Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/affc6be4-bd20-3674-adc8-208dbd2aaf3f.roa
File:                     affc6be4-bd20-3674-adc8-208dbd2aaf3f.roa (raw, json)
Hash identifier:          NkoS8KFQy1f3eb6QOi9Hlpuzg9S9E6ns086IKg1QLLg=
Subject key identifier:   69:01:71:E0:B1:93:B7:64:C5:B0:91:9B:44:7C:8D:BE:68:A6:FE:7E
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584DF771DE583AFEEDACA1AF01A0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/affc6be4-bd20-3674-adc8-208dbd2aaf3f.roa
Signing time:             Tue 26 May 2026 23:15:40 +0000
ROA not before:           Tue 26 May 2026 23:15:40 +0000
ROA not after:            Mon 24 Aug 2026 23:15:40 +0000
asID:                     3561
IP address blocks:        172.252.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f7:71:de:58:3a:fe:ed:ac:a1:af:01:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: May 26 23:15:40 2026 GMT
            Not After : Aug 24 23:15:40 2026 GMT
        Subject: CN=d3efee0e-c16c-4a02-b174-5eaf33f1bcd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:df:2f:17:11:70:7c:64:d0:0f:fd:07:32:89:
                    95:f1:ac:ed:22:a2:aa:47:bd:c9:06:46:61:7e:a5:
                    2f:0b:76:44:1d:f1:df:cc:91:ae:6a:df:2b:97:2a:
                    80:f8:c3:5e:3e:1d:8e:4a:ad:3c:0c:55:1c:21:84:
                    6d:a8:7e:24:b7:fd:c1:f3:8d:58:d6:ce:97:cd:0a:
                    3e:c1:7d:86:a7:a5:f2:d1:bf:70:f8:4d:89:3e:e2:
                    da:d5:01:65:f1:9f:ab:ef:bc:4a:82:4b:61:af:a8:
                    99:3e:93:a1:47:ff:9e:d7:a1:42:ab:af:87:5f:9a:
                    68:a6:2e:79:23:4a:f7:d3:0a:b7:61:d3:89:23:08:
                    43:fb:a1:79:62:a8:37:43:59:01:ee:bc:d8:49:75:
                    5f:2a:96:ca:f2:1c:a9:58:89:eb:a2:a5:a8:dd:95:
                    7e:35:75:6c:2b:4a:d4:cf:d3:b1:31:2e:53:76:4b:
                    a2:4a:94:7d:cf:42:fd:12:a8:1d:3e:97:6b:c2:27:
                    29:98:ca:c3:3c:99:b0:a1:4d:6c:a3:06:86:06:cd:
                    19:9f:24:4a:a6:f8:a3:ef:6a:79:1c:93:b1:24:1d:
                    2a:15:95:35:85:e3:a0:30:88:6c:9e:08:c3:7e:88:
                    96:6e:c6:ae:57:ff:94:72:9e:59:99:67:04:04:ea:
                    9e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:01:71:E0:B1:93:B7:64:C5:B0:91:9B:44:7C:8D:BE:68:A6:FE:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/affc6be4-bd20-3674-adc8-208dbd2aaf3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:25:6e:7a:e9:7a:b8:1e:9e:2a:4f:2a:5c:d6:ce:d2:b2:85:
         28:25:a2:60:c5:48:e3:fb:45:ca:d6:1f:6d:e6:1b:a7:ac:65:
         f0:97:fd:9d:9d:40:aa:16:e5:84:2c:83:ef:44:d3:84:a5:33:
         77:6c:f4:02:94:28:5a:ec:5f:8e:23:e6:48:d6:c7:67:00:6a:
         0a:0c:2a:bb:39:3b:76:a7:70:ca:aa:05:65:c9:62:d3:84:af:
         21:9e:c6:ba:71:59:b9:e3:2d:f0:a2:81:b0:0f:c1:4e:b4:1e:
         db:ea:bf:36:c5:27:a1:c3:94:80:a0:fe:72:26:ad:69:6d:4b:
         5f:fa:31:30:08:ae:2b:2b:63:3d:18:26:35:32:87:cc:8f:0a:
         cb:29:fd:86:15:f2:65:55:29:5d:23:f9:8c:7f:26:de:97:24:
         c8:3e:9c:97:99:42:d6:bc:fa:46:02:b4:2d:90:38:9c:9e:2e:
         66:e6:88:7b:0f:76:32:8b:92:e5:41:37:bf:bf:ac:5e:2b:ee:
         74:92:5a:c1:37:bb:5b:e2:91:16:bf:7c:19:26:ba:6a:dd:55:
         f3:2f:ad:28:a5:95:bb:ec:6d:a2:7d:4d:ee:73:8d:83:cb:41:
         47:f0:74:41:20:55:74:c6:cf:37:11:de:85:32:c8:d3:78:fc:
         dc:fc:17:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE33cd5YOv7trKGvAaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDUyNjIzMTU0MFoXDTI2MDgyNDIzMTU0MFowLzEtMCsGA1UEAxMk
ZDNlZmVlMGUtYzE2Yy00YTAyLWIxNzQtNWVhZjMzZjFiY2Q4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy98vFxFwfGTQD/0HMomV8aztIqKqR73JBkZh
fqUvC3ZEHfHfzJGuat8rlyqA+MNePh2OSq08DFUcIYRtqH4kt/3B841Y1s6XzQo+
wX2Gp6Xy0b9w+E2JPuLa1QFl8Z+r77xKgkthr6iZPpOhR/+e16FCq6+HX5popi55
I0r30wq3YdOJIwhD+6F5Yqg3Q1kB7rzYSXVfKpbK8hypWInroqWo3ZV+NXVsK0rU
z9OxMS5TdkuiSpR9z0L9EqgdPpdrwicpmMrDPJmwoU1sowaGBs0ZnyRKpvij72p5
HJOxJB0qFZU1heOgMIhsngjDfoiWbsauV/+Ucp5ZmWcEBOqe6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGkBceCxk7dkxbCRm0R8jb5opv5+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvYWZmYzZiZTQtYmQyMC0z
Njc0LWFkYzgtMjA4ZGJkMmFhZjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPwKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFclbnrpergenipPKlzWztKyhSglomDFSOP7RcrWH23mG6esZfCX/Z2d
QKoW5YQsg+9E04SlM3ds9AKUKFrsX44j5kjWx2cAagoMKrs5O3ancMqqBWXJYtOE
ryGexrpxWbnjLfCigbAPwU60HtvqvzbFJ6HDlICg/nImrWltS1/6MTAIrisrYz0Y
JjUyh8yPCssp/YYV8mVVKV0j+Yx/Jt6XJMg+nJeZQta8+kYCtC2QOJyeLmbmiHsP
djKLkuVBN7+/rF4r7nSSWsE3u1vikRa/fBkmumrdVfMvrSillbvsbaJ9Te5zjYPL
QUfwdEEgVXTGzzcR3oUyyNN4/Nz8F84=
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:49:57 2026 by rpki-client