Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/776c90f5-200f-31bd-9a71-19940fb21b23.roa
File:                     776c90f5-200f-31bd-9a71-19940fb21b23.roa (raw, json)
Hash identifier:          hyLjS5kUnX0TqSGXHtLOh1cx5JM3Z2pUDLNLT5OMbOc=
Subject key identifier:   52:B7:B6:BC:28:3E:BC:4E:38:46:92:A4:50:F7:C7:9C:2A:92:11:A4
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CEECDF9222DACCDCDC100
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/776c90f5-200f-31bd-9a71-19940fb21b23.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     18779
IP address blocks:        173.245.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:ee:cd:f9:22:2d:ac:cd:cd:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=3678bc20-e85d-45e4-bd13-c747bcb40a4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fa:a8:d6:24:50:0d:ed:80:2e:d9:bc:48:5f:
                    95:5b:7d:81:7c:79:a1:11:b0:15:fb:04:e9:d2:18:
                    dc:ef:f6:63:d1:22:d4:c3:e5:ae:00:23:a0:ec:90:
                    03:bd:a1:be:b2:b2:5d:a4:33:bc:ea:38:1f:f2:1f:
                    0e:d6:bc:0b:e9:76:a2:4b:53:79:5d:dd:56:c2:21:
                    fb:7d:d9:ea:ed:e3:df:ee:5b:50:c6:2f:c7:b6:07:
                    15:4d:a1:f0:a6:ff:4a:84:3e:57:22:24:cf:85:9f:
                    f7:f0:bb:81:38:95:d1:50:04:d9:11:67:e1:a0:03:
                    ad:d7:47:6f:10:23:3a:f7:8d:9f:db:36:ae:b9:1f:
                    90:56:35:06:0e:3f:47:5d:f3:10:cb:f4:9e:49:99:
                    c8:08:e6:a5:ff:d2:e5:0c:0d:cd:d2:eb:dd:98:7d:
                    11:a7:b3:f4:14:e2:3b:d7:7c:1b:bc:d4:4e:b3:03:
                    6d:54:50:62:10:fd:20:23:1a:3c:c5:9d:6b:ae:75:
                    79:dd:ba:d0:27:4a:c2:d8:d1:a7:27:fb:de:a0:7e:
                    7e:05:fe:fe:22:cd:e0:bf:96:9c:7e:51:53:72:7b:
                    28:a4:f7:0a:70:92:39:86:74:b3:fc:e8:5e:86:dd:
                    e6:62:56:a0:4f:55:d4:2e:ba:d8:4c:16:fe:7b:67:
                    04:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B7:B6:BC:28:3E:BC:4E:38:46:92:A4:50:F7:C7:9C:2A:92:11:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/776c90f5-200f-31bd-9a71-19940fb21b23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.245.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:b4:e2:db:6b:eb:71:36:1a:67:86:75:1f:55:c1:6b:a6:17:
         29:cf:98:d6:71:77:bd:72:f6:c3:5f:b6:a0:ca:cd:92:d5:a7:
         58:b1:81:e3:07:f9:ac:1c:f1:f7:f8:9c:cb:eb:9d:f7:46:6d:
         96:ff:49:72:44:f7:61:e6:5f:c9:3d:14:a1:20:81:0e:0b:43:
         3e:da:54:da:65:7c:fb:0d:c7:d1:ea:66:84:da:1f:8d:19:34:
         ad:8e:4b:f8:4c:39:16:1e:29:e7:74:70:c6:55:b0:23:dd:04:
         74:a9:66:5c:99:cb:46:2a:bd:08:55:ae:dc:ed:e7:30:b6:71:
         52:2d:8c:57:5f:24:ac:14:f9:40:91:15:92:b2:69:e6:67:41:
         1e:fa:14:d9:ef:e5:0a:d1:73:36:40:32:da:3a:04:3a:53:3a:
         f9:8a:65:97:f0:fb:9e:a1:bd:8c:23:c3:7f:79:1c:07:1e:85:
         fe:a2:2a:b1:8f:36:0b:2d:c9:39:e0:c2:e6:fd:f0:ec:97:10:
         36:29:ce:c8:9d:82:cf:25:1c:61:39:e8:71:76:99:e5:84:e4:
         b8:90:85:93:c3:5a:8f:c7:65:0b:38:8e:a3:b9:d0:a9:9b:a3:
         60:27:c8:ea:87:6a:c3:dd:34:19:5a:28:4f:85:4b:3a:57:90:
         ec:9f:bd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:44:12 2026 by rpki-client