Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/3157fdea-a9ac-3c8d-88ee-3bf0de365095.roa
File:                     3157fdea-a9ac-3c8d-88ee-3bf0de365095.roa (raw, json)
Hash identifier:          K39efiwZVkCXZBzL/VQL/Uf5mRX2ZodjTRjx9+kWApE=
Subject key identifier:   17:93:5F:54:41:36:06:DE:2E:DC:D6:7F:F5:B1:1E:23:E8:74:C8:06
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DF2D6F491FFC50B2B935300
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/3157fdea-a9ac-3c8d-88ee-3bf0de365095.roa
Signing time:             Tue 07 Apr 2026 17:13:59 +0000
ROA not before:           Tue 07 Apr 2026 17:13:59 +0000
ROA not after:            Mon 06 Jul 2026 17:13:59 +0000
asID:                     18779
IP address blocks:        104.253.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:f2:d6:f4:91:ff:c5:0b:2b:93:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 17:13:59 2026 GMT
            Not After : Jul  6 17:13:59 2026 GMT
        Subject: CN=a4fce618-8bfb-4be5-9421-bcdbb9ffc399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f8:22:5f:58:c3:7f:3d:fc:a8:ee:95:3d:5b:
                    b4:96:07:3f:96:99:b2:50:64:42:e6:68:61:f0:a6:
                    1e:72:a4:e8:38:c4:8c:1a:8c:20:25:22:52:24:bc:
                    a0:d4:16:20:6d:c3:23:05:21:a5:f4:e0:16:3d:1b:
                    20:fb:6e:18:28:b6:75:e9:33:95:78:55:85:56:70:
                    79:e8:f4:f9:b3:64:ed:30:91:85:b6:85:ec:fd:09:
                    40:f0:84:be:a8:71:13:43:17:81:4c:53:79:52:33:
                    da:3e:4d:25:f1:48:8f:c3:77:6f:aa:7f:c7:cf:34:
                    cd:41:f6:bf:02:b3:69:23:46:b6:cb:46:63:b9:f4:
                    0a:eb:78:90:73:a0:3f:ef:9f:54:f3:32:42:c1:9c:
                    c3:1f:75:32:c8:af:96:aa:37:93:7d:38:e3:50:0e:
                    8d:3b:1b:8b:3f:a0:5d:28:5a:5d:7b:f2:f6:53:7c:
                    b1:a3:63:27:91:77:ba:c1:9c:42:d2:39:fe:d7:2b:
                    1b:5d:ac:9b:c9:21:b6:cb:32:be:b5:06:3e:a3:18:
                    4b:5b:f9:d2:ea:d2:d9:e2:05:46:d4:69:02:ca:85:
                    5d:90:93:8e:07:4a:4d:41:fe:b5:29:5d:0b:a6:f6:
                    88:12:e7:57:36:5a:1e:a0:c3:54:7b:90:64:d0:b8:
                    62:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:93:5F:54:41:36:06:DE:2E:DC:D6:7F:F5:B1:1E:23:E8:74:C8:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/3157fdea-a9ac-3c8d-88ee-3bf0de365095.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:04:09:60:8d:b7:62:1f:67:7e:16:35:2b:19:4f:d3:ba:e0:
         6c:5f:35:b5:0d:78:5e:15:01:36:9f:57:bb:d0:f0:5b:c9:c9:
         6e:49:05:ec:1c:9c:7c:d0:69:77:aa:4d:b8:02:f1:b0:b0:e5:
         71:0f:84:36:7b:c1:64:70:33:43:c0:4e:96:0f:cd:19:d1:ad:
         24:e8:5f:30:28:98:2b:9e:95:95:10:3d:1c:78:a3:6b:5a:ca:
         64:77:77:a1:6e:2a:43:fb:61:59:08:83:a8:22:42:b5:f7:d4:
         51:2a:1c:84:13:48:d4:10:af:5f:48:71:25:01:e0:99:fa:49:
         75:42:76:31:dc:1b:6e:27:49:8f:4a:9b:21:e5:8a:a8:81:8d:
         75:9a:09:97:83:0c:d4:e9:7b:72:ca:42:1f:51:73:7c:12:0f:
         44:aa:a5:12:88:71:58:ca:80:56:1a:6e:93:ca:20:5a:17:89:
         a1:f0:87:c9:e9:56:5d:8b:21:dd:ae:e5:ff:40:67:de:ab:d7:
         12:b5:c2:59:9a:4d:a9:ba:2b:54:2c:c7:97:6d:0e:81:2d:d9:
         99:d0:2c:6c:21:0a:0e:2b:9f:f9:33:36:b9:15:a6:cb:56:5c:
         8a:ed:47:51:25:f1:59:b6:bc:e8:cf:33:5d:86:ca:3e:91:c9:
         b0:36:5d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:39:39 2026 by rpki-client