Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/43cf759a-7154-3acb-8842-36fec725d632.roa
File:                     43cf759a-7154-3acb-8842-36fec725d632.roa (raw, json)
Hash identifier:          JPbuOAGuBJF3tsxXyIss5NGUsQ/L24EwCaglxFJjq98=
Subject key identifier:   F7:93:A6:DF:3A:87:5C:D7:AF:C2:87:25:9B:78:3F:41:6C:03:2B:EE
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDC82CF02B7D1B2FB868E80
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/43cf759a-7154-3acb-8842-36fec725d632.roa
Signing time:             Tue 07 Apr 2026 16:28:59 +0000
ROA not before:           Tue 07 Apr 2026 16:28:59 +0000
ROA not after:            Mon 06 Jul 2026 16:28:59 +0000
asID:                     201525
IP address blocks:        104.253.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dc:82:cf:02:b7:d1:b2:fb:86:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:28:59 2026 GMT
            Not After : Jul  6 16:28:59 2026 GMT
        Subject: CN=b9a054fc-1397-4691-a5e3-78bd47946c3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ce:b2:73:13:3c:95:8c:1b:06:67:d0:7e:64:
                    6d:8d:a6:9b:4c:f5:94:eb:c8:6f:26:74:cc:a5:d9:
                    64:e9:90:04:d7:68:84:34:dd:c2:ba:19:a0:6c:53:
                    27:98:c0:0b:5c:a1:a9:4b:a9:f5:a0:2a:c7:5f:9a:
                    de:ee:8d:d5:53:6e:fe:b8:1e:7d:f6:c8:38:75:2a:
                    93:0d:39:5f:60:11:69:19:63:61:e4:28:b7:c2:1d:
                    86:85:15:ea:a1:c3:fb:53:e1:f4:6e:2e:77:16:34:
                    37:a5:a9:df:4d:3a:ca:c6:4a:85:bc:fc:2d:1c:36:
                    f6:f6:2e:fd:dc:b8:1e:21:eb:5e:46:58:87:f0:f5:
                    87:4d:21:ea:2c:8e:a2:9c:cd:ab:2d:7a:1d:a5:4f:
                    51:39:e0:77:0d:b8:c5:13:5c:c7:1e:6f:fb:1f:3e:
                    8b:51:3f:f3:48:21:59:e3:cf:93:65:14:ab:36:64:
                    f3:1c:a0:8e:bf:94:ea:ef:74:5c:69:61:e9:9a:4c:
                    54:e7:b6:db:9b:0d:14:07:cf:03:6a:f8:09:56:4b:
                    44:56:99:9f:fd:eb:91:52:69:47:91:b4:4a:50:b5:
                    0d:cd:b2:93:0f:bb:7b:86:3c:f9:64:8b:92:2c:68:
                    3a:16:84:48:7f:bb:fe:1d:a6:d1:32:56:f7:23:bf:
                    28:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:93:A6:DF:3A:87:5C:D7:AF:C2:87:25:9B:78:3F:41:6C:03:2B:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/43cf759a-7154-3acb-8842-36fec725d632.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:25:49:48:60:ce:64:2c:03:57:bc:f1:1c:5f:2c:c7:3d:0e:
         b2:67:f4:c2:fd:54:f8:df:1c:08:9f:0a:82:93:ef:2a:b9:f7:
         ed:61:a5:dd:49:85:56:43:f9:dc:7c:25:dd:8f:b9:96:65:9b:
         2e:34:ba:20:2b:63:2e:05:e3:f0:cb:dd:9a:ec:19:7a:c7:e3:
         d8:84:3b:8e:65:5e:9c:da:ea:21:d0:de:27:98:b3:78:b2:57:
         3f:bd:25:c0:dc:c3:5b:07:88:67:be:54:42:b9:7d:41:2c:ce:
         63:09:4e:60:6a:2e:b1:0a:6c:9a:fe:f4:50:25:0f:48:65:e6:
         42:19:0b:f3:e4:ea:a5:e2:7f:90:da:8c:7c:bc:3c:7a:a9:a5:
         e8:df:be:37:39:c3:91:70:9e:9d:53:69:e7:5c:35:5b:09:42:
         b6:c1:f8:07:3e:8c:0b:02:40:d3:20:28:8c:ac:3a:67:f2:ff:
         6a:e9:f8:4d:f6:1c:5a:33:be:e5:93:22:f0:d3:50:75:c3:56:
         1a:62:e0:66:f0:1b:d2:a5:89:b1:44:13:ff:b5:5f:c9:a7:f8:
         f0:50:f1:f7:b7:d1:c5:85:dc:ad:96:74:d4:55:c9:de:95:75:
         96:8d:66:14:bb:0d:e0:83:d5:21:2d:98:89:75:7a:1c:a6:13:
         79:d4:44:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:43:58 2026 by rpki-client