Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/548cfbb7-cdd0-3b56-b2e7-c439fbc54f8a.roa
File:                     548cfbb7-cdd0-3b56-b2e7-c439fbc54f8a.roa (raw, json)
Hash identifier:          qjdmV/ZOESc4habFqUeNfQtDTZqId9sFNOUL1gUTl1A=
Subject key identifier:   1D:EE:10:64:49:19:2F:36:26:19:12:71:6D:E4:4C:DE:13:D6:96:E3
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CDF8B9914ACD31ACF6480
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/548cfbb7-cdd0-3b56-b2e7-c439fbc54f8a.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     18779
IP address blocks:        172.252.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:df:8b:99:14:ac:d3:1a:cf:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=362235e1-04e5-4f1f-8ff2-1dc5926ae460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8e:9b:76:3a:f0:05:56:67:ee:98:43:c4:de:
                    f0:c2:31:4d:f9:56:8a:33:7b:4f:c8:1e:31:fd:bb:
                    2b:84:a2:d6:2d:ac:0b:ea:a8:07:09:03:93:d9:04:
                    0d:41:c3:f5:bb:e3:43:26:c9:0f:44:11:36:74:d8:
                    31:03:84:0a:ab:02:4e:dc:b8:59:20:ca:cb:e2:ed:
                    a8:9f:be:df:f7:cb:0f:e0:11:3f:15:3b:61:ad:d8:
                    e7:14:e8:5d:07:01:20:a3:8e:fd:45:b3:39:53:f0:
                    cb:2b:6f:17:0d:dd:8e:fd:2f:fb:10:b0:38:78:fa:
                    60:f2:78:c5:d1:97:c2:35:21:2f:36:a7:1a:42:13:
                    f7:35:2a:7b:e4:ff:e2:13:cb:65:7d:f2:4b:1d:9d:
                    fb:1a:f7:92:3b:ce:cd:f9:80:e8:23:31:b5:2b:3c:
                    a7:00:8e:d8:4e:67:44:f9:c4:25:4a:93:78:62:e6:
                    45:dd:23:fa:e9:e3:f7:5d:25:e6:72:d8:9e:06:8f:
                    01:4a:3f:89:bb:5d:d8:6e:71:74:b3:5f:a6:70:3b:
                    06:f6:4e:26:35:b1:b5:25:e0:16:6a:96:9c:90:d4:
                    33:3d:9b:6d:c4:79:34:b2:c0:e9:95:68:96:72:c9:
                    46:fc:c7:53:cf:1b:70:e8:89:7f:1a:a6:b3:9d:16:
                    62:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:EE:10:64:49:19:2F:36:26:19:12:71:6D:E4:4C:DE:13:D6:96:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/548cfbb7-cdd0-3b56-b2e7-c439fbc54f8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:71:05:88:e7:8c:2a:db:5f:94:fd:ea:06:11:97:ef:d5:3a:
         00:90:39:28:a3:bb:69:12:f9:fd:da:03:d2:4a:51:7c:44:b5:
         35:e5:06:70:e0:05:84:de:e1:09:0b:1f:4a:ae:a3:b9:c9:61:
         aa:9f:c4:02:e6:46:7e:47:01:cd:bb:89:7f:54:58:fe:55:3b:
         98:7c:0d:33:e4:6e:8a:30:66:29:a9:5c:56:03:eb:06:87:f0:
         86:48:d4:05:50:12:62:0e:95:ad:94:13:e1:2e:a0:ff:50:44:
         51:5e:7b:15:17:80:8d:06:60:6f:a4:ec:a1:c0:35:74:67:68:
         15:aa:40:b8:22:a7:9f:15:6b:c5:d8:cc:04:ef:e2:68:d8:19:
         bb:e2:65:9a:8d:f8:9c:87:35:0e:52:e5:64:dd:46:8f:8e:18:
         01:c0:72:f9:33:12:96:dd:4f:32:c1:49:bd:50:ed:9b:89:ff:
         3c:c5:12:49:83:67:1c:f4:98:53:13:ef:16:5c:9c:5b:d2:fe:
         1f:96:a9:19:66:9e:7d:3b:c9:a0:7d:f6:a2:6f:93:8e:e0:cd:
         4a:05:47:3f:69:ca:0a:2a:67:75:72:69:21:ab:37:b0:32:05:
         1e:4b:7f:e3:70:dc:a8:63:0a:5d:ab:cb:72:70:d0:69:0c:1c:
         f7:76:26:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:57:41 2026 by rpki-client