Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/bcb42045-9e2e-3fc8-8560-797e1e271414.roa
File:                     bcb42045-9e2e-3fc8-8560-797e1e271414.roa (raw, json)
Hash identifier:          tqYCGZuch6rYAGBQRCBrxWms46PFMggsWq5tQYJDI1o=
Subject key identifier:   7C:30:43:C7:A7:5F:B6:39:66:82:45:E6:A5:99:8E:AB:2F:B4:59:85
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CCE4C24F38EFBC6744DA0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/bcb42045-9e2e-3fc8-8560-797e1e271414.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     10557
IP address blocks:        216.172.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:ce:4c:24:f3:8e:fb:c6:74:4d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=ebfab92e-d8c9-47f8-ad81-54f885b8bab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:37:d8:a6:27:d5:d4:72:1e:b9:5b:de:b6:28:
                    a9:b4:a0:35:d9:c9:8c:b8:d6:01:52:a5:b9:e8:69:
                    ac:b4:4f:f1:cc:8f:e0:04:90:dc:16:11:c8:8a:46:
                    bd:a2:a4:d4:42:8f:d8:fc:6a:c2:d7:a9:bf:1c:bd:
                    60:a6:88:3c:97:dd:ba:23:a2:85:2c:75:d8:15:04:
                    25:33:c3:49:82:bb:e7:6f:13:e0:b1:1e:89:1a:33:
                    ae:fb:f9:57:07:91:eb:c7:20:df:03:da:00:69:47:
                    2d:62:e1:1c:b6:99:ef:b1:48:83:9b:d1:ee:7a:21:
                    93:58:10:12:7d:47:2c:8a:e9:69:79:15:f3:91:93:
                    b0:51:c5:bd:5a:14:09:c5:ef:7c:4d:e5:3a:4c:62:
                    20:8b:ad:71:92:71:37:fe:fa:81:bf:99:df:68:aa:
                    8b:c7:27:3c:fa:ba:dd:c4:83:44:75:42:88:a6:68:
                    18:c7:3e:59:b4:a4:25:32:ac:68:f8:bc:3c:bd:d9:
                    c9:2a:b1:52:cc:ab:7b:9d:ab:b8:24:5d:8f:36:6a:
                    ca:e1:09:f5:42:d0:8c:91:45:1f:7b:cc:dd:49:4c:
                    96:81:f8:f7:ac:00:a4:2a:f1:9a:b5:f4:22:5d:f3:
                    52:e0:38:ab:49:b4:6b:11:b9:94:25:ff:5d:50:5b:
                    c4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:30:43:C7:A7:5F:B6:39:66:82:45:E6:A5:99:8E:AB:2F:B4:59:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/bcb42045-9e2e-3fc8-8560-797e1e271414.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.172.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:0a:95:04:c9:04:67:96:92:c9:54:61:44:97:7c:ff:56:57:
         6d:00:86:b2:f2:f4:6d:c1:c6:27:fc:25:1c:83:4a:fb:05:a0:
         76:87:94:5a:df:63:6a:d1:e8:31:6c:57:46:39:c1:46:76:2b:
         15:bf:90:e9:bc:06:57:79:9b:8f:80:3c:0b:ae:75:f6:88:25:
         33:a7:d0:93:08:01:17:f4:54:97:ad:84:4c:de:6d:ac:38:b9:
         bd:38:a1:ce:24:f3:79:e2:0b:33:bd:c5:cb:4c:88:b8:5d:3c:
         36:b3:af:73:d9:46:79:2d:9b:38:7a:3c:f8:6b:e2:8c:9c:68:
         e7:da:97:65:f4:66:62:de:88:13:f4:6e:2b:3d:91:29:44:64:
         81:a1:48:e0:61:da:65:28:ec:d0:f2:51:78:13:3d:e9:85:6a:
         88:5a:f6:27:80:d5:7f:14:89:d3:ef:22:35:ad:78:ef:0c:38:
         48:72:48:d5:18:0b:37:be:62:59:6b:ab:9a:f7:8f:8a:fc:c8:
         58:0d:c1:45:61:c6:f6:dc:47:71:79:bf:0e:8f:5f:61:2e:89:
         69:b8:f7:0f:14:3f:5b:f1:5d:3e:7d:1f:c4:d0:33:fe:0d:e4:
         19:a2:dd:bd:a8:b8:af:70:59:b0:33:4f:90:b4:96:8a:98:73:
         c7:8e:e6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:31:28 2026 by rpki-client