Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b78bc98e-847e-3cce-bb1a-6e4b5035ba93.roa
File:                     b78bc98e-847e-3cce-bb1a-6e4b5035ba93.roa (raw, json)
Hash identifier:          d3KesW2lzfrb/Y8eB38yvjKgDpj7o4psWQYF/nWlS4Q=
Subject key identifier:   AC:82:1D:C9:D3:7A:51:99:29:8C:1C:65:0F:2D:08:0A:9D:2F:BE:72
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CDDCB425361A1B11DE800
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b78bc98e-847e-3cce-bb1a-6e4b5035ba93.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     398781
IP address blocks:        172.252.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:dd:cb:42:53:61:a1:b1:1d:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=b4106eb3-5499-4f57-a66a-512d36782a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:66:35:94:a7:c5:97:ba:38:16:bb:40:e9:2f:
                    35:13:7e:9e:43:02:eb:60:22:39:93:35:96:02:cb:
                    72:20:d9:24:f5:10:83:98:d0:f8:30:89:73:f2:a2:
                    b0:1f:4b:1a:54:dc:bc:a3:76:78:35:f7:9a:58:27:
                    18:ce:cb:0a:03:99:a3:9e:2c:5b:58:de:dc:a4:b5:
                    c4:da:13:48:9a:c6:df:ee:fb:9e:c9:fd:3a:98:3f:
                    ae:5d:7c:f0:83:d2:6c:32:a8:71:fc:ed:de:57:d1:
                    20:28:16:eb:68:3e:be:7b:0e:74:ce:ac:63:05:c7:
                    d7:f6:3a:7c:36:30:8d:5d:4e:5b:88:71:d0:c6:54:
                    76:3b:c8:d2:ed:02:92:cf:a6:41:d4:bd:0e:a3:89:
                    af:a1:2a:fc:7c:ac:39:9d:ad:20:fa:75:28:46:a8:
                    d1:0b:3a:51:dc:4b:dd:e0:d4:b8:08:d6:8a:c9:bc:
                    ea:47:fd:35:7b:87:4b:46:5b:04:59:f8:ef:34:5c:
                    23:53:54:9f:f3:7b:98:4f:72:ad:a9:eb:ed:5a:7b:
                    8f:a5:81:80:d4:eb:3a:3d:be:09:fb:ec:58:fe:4f:
                    16:78:d1:f8:04:22:3e:fe:b9:60:89:e4:d8:66:1e:
                    cf:03:28:26:68:c9:61:e6:91:03:ca:4c:13:ef:0b:
                    d7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:82:1D:C9:D3:7A:51:99:29:8C:1C:65:0F:2D:08:0A:9D:2F:BE:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b78bc98e-847e-3cce-bb1a-6e4b5035ba93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:f3:4c:ea:4f:31:0f:7f:20:03:cd:c2:95:4a:a5:02:00:50:
         a5:b0:af:2b:11:34:8b:c2:85:fc:08:33:76:1e:f6:39:06:7e:
         07:56:b8:b0:73:d6:00:84:95:2e:04:e6:b6:83:46:ee:0a:40:
         cb:ed:1e:4d:38:e6:d4:eb:58:29:f8:39:f6:ba:eb:2a:cd:fe:
         73:1a:94:42:63:ad:71:51:98:29:72:0c:bb:49:79:27:5d:e2:
         bb:6f:34:a6:69:6a:9d:12:85:59:8a:f0:1e:0c:85:b1:da:8a:
         fb:65:84:10:57:71:11:44:14:46:fa:48:a9:cb:78:06:c1:81:
         83:77:aa:23:b0:96:75:e7:ed:d1:d8:73:88:91:91:d5:2b:fe:
         bd:e5:a8:a6:e8:2f:52:87:5c:8c:0c:3e:08:d6:7c:c0:c1:b0:
         0f:54:41:d0:e2:b9:99:19:6d:21:11:0c:0c:d9:e8:3a:84:7b:
         7c:26:a0:14:b4:e2:39:1f:b4:49:b0:89:08:bf:a2:c5:93:18:
         f5:41:7a:d9:08:ca:20:2c:4a:4e:36:5a:fc:56:5b:6f:99:0d:
         12:c6:d0:bc:2e:83:96:38:bd:db:5d:20:3e:f7:c1:07:0c:b7:
         5f:b6:31:a4:c5:8f:3c:06:b2:05:34:a5:6a:a4:f5:cf:18:0c:
         5e:1d:10:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:56:30 2026 by rpki-client