Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/43d0fad5-93c5-3a9d-8d0d-342995ebcc56.roa
File:                     43d0fad5-93c5-3a9d-8d0d-342995ebcc56.roa (raw, json)
Hash identifier:          7jkqlybtlQxo1v+iMwGNULPAZGucjCSKQTHt6NlxR1Q=
Subject key identifier:   92:56:62:4A:65:E0:57:00:8B:0B:67:D3:DE:15:7E:EF:0D:49:D2:DE
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584F38B26FFB84E730756918DDC0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/43d0fad5-93c5-3a9d-8d0d-342995ebcc56.roa
Signing time:             Sat 19 Sep 2026 01:00:12 +0000
ROA not before:           Sat 19 Sep 2026 01:00:12 +0000
ROA not after:            Fri 18 Dec 2026 02:00:12 +0000
asID:                     2914
IP address blocks:        172.252.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:38:b2:6f:fb:84:e7:30:75:69:18:dd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Sep 19 01:00:12 2026 GMT
            Not After : Dec 18 02:00:12 2026 GMT
        Subject: CN=e82a2397-0c9a-4bd8-9432-56f18f45df1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:40:ce:cd:cc:47:7e:1b:76:90:2b:3d:03:7c:
                    a6:8f:cb:4d:b2:32:6a:8a:9c:f7:47:75:03:e2:e2:
                    cf:c4:3f:78:e2:dc:da:d2:de:4e:3c:9d:08:8e:24:
                    03:96:4b:ac:2d:be:c4:52:84:35:85:a5:1a:6c:f4:
                    f9:7a:29:0c:50:bc:51:1e:21:fa:0c:4e:93:97:2e:
                    5d:b1:df:8d:54:d6:bc:55:9a:07:48:00:d5:b6:25:
                    09:41:55:c6:91:56:d8:a3:c6:a9:0d:13:5d:35:f6:
                    24:59:e8:ae:22:70:c5:7c:e6:d4:7d:d3:b6:72:0a:
                    90:18:c2:52:a6:60:4a:f9:ee:c9:80:05:07:bd:0b:
                    6e:1f:f1:e3:83:07:41:72:90:56:54:4d:43:3c:74:
                    ba:81:9d:6f:e1:21:0b:68:49:68:1c:29:0b:f0:ce:
                    df:be:1d:5d:2a:86:64:a6:ae:a6:c7:bd:37:8e:23:
                    2b:21:ec:f5:48:4b:8f:15:1b:b1:62:3f:56:76:a9:
                    57:b5:b2:dd:3a:73:f5:1a:f4:ac:ab:10:15:c3:67:
                    d2:63:7f:a8:54:b3:ab:ee:ca:1b:e1:ce:73:5e:29:
                    32:09:84:45:58:58:81:3e:c2:ef:c9:ad:80:2d:37:
                    6d:dd:93:44:6b:a5:a9:0e:d6:75:8f:0a:07:a7:50:
                    9a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:56:62:4A:65:E0:57:00:8B:0B:67:D3:DE:15:7E:EF:0D:49:D2:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/43d0fad5-93c5-3a9d-8d0d-342995ebcc56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:17:72:09:9b:05:7c:04:45:2c:f2:a1:40:48:36:2f:92:73:
         62:65:61:b2:92:6e:1e:65:da:3d:48:11:fa:cd:f3:b0:22:88:
         72:1d:aa:06:9a:51:1f:92:44:55:82:25:70:ef:db:4d:82:bd:
         fa:12:1f:4a:a5:bc:12:d2:29:ba:e3:9c:36:2f:1b:43:98:07:
         97:f4:31:b3:25:f8:bd:2a:60:9b:ed:73:aa:d9:82:65:38:6e:
         9d:fb:54:73:75:1f:10:80:7b:97:ef:53:6f:9c:cd:4f:ff:a9:
         76:af:cf:75:50:8a:1c:2e:73:5f:f3:fc:37:9b:19:47:46:05:
         b7:e9:6c:89:0c:a1:91:dc:39:7d:f1:48:7f:87:2b:3f:51:b0:
         a5:38:9c:a8:80:35:d5:58:49:2f:ad:53:74:b7:d4:dc:d3:91:
         da:37:0b:2f:b6:a4:34:ba:c3:f0:ef:7b:20:b6:f2:06:60:72:
         18:39:89:c2:f5:16:62:a6:f5:bc:dc:35:e5:1f:ac:35:a3:95:
         ae:87:c8:26:d7:37:02:26:19:58:35:33:42:97:b5:6b:11:c3:
         cf:d0:95:61:cf:0e:3d:8b:42:1d:ba:4d:56:6e:3c:4a:9d:d4:
         fa:5b:86:12:34:8c:1f:cd:5f:ee:1b:82:da:71:8c:94:bb:ab:
         15:1a:5e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:52:19 2026 by rpki-client