Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/7d38eb3b-571b-3062-94bf-b1fa39eada4a.roa
File:                     7d38eb3b-571b-3062-94bf-b1fa39eada4a.roa (raw, json)
Hash identifier:          M3Y0l1LM3V5BkUbExW4I2XDxsMzTjEklcRmhGwuOmF4=
Subject key identifier:   40:D3:E6:1C:C9:AB:B4:24:69:38:48:2B:E3:B3:1C:3B:24:5F:26:D6
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CA86E54408E9F671B3700
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/7d38eb3b-571b-3062-94bf-b1fa39eada4a.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     834
IP address blocks:        172.252.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:a8:6e:54:40:8e:9f:67:1b:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=bdbb6e84-7198-4cb4-9638-06b43dc4d0a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d7:1b:16:9d:2d:73:f8:4f:d3:37:0b:f6:b0:
                    1e:64:7c:7a:f2:33:d2:e7:c1:cc:45:78:32:fc:7d:
                    bf:33:15:13:31:93:40:e2:5f:b8:9b:0b:a7:0e:66:
                    9a:d4:c8:db:44:44:1d:af:4d:91:09:5c:2e:dc:cc:
                    fc:96:19:b1:42:8b:ee:ab:91:44:53:25:3b:40:f8:
                    8b:8b:84:67:31:c9:38:5e:9e:53:cf:b0:7e:fa:3e:
                    2d:02:71:d9:14:6c:79:0f:fc:a7:67:a1:c7:2b:79:
                    6e:a9:cb:41:fa:81:9e:84:70:48:17:0e:4e:4c:87:
                    fb:76:71:56:36:7c:73:9a:df:6d:c4:cd:bb:6f:90:
                    d0:47:45:35:fa:37:aa:a7:79:b8:e7:48:75:d4:62:
                    7c:1f:33:de:79:f1:1b:71:e6:c7:0c:68:51:f5:c8:
                    6e:af:f6:00:69:b5:6d:47:6b:6b:1d:56:c7:f8:0c:
                    1d:1d:d8:b5:ce:46:93:0a:a5:58:9e:f8:f6:c1:3d:
                    15:9c:8f:f9:16:dd:8e:e4:fd:e2:ad:66:dc:fb:ac:
                    cd:ca:94:b3:8e:72:e8:e5:c3:ff:d4:01:3e:31:6c:
                    20:73:28:03:fa:a6:12:4d:7c:d5:40:1d:bf:22:55:
                    c6:46:6d:7b:c0:ea:36:df:a4:f6:1a:07:71:b9:98:
                    4f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D3:E6:1C:C9:AB:B4:24:69:38:48:2B:E3:B3:1C:3B:24:5F:26:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/7d38eb3b-571b-3062-94bf-b1fa39eada4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:04:6a:8b:f5:f2:3e:f7:5d:36:3b:dd:ae:e9:cd:48:eb:30:
         66:78:87:72:1e:20:d9:b5:ab:94:6c:0e:ad:e3:d6:ad:16:f1:
         08:ad:b9:eb:e9:5e:8c:88:d3:70:f9:86:55:a5:f9:07:4b:f1:
         c8:53:8a:6b:c5:91:05:32:61:2a:45:64:6f:13:6d:53:73:ae:
         7e:d9:62:c0:d0:c2:a3:ab:3d:75:c8:5b:17:b2:c3:95:01:e5:
         4c:6e:47:45:cd:97:87:3c:79:66:e1:72:4b:7a:b1:5c:10:90:
         3b:da:de:2f:8a:2d:78:2e:41:61:32:46:37:74:99:a6:dd:6d:
         1a:63:1b:fd:7d:42:a8:7b:73:97:f2:0d:7a:87:5c:53:37:1d:
         cb:39:34:af:6f:cd:f0:78:c7:5e:8e:15:ad:44:4b:ee:2c:8f:
         cb:80:09:9b:1b:02:1b:28:17:0b:7f:fc:d4:08:36:e4:db:0b:
         df:81:47:15:89:f5:f1:5f:88:c2:b0:8e:8d:b8:3c:5a:70:b3:
         a7:e4:dc:29:41:d3:01:f7:c8:57:d0:8d:73:66:9f:00:93:7c:
         08:6b:7a:fa:f3:7f:cf:5f:94:93:42:ac:9a:7e:a8:99:8c:d0:
         5c:f5:28:3f:2f:70:07:85:f7:3b:59:66:f3:f6:76:c4:f0:be:
         19:bd:3b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:45:42 2026 by rpki-client