Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f0ba83a0-535c-39d5-b40e-1e2d08630fd7.roa
File:                     f0ba83a0-535c-39d5-b40e-1e2d08630fd7.roa (raw, json)
Hash identifier:          mSgFenZEG2xQt4uVsMUfpvdiOMFQuCcQAiYr+8rj0LY=
Subject key identifier:   43:FD:DC:F9:F9:97:08:35:CD:94:3D:6B:17:0B:37:75:86:10:E9:88
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CCB0C955B4A0C3C1C4180
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f0ba83a0-535c-39d5-b40e-1e2d08630fd7.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     398781
IP address blocks:        172.252.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:cb:0c:95:5b:4a:0c:3c:1c:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=254ea46a-4711-498b-ba73-232be989806c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6d:39:45:0f:81:98:99:44:43:91:68:51:50:
                    4d:5b:f4:95:3d:43:4b:3e:dd:92:05:7e:87:de:68:
                    e5:65:ad:be:da:a1:d3:7b:62:ba:dd:42:84:3a:74:
                    15:d4:93:3d:1a:e3:15:67:df:45:5f:fd:b8:54:95:
                    50:9f:90:34:af:55:68:2b:9d:9e:68:d2:11:93:73:
                    0a:f6:87:7e:7c:6a:29:cd:5b:a1:a3:59:63:0e:5f:
                    c0:1e:13:2d:32:fc:22:8a:e9:ba:c2:ed:19:3d:a9:
                    96:85:b5:1b:13:f4:ce:d7:b8:db:93:bc:29:88:61:
                    a6:fe:c5:33:0e:3e:e2:0c:55:bf:8c:40:bc:bf:2a:
                    fd:a7:cb:8e:ea:64:ea:2f:4c:2b:d3:67:8d:43:00:
                    a9:6b:4b:d0:b6:eb:87:10:b8:4d:4f:1f:a1:c8:11:
                    e9:3d:63:c3:01:ca:e2:aa:30:db:5c:6f:a7:ba:58:
                    52:b5:38:93:7f:29:39:10:4f:bf:f3:fc:e9:25:b2:
                    28:c2:35:e1:49:8d:56:08:3d:ea:55:e3:10:d0:6f:
                    d7:89:c8:95:f3:83:07:ed:84:11:34:a1:9f:83:a1:
                    48:21:88:90:c3:0d:be:81:30:61:b2:a6:be:6f:9e:
                    26:92:55:9f:66:ad:aa:31:66:80:73:b1:80:2c:fa:
                    0f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:FD:DC:F9:F9:97:08:35:CD:94:3D:6B:17:0B:37:75:86:10:E9:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f0ba83a0-535c-39d5-b40e-1e2d08630fd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:06:c1:7e:b5:fc:7c:65:b8:48:5c:1f:e4:ab:59:c0:4a:72:
         55:a5:0d:fa:f8:82:6f:b4:2c:b7:f3:3f:38:ef:7f:5d:db:8c:
         b0:de:5c:3c:bb:5c:e6:77:cd:37:e5:39:27:93:47:ab:12:8a:
         6b:2c:d1:99:7a:33:cf:ba:54:8c:43:fe:b4:f8:59:8d:c0:07:
         d4:38:60:70:dd:72:75:a8:b4:f7:67:1e:14:7a:14:82:82:6c:
         ed:13:17:f2:60:25:84:77:12:49:c8:64:ea:5e:7b:5f:64:8d:
         d6:f1:52:5c:1a:56:79:77:19:52:05:1d:b8:1c:f3:c8:de:23:
         03:f7:91:df:7a:95:9d:8d:f4:22:7e:6b:f4:c2:3e:0a:87:08:
         cb:76:e8:f8:f9:67:52:16:9c:b1:02:6a:0a:92:79:5f:8f:11:
         68:cb:12:db:36:28:69:fc:13:04:07:cb:79:d9:62:6f:ce:1e:
         8d:4f:c7:05:eb:10:28:db:e1:c6:5c:7a:a6:86:de:e7:d5:16:
         f9:ef:25:92:2d:fe:51:d4:d2:1f:9d:d8:95:75:c3:94:c7:8f:
         93:ec:a8:a6:fc:b5:0f:7e:8d:71:63:34:7d:2b:e6:70:24:f0:
         ae:3a:1a:0b:57:ae:c1:ee:9c:9b:5f:be:53:b7:e4:66:ac:6f:
         49:17:c9:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHMsMlVtKDDwcQYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk
MjU0ZWE0NmEtNDcxMS00OThiLWJhNzMtMjMyYmU5ODk4MDZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1m05RQ+BmJlEQ5FoUVBNW/SVPUNLPt2SBX6H
3mjlZa2+2qHTe2K63UKEOnQV1JM9GuMVZ99FX/24VJVQn5A0r1VoK52eaNIRk3MK
9od+fGopzVuho1ljDl/AHhMtMvwiium6wu0ZPamWhbUbE/TO17jbk7wpiGGm/sUz
Dj7iDFW/jEC8vyr9p8uO6mTqL0wr02eNQwCpa0vQtuuHELhNTx+hyBHpPWPDAcri
qjDbXG+nulhStTiTfyk5EE+/8/zpJbIowjXhSY1WCD3qVeMQ0G/XiciV84MH7YQR
NKGfg6FIIYiQww2+gTBhsqa+b54mklWfZq2qMWaAc7GALPoPDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEP93Pn5lwg1zZQ9axcLN3WGEOmIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvZjBiYTgzYTAtNTM1Yy0z
OWQ1LWI0MGUtMWUyZDA4NjMwZmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPx0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGIGwX61/HxluEhcH+SrWcBKclWlDfr4gm+0LLfzPzjvf13bjLDeXDy7
XOZ3zTflOSeTR6sSimss0Zl6M8+6VIxD/rT4WY3AB9Q4YHDdcnWotPdnHhR6FIKC
bO0TF/JgJYR3EknIZOpee19kjdbxUlwaVnl3GVIFHbgc88jeIwP3kd96lZ2N9CJ+
a/TCPgqHCMt26Pj5Z1IWnLECagqSeV+PEWjLEts2KGn8EwQHy3nZYm/OHo1PxwXr
ECjb4cZceqaG3ufVFvnvJZIt/lHU0h+d2JV1w5THj5PsqKb8tQ9+jXFjNH0r5nAk
8K46GgtXrsHunJtfvlO35Gasb0kXyac=
-----END CERTIFICATE-----
Generated at Tue Sep 22 16:58:29 2026 by rpki-client