Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/9f19563f-36fd-399c-9ba6-089d4d428404.roa
File:                     9f19563f-36fd-399c-9ba6-089d4d428404.roa (raw, json)
Hash identifier:          vpMvWOVNrMTfOrQv2r8vYCJOaU3pRbJ7GPW+yJB6OOs=
Subject key identifier:   7B:7D:F4:B7:20:77:25:47:5E:0C:C9:D4:8C:37:AF:81:36:98:59:D9
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CDD64CB41188F17DBA080
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/9f19563f-36fd-399c-9ba6-089d4d428404.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     54252
IP address blocks:        172.252.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:dd:64:cb:41:18:8f:17:db:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=6a41b7fc-0ad1-4131-95c8-2a07905961b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d1:45:01:c0:c4:60:f4:2d:19:3c:3a:5f:06:
                    3e:47:88:cd:15:a2:59:a9:bb:c3:68:da:5e:70:5d:
                    ef:84:79:fe:ac:f1:da:77:48:49:d7:16:1a:3d:8f:
                    00:b7:ff:e3:6a:fb:ae:15:82:0c:74:c4:bc:ef:0a:
                    78:f6:69:2e:20:3e:44:58:3f:c3:89:75:4a:50:e4:
                    22:65:7b:68:38:e5:bb:d7:c7:af:89:0a:55:8e:10:
                    b5:0b:bc:e1:25:b4:ae:cb:f1:e5:14:30:81:a5:41:
                    05:3d:bb:b3:88:b2:77:c7:eb:36:37:80:9e:aa:53:
                    37:f4:ef:6e:f7:de:c1:c9:11:7b:f6:91:7e:ef:1e:
                    21:5c:80:4a:d6:8e:57:39:c0:bb:48:8e:2f:9d:dd:
                    43:44:09:72:97:c1:b8:ca:2c:fb:cd:02:23:28:5a:
                    7c:8d:5c:f0:9f:b8:7e:4f:56:9e:47:93:44:f7:5a:
                    a3:d8:24:47:f3:54:dc:2f:83:08:1d:dc:5b:f2:5b:
                    41:70:d9:cd:49:18:39:05:95:51:cc:70:0e:ba:38:
                    32:a8:3d:2b:ad:11:ac:71:e8:01:27:2a:46:b9:b5:
                    b7:b3:99:8f:ca:e1:33:44:06:75:ae:01:01:50:69:
                    cd:b9:74:c5:6a:f9:d8:ac:fd:28:39:02:6a:9e:38:
                    3c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:7D:F4:B7:20:77:25:47:5E:0C:C9:D4:8C:37:AF:81:36:98:59:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/9f19563f-36fd-399c-9ba6-089d4d428404.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:f6:8a:d9:21:72:45:6d:06:ab:cf:3f:9a:dd:78:3c:31:dd:
         91:06:96:d1:b8:32:f0:3e:57:bb:b5:06:5e:c0:a7:84:cf:95:
         09:49:1b:95:3e:b2:0f:1a:33:28:68:b4:66:b7:51:bb:fc:a4:
         04:70:06:51:ce:de:d2:09:c0:44:70:78:a6:df:1f:b2:07:c9:
         3a:74:67:a6:bf:21:5d:0a:2a:ab:56:bb:14:7d:c2:b8:e1:dd:
         33:a1:12:9d:d3:0e:5e:ec:95:a2:16:35:93:c3:a5:d6:91:36:
         94:e0:b8:da:60:82:55:f0:dd:68:d3:94:b8:28:40:48:ed:62:
         69:5f:71:e9:ed:fd:c0:90:ab:c2:e1:e2:f7:28:f1:94:3c:d4:
         d5:76:ac:38:f2:ed:6b:f1:6b:0d:0b:4e:ce:db:eb:e3:e6:c0:
         c2:ff:d0:ca:a7:96:1f:0b:0d:d9:ac:31:b6:ac:a8:23:51:d6:
         89:3f:fe:26:0f:15:2f:b3:df:30:f2:a2:a5:72:f1:65:45:7c:
         35:cc:6f:4d:71:78:a1:7e:fb:15:19:20:d5:cc:51:05:a8:ea:
         1a:0a:5c:db:90:81:21:4c:75:a6:70:3c:7c:88:ff:50:99:f6:
         22:65:19:19:c1:df:52:91:8e:80:23:71:cc:4a:85:4e:00:dd:
         56:1d:c5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:53:18 2026 by rpki-client