Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/3eea0c85-cebc-3cfb-b7de-1830b2a1f08b.roa
File:                     3eea0c85-cebc-3cfb-b7de-1830b2a1f08b.roa (raw, json)
Hash identifier:          /iDyVSWcF7bRRLPoTdaepq1R2r1eoEde1vWOs+ALdsY=
Subject key identifier:   82:F1:1F:89:51:2F:D9:C2:7C:97:03:35:F6:7D:C3:41:51:60:25:FA
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DD82DB877E9FEDECB688900
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/3eea0c85-cebc-3cfb-b7de-1830b2a1f08b.roa
Signing time:             Tue 07 Apr 2026 16:20:15 +0000
ROA not before:           Tue 07 Apr 2026 16:20:15 +0000
ROA not after:            Mon 06 Jul 2026 16:20:15 +0000
asID:                     834
IP address blocks:        104.253.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:d8:2d:b8:77:e9:fe:de:cb:68:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:20:15 2026 GMT
            Not After : Jul  6 16:20:15 2026 GMT
        Subject: CN=c0620f5d-dd33-43da-a53e-b0d699bfbc70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f3:a2:62:10:69:16:b2:de:95:19:a0:fe:0b:
                    9c:f6:5c:2b:76:10:5c:97:92:c9:f1:98:a9:a2:61:
                    49:34:1c:96:42:a4:9f:e5:58:f7:63:d6:15:61:75:
                    14:87:29:57:33:a3:fc:c8:dc:73:46:17:16:3e:ba:
                    b4:34:3e:85:60:8d:b9:31:31:82:1f:ef:23:7e:78:
                    8d:3c:1e:5d:26:6b:bb:05:86:62:ff:f4:6f:e0:03:
                    f2:57:f9:32:1f:9a:59:19:e0:aa:20:82:49:f9:84:
                    a3:47:a2:c1:ea:25:a1:83:2a:91:12:ee:81:59:02:
                    fe:c6:f1:c4:2a:37:b5:51:9b:98:32:17:b1:f7:36:
                    31:1e:f1:64:b1:0f:25:45:91:1d:ec:9b:da:64:0c:
                    d9:67:6c:ac:9b:1d:d2:9f:0e:cd:b7:e7:9a:b8:0d:
                    84:05:92:d7:15:f4:e8:77:08:c7:a8:e0:9b:00:86:
                    ff:f9:47:1a:81:fd:cc:89:4a:a4:1b:cd:5a:c3:72:
                    f8:00:8e:b9:24:96:6c:83:43:d2:77:c1:c6:7f:ca:
                    de:0d:7d:1b:e7:b9:81:21:41:38:11:e5:11:90:47:
                    fa:34:d2:5c:1a:be:92:1f:7a:0b:d2:4d:b6:17:91:
                    5a:b9:a7:35:d6:21:24:db:35:01:60:9c:5e:d1:da:
                    71:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F1:1F:89:51:2F:D9:C2:7C:97:03:35:F6:7D:C3:41:51:60:25:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/3eea0c85-cebc-3cfb-b7de-1830b2a1f08b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:98:f5:ae:2c:83:c2:a9:bb:13:91:e5:b9:70:5e:15:94:29:
         30:57:45:9e:37:7a:20:86:6c:0f:85:6a:a6:64:5a:de:da:ff:
         37:39:a9:0d:04:10:bc:8b:af:05:87:68:82:38:97:9f:e2:88:
         1a:50:2b:27:f0:bc:b9:30:c9:67:89:08:f2:55:f7:de:20:02:
         ce:15:08:2e:17:f0:f0:a8:42:c2:cc:62:ef:56:1d:7e:24:24:
         48:b0:95:6f:ef:3f:da:45:30:a1:13:80:b4:ba:4b:90:8d:cd:
         3a:0d:92:4f:96:cd:a7:ae:83:5c:b9:f5:28:29:7d:0a:1d:26:
         5f:5e:a4:81:f6:94:d4:5c:ce:70:6f:c7:25:92:d1:0b:fa:d2:
         58:3d:5d:45:b2:40:72:e3:09:64:33:4c:df:40:d3:65:0e:ad:
         3d:11:1e:0f:a8:bc:80:74:a5:51:ea:28:a0:ca:e4:9c:f9:b7:
         e0:f6:b7:a7:75:e2:ab:5c:b1:ed:fc:e4:ad:b8:4a:b7:94:a3:
         1a:ff:dd:b5:38:18:ef:85:a3:05:b9:35:59:56:6b:00:a7:d6:
         c8:c4:b3:65:52:4a:cb:c8:1f:70:22:6a:dc:81:c5:b4:45:a9:
         14:03:61:fe:42:c1:65:f7:b7:33:bc:68:49:ef:7a:31:da:29:
         c7:ca:5c:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1t2C24d+n+3stoiQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDQwNzE2MjAxNVoXDTI2MDcwNjE2MjAxNVowLzEtMCsGA1UEAxMk
YzA2MjBmNWQtZGQzMy00M2RhLWE1M2UtYjBkNjk5YmZiYzcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/OiYhBpFrLelRmg/guc9lwrdhBcl5LJ8Zip
omFJNByWQqSf5Vj3Y9YVYXUUhylXM6P8yNxzRhcWPrq0ND6FYI25MTGCH+8jfniN
PB5dJmu7BYZi//Rv4APyV/kyH5pZGeCqIIJJ+YSjR6LB6iWhgyqREu6BWQL+xvHE
Kje1UZuYMhex9zYxHvFksQ8lRZEd7JvaZAzZZ2ysmx3Snw7Nt+eauA2EBZLXFfTo
dwjHqOCbAIb/+Ucagf3MiUqkG81aw3L4AI65JJZsg0PSd8HGf8reDX0b57mBIUE4
EeURkEf6NNJcGr6SH3oL0k22F5Fauac11iEk2zUBYJxe0dpxyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFILxH4lRL9nCfJcDNfZ9w0FRYCX6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvM2VlYTBjODUtY2ViYy0z
Y2ZiLWI3ZGUtMTgzMGIyYTFmMDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP3nMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHKY9a4sg8KpuxOR5blwXhWUKTBXRZ43eiCGbA+FaqZkWt7a/zc5qQ0E
ELyLrwWHaII4l5/iiBpQKyfwvLkwyWeJCPJV994gAs4VCC4X8PCoQsLMYu9WHX4k
JEiwlW/vP9pFMKETgLS6S5CNzToNkk+Wzaeug1y59SgpfQodJl9epIH2lNRcznBv
xyWS0Qv60lg9XUWyQHLjCWQzTN9A02UOrT0RHg+ovIB0pVHqKKDK5Jz5t+D2t6d1
4qtcse385K24SreUoxr/3bU4GO+FowW5NVlWawCn1sjEs2VSSsvIH3AiatyBxbRF
qRQDYf5CwWX3tzO8aEnvejHaKcfKXPk=
-----END CERTIFICATE-----
Generated at Wed Apr 8 01:39:32 2026 by rpki-client