Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2bab5a8b-16cd-313e-81c7-4d4cfdcd7808.roa
File:                     2bab5a8b-16cd-313e-81c7-4d4cfdcd7808.roa (raw, json)
Hash identifier:          1SkMF6qehfm/Kd/7jmHBmt/VBn3hOIdHAVH7JGM1xU8=
Subject key identifier:   08:AD:42:7F:36:16:AD:48:F1:FD:18:AB:22:DB:B1:2D:40:23:1D:F5
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDC8381DF2C5E512AAEAB40
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2bab5a8b-16cd-313e-81c7-4d4cfdcd7808.roa
Signing time:             Tue 07 Apr 2026 16:29:00 +0000
ROA not before:           Tue 07 Apr 2026 16:29:00 +0000
ROA not after:            Mon 06 Jul 2026 16:29:00 +0000
asID:                     9009
IP address blocks:        104.253.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dc:83:81:df:2c:5e:51:2a:ae:ab:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:29:00 2026 GMT
            Not After : Jul  6 16:29:00 2026 GMT
        Subject: CN=90db4dc5-4825-41a0-b80a-e321ba7d8d0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:df:fa:06:59:09:9a:78:03:e9:a5:ad:1e:70:
                    00:ea:87:2b:5c:a8:a9:43:b4:3e:34:38:a8:d0:47:
                    ba:17:96:84:1b:22:66:4e:22:58:d1:56:e7:2e:32:
                    bf:83:21:c7:af:6a:d3:30:90:fb:67:5a:07:3e:b6:
                    97:42:ab:a0:e6:73:3f:d2:a9:8b:3d:a0:42:53:d9:
                    4b:c8:0b:38:da:17:da:59:e6:57:9d:39:67:6a:27:
                    0e:89:73:93:8f:c1:af:0a:63:c2:cf:86:07:95:af:
                    b2:8d:d9:fa:8d:3c:81:1e:86:c9:50:a3:49:d1:fb:
                    db:51:fc:19:ba:1f:a4:e7:6a:b0:60:54:0c:ae:6b:
                    b1:8d:6c:19:5e:6f:55:f8:75:23:71:33:73:c6:ab:
                    99:22:17:e0:1f:fb:20:87:07:f2:ae:46:fa:19:23:
                    37:fd:f2:98:5f:60:b7:dc:78:4a:c5:2c:af:d6:d8:
                    c4:b1:b9:5f:8e:4a:2a:e9:f4:a1:56:e1:db:6b:82:
                    35:5f:9b:b8:58:24:54:66:62:32:cc:b0:0a:49:58:
                    98:6f:1f:95:d1:3b:ae:09:6f:86:26:6c:2c:dc:da:
                    97:61:56:7a:0d:29:c1:1f:1c:d2:81:52:c1:8c:73:
                    c9:91:b8:95:30:60:f1:5e:b7:05:34:3e:c1:78:ff:
                    b6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:AD:42:7F:36:16:AD:48:F1:FD:18:AB:22:DB:B1:2D:40:23:1D:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2bab5a8b-16cd-313e-81c7-4d4cfdcd7808.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:a9:9d:b8:80:ca:c1:46:fc:85:fc:db:35:23:78:c6:35:21:
         e8:46:97:9f:40:ff:80:ab:40:47:09:cf:71:e4:99:df:65:a3:
         2f:aa:26:ce:1b:15:f6:3d:ec:c0:2d:7d:b4:27:8a:7d:14:d7:
         2d:36:02:50:eb:90:4b:75:63:63:41:79:18:9e:76:3c:17:36:
         ac:75:d7:64:ad:41:ef:02:f9:09:5a:47:c9:25:09:c4:26:87:
         7d:20:40:21:78:10:d5:ab:57:21:ca:4f:19:69:27:0c:86:9a:
         aa:be:cd:91:72:8d:5e:47:7b:0a:8b:f0:63:ff:e0:bd:75:7e:
         e1:68:fe:c4:2b:de:a0:44:c6:fe:99:aa:75:69:dc:1b:a9:f2:
         62:6e:34:12:b4:38:dd:1f:c2:8a:f8:fa:84:f5:fd:47:3e:63:
         80:e1:c9:65:b4:f3:50:46:bc:28:c6:b9:ff:e7:f0:d2:44:73:
         3b:0d:ee:4e:3c:66:33:d4:1b:72:69:60:db:e5:87:4f:1a:22:
         61:17:90:35:f5:23:5f:37:06:8c:31:13:bb:f7:75:03:51:e2:
         f3:0b:1c:22:4f:44:4e:a8:3a:99:93:2d:77:66:4a:2e:6c:98:
         3a:27:da:63:41:ea:eb:4a:61:33:c5:3e:59:5f:b7:db:ce:70:
         f5:fe:7e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:38:59 2026 by rpki-client