Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/4ece0720-b694-3cae-ba35-5386e1dfafc8.roa
File:                     4ece0720-b694-3cae-ba35-5386e1dfafc8.roa (raw, json)
Hash identifier:          kM9WGPkwkRZ6AkPDBj5+SF4IowFC94Fz6aYuZZZm+Ok=
Subject key identifier:   C2:75:AD:90:B4:36:36:0F:6C:A0:FD:A7:04:AA:DD:CA:8E:11:69:46
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DEC38855AB7BD74531BB7A0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/4ece0720-b694-3cae-ba35-5386e1dfafc8.roa
Signing time:             Tue 07 Apr 2026 17:00:38 +0000
ROA not before:           Tue 07 Apr 2026 17:00:38 +0000
ROA not after:            Mon 06 Jul 2026 17:00:38 +0000
asID:                     64267
IP address blocks:        104.252.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:ec:38:85:5a:b7:bd:74:53:1b:b7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 17:00:38 2026 GMT
            Not After : Jul  6 17:00:38 2026 GMT
        Subject: CN=f9bbd094-d77d-4109-83fe-127b01c14c23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:31:5b:85:bd:36:9a:0c:ac:c8:82:59:f1:db:
                    a1:8e:85:d1:9d:27:6e:6e:00:81:79:8a:79:dd:e8:
                    7f:68:eb:7b:c5:3f:c5:89:fd:51:f6:1a:5a:dd:e4:
                    2d:80:8b:9e:c8:54:f0:aa:e2:3e:d0:f1:a5:c1:e1:
                    f2:16:ac:c1:ab:91:02:59:1e:20:37:84:2d:86:e5:
                    ee:8c:08:1a:05:83:7b:88:02:65:f6:6f:59:8b:8e:
                    a0:e5:5d:27:5f:a2:ff:c1:7b:74:6f:a7:ee:e9:b9:
                    f6:78:57:da:48:9b:c7:de:e3:d6:c9:29:63:13:52:
                    66:5f:49:79:69:eb:7b:e0:6d:6d:69:f8:e7:ea:6a:
                    82:28:15:b4:1b:f3:d8:7d:6c:6a:9e:e8:7f:24:2c:
                    9e:f5:8a:ee:6c:b0:4e:d3:1b:9b:66:c4:7a:a7:b8:
                    f8:3c:93:13:ce:b4:b3:1b:9b:8d:45:f2:3e:72:44:
                    5a:63:f7:5b:ec:94:83:13:2d:88:d5:c1:50:ca:e3:
                    07:83:3f:d0:84:7d:7a:4e:34:fb:85:bd:63:d8:53:
                    c7:1c:b4:5c:56:12:48:c1:2d:88:7c:2d:e2:3b:25:
                    bd:27:a0:2b:93:51:ac:db:37:ce:44:80:94:ef:1a:
                    78:a2:af:5f:0a:a8:1b:0c:2e:d2:29:f3:e5:e8:57:
                    99:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:75:AD:90:B4:36:36:0F:6C:A0:FD:A7:04:AA:DD:CA:8E:11:69:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/4ece0720-b694-3cae-ba35-5386e1dfafc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:e0:de:ba:64:6f:5d:20:99:03:ac:73:97:c1:9a:6f:41:3e:
         ac:c3:0e:d8:c2:2c:0f:38:df:e3:fd:51:33:00:2c:8c:5b:4c:
         2e:97:81:8f:a7:d4:ff:3b:15:bd:ca:ae:7d:12:c4:9e:71:04:
         7e:60:0c:5c:8b:c0:4b:59:66:40:be:09:df:6d:0f:82:05:28:
         f1:aa:af:5b:61:87:b3:05:a3:ba:85:2b:a1:2f:15:30:7e:5f:
         15:4e:57:8a:59:08:63:98:07:da:09:31:60:ec:33:9f:30:bc:
         b7:73:42:64:1c:fc:f2:5c:b2:74:20:0e:f5:22:73:4d:a1:7c:
         fd:b6:59:51:16:d9:91:80:a6:53:3a:3f:f5:4d:68:46:13:7f:
         30:6d:60:fa:73:db:4f:68:01:99:b9:4e:ba:18:9f:16:96:6f:
         ed:52:74:35:db:75:51:eb:dd:21:a7:19:4f:9d:2e:b5:56:27:
         6c:b8:d3:88:08:07:4c:d5:d6:96:da:ca:6f:e6:52:8a:5d:20:
         67:ed:e2:ad:fd:1a:43:95:db:29:83:8b:2b:03:c9:7f:b4:b6:
         a0:39:f4:f2:81:b5:46:23:3f:d7:c4:87:34:42:46:a5:18:62:
         88:f2:6f:36:a7:80:ae:b3:5d:b8:80:1a:8f:14:3f:a7:c5:69:
         17:37:e1:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1t7DiFWre9dFMbt6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDQwNzE3MDAzOFoXDTI2MDcwNjE3MDAzOFowLzEtMCsGA1UEAxMk
ZjliYmQwOTQtZDc3ZC00MTA5LTgzZmUtMTI3YjAxYzE0YzIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDFbhb02mgysyIJZ8duhjoXRnSdubgCBeYp5
3eh/aOt7xT/Fif1R9hpa3eQtgIueyFTwquI+0PGlweHyFqzBq5ECWR4gN4QthuXu
jAgaBYN7iAJl9m9Zi46g5V0nX6L/wXt0b6fu6bn2eFfaSJvH3uPWySljE1JmX0l5
aet74G1tafjn6mqCKBW0G/PYfWxqnuh/JCye9YrubLBO0xubZsR6p7j4PJMTzrSz
G5uNRfI+ckRaY/db7JSDEy2I1cFQyuMHgz/QhH16TjT7hb1j2FPHHLRcVhJIwS2I
fC3iOyW9J6Ark1Gs2zfORICU7xp4oq9fCqgbDC7SKfPl6FeZRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMJ1rZC0NjYPbKD9pwSq3cqOEWlGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvNGVjZTA3MjAtYjY5NC0z
Y2FlLWJhMzUtNTM4NmUxZGZhZmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPz0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABTg3rpkb10gmQOsc5fBmm9BPqzDDtjCLA843+P9UTMALIxbTC6XgY+n
1P87Fb3Krn0SxJ5xBH5gDFyLwEtZZkC+Cd9tD4IFKPGqr1thh7MFo7qFK6EvFTB+
XxVOV4pZCGOYB9oJMWDsM58wvLdzQmQc/PJcsnQgDvUic02hfP22WVEW2ZGAplM6
P/VNaEYTfzBtYPpz209oAZm5TroYnxaWb+1SdDXbdVHr3SGnGU+dLrVWJ2y404gI
B0zV1pbaym/mUopdIGft4q39GkOV2ymDiysDyX+0tqA59PKBtUYjP9fEhzRCRqUY
YojybzangK6zXbiAGo8UP6fFaRc34aU=
-----END CERTIFICATE-----
Generated at Wed Apr 8 01:38:59 2026 by rpki-client