Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/327344c5-9633-318b-8f40-fc82a46e2727.roa
File:                     327344c5-9633-318b-8f40-fc82a46e2727.roa (raw, json)
Hash identifier:          CcXvOF5Cf9OX/FXNMufh/acSCSUjvUsjscpFMoKAgRE=
Subject key identifier:   66:D5:25:3F:07:77:95:5D:17:6B:82:DE:EE:36:B5:B7:95:5D:2E:80
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584F92085B8012D41FCE8D77F780
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/327344c5-9633-318b-8f40-fc82a46e2727.roa
Signing time:             Wed 21 Oct 2026 01:00:12 +0000
ROA not before:           Wed 21 Oct 2026 01:00:12 +0000
ROA not after:            Tue 19 Jan 2027 02:00:12 +0000
asID:                     18779
IP address blocks:        172.252.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:92:08:5b:80:12:d4:1f:ce:8d:77:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Oct 21 01:00:12 2026 GMT
            Not After : Jan 19 02:00:12 2027 GMT
        Subject: CN=a7403027-d01b-47f6-8a94-0f0566ebb10e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a1:40:8e:e3:19:c1:5c:cc:9d:5b:15:da:62:
                    9c:70:65:13:ae:bd:88:44:00:e7:c1:74:b1:82:7e:
                    94:48:17:b7:79:fd:54:ca:ff:93:ed:d9:7a:d7:08:
                    da:0c:56:bb:c8:cd:19:29:39:72:94:37:e0:3f:61:
                    07:0c:6a:84:5b:ad:fe:2f:fc:81:72:1d:76:70:c1:
                    fc:d7:31:4c:d4:fb:7b:b3:a6:ea:28:96:74:d9:84:
                    c8:70:ec:b4:c4:dd:99:7c:ab:92:60:fd:bb:04:c5:
                    ae:8a:b5:00:08:78:dc:90:67:97:23:ff:70:47:60:
                    0d:56:88:f4:2f:da:b8:dc:53:69:1c:e3:1d:d6:58:
                    25:a2:38:77:89:ce:3f:a4:f1:60:df:5e:a8:57:95:
                    d8:1f:84:2f:2c:fc:d8:f5:f4:ca:98:28:72:63:ca:
                    55:f8:e8:01:90:93:e3:3a:d5:53:3c:61:14:19:70:
                    a2:00:8c:f3:79:da:c2:18:7e:87:5f:c8:d3:46:d7:
                    40:6c:a0:2b:61:4b:b8:fa:54:56:71:74:de:39:84:
                    56:a9:4a:e0:4f:a6:4e:1a:64:d3:c0:1a:89:57:0b:
                    45:e7:67:9a:4c:b7:97:ab:37:eb:dc:95:3b:31:ad:
                    34:fc:a3:f7:74:92:e1:8b:c8:b9:42:d7:87:f1:1f:
                    46:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D5:25:3F:07:77:95:5D:17:6B:82:DE:EE:36:B5:B7:95:5D:2E:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/327344c5-9633-318b-8f40-fc82a46e2727.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:41:19:47:c1:2e:3b:0b:61:87:f9:ee:df:8f:57:9d:d3:5c:
         a0:6c:1f:68:0b:b8:d7:c1:fe:0c:65:38:28:39:89:76:73:47:
         84:a6:38:d6:63:a7:e1:7e:85:ab:ca:59:8f:6a:26:57:62:45:
         1f:a3:89:56:2c:85:8a:3d:91:e4:20:a8:e2:c5:ae:69:3b:9a:
         e9:27:a2:02:c8:d5:96:84:ac:53:85:a1:92:51:77:2d:f1:4b:
         f4:e4:20:b8:5a:39:97:8d:18:6d:9c:01:2c:48:4a:c3:25:ed:
         8e:8d:f7:6b:e6:b3:9f:d1:04:64:39:26:37:5e:da:79:8e:76:
         4c:ff:95:2a:61:7a:a8:24:b7:6c:fb:4a:54:dc:12:7f:a1:fe:
         17:68:46:c3:d4:5b:97:25:2f:0f:35:ad:9b:5c:63:06:21:74:
         98:2b:3f:d5:e3:6b:6d:02:36:25:43:a3:65:d4:4a:58:90:11:
         6d:e5:e3:5f:22:06:07:b6:da:dc:c1:29:3b:80:0f:0e:d0:f3:
         22:68:10:9b:6d:a9:75:b9:4d:6d:04:01:18:b5:29:eb:30:43:
         02:70:b0:8a:7a:bd:13:d7:80:c9:fe:73:b7:7f:70:2d:4c:fd:
         af:01:28:d9:58:ca:8b:f6:45:9b:20:eb:1a:09:a4:e2:e2:c0:
         87:d7:c5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 11:11:09 2026 by rpki-client