Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/3afec97c-65ca-375c-91bc-485c335688db.roa
File:                     3afec97c-65ca-375c-91bc-485c335688db.roa (raw, json)
Hash identifier:          dHjhL99U+wMxnRucbLvx0ZR7XOeHsMsK1MPbM3hPJp0=
Subject key identifier:   46:BA:2E:77:B4:C0:AD:43:B7:61:62:02:D5:19:2C:F0:0A:15:85:F2
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EA17A5DB51D6A9DEC7389FE00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/3afec97c-65ca-375c-91bc-485c335688db.roa
Signing time:             Sun 26 Jul 2026 21:00:11 +0000
ROA not before:           Sun 26 Jul 2026 21:00:11 +0000
ROA not after:            Sat 24 Oct 2026 21:00:11 +0000
asID:                     153706
IP address blocks:        172.252.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a1:7a:5d:b5:1d:6a:9d:ec:73:89:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jul 26 21:00:11 2026 GMT
            Not After : Oct 24 21:00:11 2026 GMT
        Subject: CN=442bb23c-16a2-40af-80d0-0aba673578e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c6:4e:58:3f:b8:5f:30:77:cb:78:fe:f1:1d:
                    85:27:85:b4:e9:9c:73:69:9f:86:b6:02:50:aa:67:
                    2b:ed:05:4e:98:25:c7:07:95:01:2a:e2:54:58:5c:
                    8d:ad:49:3e:4d:a9:f8:77:c2:92:94:e4:97:09:95:
                    52:32:c8:94:bd:4b:3a:98:7e:68:eb:31:c6:5f:20:
                    ab:28:ff:c0:5b:eb:c3:84:0e:d9:84:be:15:41:ec:
                    3f:f0:56:df:27:b1:03:c2:8d:d7:f0:f2:78:3d:24:
                    d5:86:29:f9:6f:d3:65:32:22:7a:4b:01:b5:ef:8d:
                    40:76:ac:d6:bf:62:a3:ee:3f:35:4d:1f:09:08:6f:
                    0c:cc:5e:48:8b:14:61:6c:9b:6b:97:8f:a6:29:ff:
                    0a:f9:1b:06:d8:83:c0:f1:51:42:6d:b8:f4:21:62:
                    81:7f:39:4d:98:53:89:ef:0e:9a:05:f7:aa:10:97:
                    67:1b:58:1a:f7:48:fe:de:91:22:d1:b0:93:c4:4b:
                    cc:2e:3f:22:0b:42:f7:de:71:71:fe:07:bd:e2:3c:
                    6e:d0:57:07:7a:e6:a4:7c:2a:8f:e1:0d:d4:9c:54:
                    82:26:8e:56:ed:00:40:3f:f5:d9:2e:65:4f:4f:5b:
                    58:c2:04:5a:d2:2a:58:65:6b:61:be:c3:47:29:bf:
                    d7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:BA:2E:77:B4:C0:AD:43:B7:61:62:02:D5:19:2C:F0:0A:15:85:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/3afec97c-65ca-375c-91bc-485c335688db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:8d:4b:73:e0:79:0a:c6:6e:b2:4e:71:06:11:35:79:ee:24:
         38:f5:c7:1c:39:2a:e5:bf:80:cb:d6:f1:6c:5c:83:cf:b3:de:
         2e:ec:03:b5:01:5d:57:92:ec:ec:c9:ec:b8:36:03:e1:52:26:
         73:1d:65:f1:12:0a:86:33:a1:54:68:2a:7f:a1:34:a4:83:f8:
         ee:96:4c:cb:de:af:8e:93:55:65:f2:dd:12:fb:b7:be:e5:e3:
         f2:a7:98:74:74:1e:1b:f3:aa:92:84:18:01:e7:a1:6a:0e:3b:
         8c:92:71:44:af:5e:ad:75:cb:20:e5:7d:49:fe:8f:ff:42:f3:
         ba:68:2a:f2:f6:8f:e6:8f:92:72:57:55:0b:85:66:4a:92:b9:
         18:39:cd:e0:fe:75:6b:62:df:86:54:44:ed:1f:80:cb:98:1e:
         29:40:26:6f:25:02:cf:2b:83:b5:9a:2b:d5:d7:78:82:3c:8a:
         33:6e:02:4e:73:25:f8:f1:69:09:29:f0:bc:3e:9d:97:09:27:
         7b:54:1f:34:70:73:e2:1b:65:37:66:92:ac:08:0e:04:1d:f9:
         91:14:10:45:72:65:95:99:d3:47:b2:97:25:f1:fa:1d:94:de:
         64:87:51:d2:13:b4:85:e0:bd:d2:48:fd:19:ea:05:79:3a:1d:
         e1:85:e6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:15:17 2026 by rpki-client