Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/0386c77e-9f8e-386f-a14b-bf8fc9785441.roa
File:                     0386c77e-9f8e-386f-a14b-bf8fc9785441.roa (raw, json)
Hash identifier:          /76vxd+6jcS2X8fDq6Vn4Z/wgVgezflduY0C/67GxeE=
Subject key identifier:   12:D2:F2:2B:50:C0:A4:B4:34:6A:42:20:D3:9C:39:39:08:F1:A3:5E
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDC5206A17644697B817C00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/0386c77e-9f8e-386f-a14b-bf8fc9785441.roa
Signing time:             Tue 07 Apr 2026 16:28:36 +0000
ROA not before:           Tue 07 Apr 2026 16:28:36 +0000
ROA not after:            Mon 06 Jul 2026 16:28:36 +0000
asID:                     18779
IP address blocks:        104.253.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dc:52:06:a1:76:44:69:7b:81:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:28:36 2026 GMT
            Not After : Jul  6 16:28:36 2026 GMT
        Subject: CN=677144b6-ff25-4f5b-92ec-0bc0b7a2db2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e3:50:6f:c0:b4:37:b1:4f:96:0e:53:eb:a6:
                    35:80:5c:97:b4:d7:d0:b4:7e:da:fd:aa:b0:1d:98:
                    0c:d7:f0:e9:2b:4c:ad:a7:4d:c6:31:fc:94:2c:7b:
                    e4:bb:bd:b4:8f:db:2a:9c:fe:a6:ed:a4:80:31:43:
                    75:a6:02:8a:4f:2e:33:73:0f:1e:4a:57:26:07:7d:
                    a3:6d:3f:5b:71:20:7d:f2:0b:44:21:ef:fb:e8:3a:
                    b9:f6:42:b1:cb:22:d8:dc:cb:60:5c:b7:3b:5f:28:
                    5c:8b:d9:c8:09:61:ba:98:51:9b:9c:70:ff:5e:bb:
                    73:3e:53:6a:02:d1:03:c6:6a:bd:87:2f:26:35:f4:
                    c7:0b:44:69:f8:f4:7e:01:0b:40:bc:a0:0a:8a:0f:
                    e1:a1:f3:ae:29:87:01:bf:91:69:28:9a:b6:53:12:
                    2a:7f:f8:0b:cb:cf:19:2d:33:6d:60:1e:c9:55:43:
                    68:4a:c4:6a:82:a1:ef:01:cc:8f:01:35:af:70:7a:
                    bc:dd:30:0a:08:bc:39:cd:52:8d:19:2e:4e:9f:22:
                    53:5c:5e:9f:6f:4d:93:a5:72:c8:03:74:35:7c:25:
                    61:2e:71:30:7a:ee:33:17:84:3a:2d:1f:4f:0a:48:
                    d0:04:89:58:86:ac:fe:cc:5f:d6:cf:51:49:aa:8c:
                    29:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D2:F2:2B:50:C0:A4:B4:34:6A:42:20:D3:9C:39:39:08:F1:A3:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/0386c77e-9f8e-386f-a14b-bf8fc9785441.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:6f:4a:12:82:08:b4:7e:05:27:bb:94:80:0e:ec:fc:ae:2a:
         05:60:21:86:b7:f0:72:68:87:2f:98:b5:8a:87:08:c2:e1:1d:
         77:25:63:24:12:22:9a:eb:4c:05:27:5d:f5:ff:ed:7d:79:08:
         3f:41:69:ef:ed:34:f7:22:16:56:eb:f5:44:c1:e8:e9:96:ab:
         22:bc:4c:f8:9a:62:97:f8:a7:eb:2a:69:c6:73:b3:8a:4d:98:
         33:30:a0:d9:e8:2a:16:24:fa:13:3a:99:98:39:59:c8:70:a0:
         42:78:2c:54:7f:ea:b3:93:4a:b6:5f:ab:ec:8b:68:cf:eb:6a:
         5b:00:13:bf:57:07:61:94:c1:8d:15:84:59:dc:b4:9c:11:31:
         7b:b9:e4:06:d1:3a:45:e9:fb:5b:bb:a7:4b:61:b5:c2:22:41:
         8b:84:23:c5:19:d0:c0:e9:40:27:21:ea:6d:61:8c:3b:8f:72:
         b1:54:a9:0a:49:c7:31:e8:81:73:c3:17:4f:f5:d9:99:02:4a:
         9b:63:d1:ab:2e:14:d5:d8:d4:06:63:e7:8c:7a:b9:ec:ff:7f:
         a1:6e:e4:42:15:70:89:d8:02:e8:e3:1e:7d:8d:69:5f:ac:35:
         d1:e1:20:89:7b:01:f5:25:09:b2:8c:57:99:61:53:f9:1f:70:
         dc:5c:8b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:41:23 2026 by rpki-client