:57:b7:0d:50:82:6d:a4:a0:d3:
                    ce:e9:bf:25:15:53:94:53:3f:0f:99:3b:06:51:59:
                    05:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:55:67:0B:47:01:06:69:A4:37:39:D3:94:E0:3A:DB:E3:F6:36:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/30d949d9-61f9-34c8-95ea-a83a0db5987d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:51:8c:8e:16:59:0f:ba:7c:69:06:92:ed:cf:0b:22:f3:5f:
         48:02:6a:24:15:d5:1a:82:81:bd:59:38:db:92:8b:90:37:d3:
         c8:92:25:3d:57:54:0e:e2:af:8f:6f:d9:bc:af:7b:89:7e:ed:
         99:c3:5f:64:d8:2e:4a:53:1c:1b:d3:85:42:3b:a2:1e:ed:c8:
         a0:f3:c5:cc:3f:ef:bf:03:6a:53:bb:ce:c8:37:f8:b2:68:1c:
         22:dd:4c:89:da:86:96:fd:ca:10:36:22:24:7e:68:29:d2:76:
         0e:85:00:6d:9b:a2:43:17:0a:0a:11:09:60:ab:c2:c7:b8:12:
         71:86:20:77:fe:cf:6e:02:87:20:cf:12:99:27:91:0a:e0:fc:
         58:ba:c0:54:b2:15:55:c7:94:d5:d0:48:39:e7:86:6c:8c:c9:
         d4:ce:e9:f1:9b:90:59:f6:96:15:42:29:13:23:77:e4:2a:d8:
         70:c1:e0:32:cf:d5:83:ea:ab:cf:e3:a9:45:78:33:03:86:28:
         f4:15:74:f7:ad:70:db:66:97:41:2f:64:28:36:14:9c:37:68:
         ef:b0:04:0c:e5:4c:28:1e:08:5a:ee:f8:e4:c3:e6:75:62:a3:
         e7:5c:f1:a3:c7:0b:21:31:8f:69:5f:12:d5:20:08:dd:28:08:
         9f:81:17:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHKvg1mtVv3k6H8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk
MzhlYTIyNTMtY2Q1My00NmVhLWJkOWUtOTdhNTlhNDc4YTkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5vbvDLKlz6/8bSUFytmFcJ+wJ2i4egbAsVe
8Xdra6Y7WDb9eSjfOCqk7fnOfKP8aNnCgq2njaPirK2nq5GMJs4u1o4ZGwLnkzAm
ZziD/yjfHQGTdTxIYgIqGJ+4AFritULj3x+lFzmGRNr9Jz1jDht4eRBCojYdjc8G
cjupCO44BjsIb6ly6rmVC54EWGYD/2u1MEm213DU2vjuKvGhTB5bBZN/A88LznWQ
3bDWoy1rws34Nu/p1ZvRVlOvchWM3j0NHWmhSkAFaJl5l4fYAoiX1miP5NV10C/Z
8qnAzeLm/UwuRshXtw1Qgm2koNPO6b8lFVOUUz8PmTsGUVkFhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB1VZwtHAQZppDc505TgOtvj9jbOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvMzBkOTQ5ZDktNjFmOS0z
NGM4LTk1ZWEtYTgzYTBkYjU5ODdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPyiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHJRjI4WWQ+6fGkGku3PCyLzX0gCaiQV1RqCgb1ZONuSi5A308iSJT1X
VA7ir49v2byve4l+7ZnDX2TYLkpTHBvThUI7oh7tyKDzxcw/778DalO7zsg3+LJo
HCLdTInahpb9yhA2IiR+aCnSdg6FAG2bokMXCgoRCWCrwse4EnGGIHf+z24ChyDP
EpknkQrg/Fi6wFSyFVXHlNXQSDnnhmyMydTO6fGbkFn2lhVCKRMjd+Qq2HDB4DLP
1YPqq8/jqUV4MwOGKPQVdPetcNtml0EvZCg2FJw3aO+wBAzlTCgeCFru+OTD5nVi
o+dc8aPHCyExj2lfEtUgCN0oCJ+BF6o=
-----END CERTIFICATE-----
Generated at Mon Sep 21 07:03:18 2026 by rpki-client