Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/51b8191e-8e86-3a84-aa5d-1d0b2b1fbee7.roa
File:                     51b8191e-8e86-3a84-aa5d-1d0b2b1fbee7.roa (raw, json)
Hash identifier:          9klxTK6yCxZDh7mY7OctlwFYMVTjRCPE6zk9NYY3i/I=
Subject key identifier:   74:A7:2B:CB:97:47:D9:90:A7:35:1F:A8:3D:0B:7E:BA:3B:D2:3A:A3
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DF2D7748617DDB55BEB9180
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/51b8191e-8e86-3a84-aa5d-1d0b2b1fbee7.roa
Signing time:             Tue 07 Apr 2026 17:13:59 +0000
ROA not before:           Tue 07 Apr 2026 17:13:59 +0000
ROA not after:            Mon 06 Jul 2026 17:13:59 +0000
asID:                     397630
IP address blocks:        104.253.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:f2:d7:74:86:17:dd:b5:5b:eb:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 17:13:59 2026 GMT
            Not After : Jul  6 17:13:59 2026 GMT
        Subject: CN=6e570e4c-230c-4ce6-bc9c-4814fa9accb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:46:79:f5:b8:21:d3:59:2c:3f:97:9d:f4:14:
                    d4:66:bf:d5:e3:ab:35:b4:4c:09:64:c4:ef:a4:da:
                    5c:d8:9c:e1:ca:6e:92:85:93:ca:6b:a7:1a:8b:9c:
                    1f:54:ec:59:ba:82:eb:3e:cd:81:af:30:29:53:37:
                    94:3b:fc:8f:44:46:3c:ad:20:37:24:cd:6b:05:77:
                    79:ae:24:0b:4e:a3:dc:e7:24:ac:0f:26:7e:df:a3:
                    03:34:00:c4:00:ae:64:f3:3b:b6:a5:65:b8:1a:29:
                    38:a4:c5:cc:b4:45:70:ef:dd:f3:3b:af:7d:65:d9:
                    d5:6c:23:e3:e4:76:b4:17:e1:66:46:9b:94:ae:76:
                    40:3a:12:30:c1:de:39:56:fc:12:4d:a4:8a:e0:64:
                    5a:cc:c9:6d:5c:62:8b:a2:95:64:a4:ce:d2:58:1d:
                    29:9f:f7:90:c6:85:a1:b3:be:0b:a1:fd:a1:35:bd:
                    4c:df:c6:1e:bb:20:e8:fe:ed:f6:c3:70:c7:b2:c8:
                    d2:c5:67:de:6f:84:30:55:aa:13:2b:1b:10:84:e2:
                    a7:c8:49:71:e1:39:15:ae:b9:99:bf:d3:4e:de:6f:
                    1f:df:6d:e0:66:08:ad:8d:95:d8:02:18:a3:08:ec:
                    2f:96:85:11:c7:ea:24:7d:d0:cc:dc:93:90:54:b2:
                    58:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A7:2B:CB:97:47:D9:90:A7:35:1F:A8:3D:0B:7E:BA:3B:D2:3A:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/51b8191e-8e86-3a84-aa5d-1d0b2b1fbee7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:0a:5b:eb:fb:67:ea:f9:96:32:bf:13:3e:1f:1d:13:1d:ae:
         d7:a2:55:e2:cb:30:2f:d6:e3:45:c6:5a:a9:33:52:77:b8:2c:
         ba:da:57:3e:8b:5b:18:e2:2c:8c:b0:d2:96:ef:62:09:ce:bb:
         f4:be:fc:04:a7:a0:9d:8a:26:0b:4e:53:da:6b:ce:79:ae:3f:
         29:a3:52:9f:42:f0:3c:18:05:19:a8:f8:12:b2:ef:18:62:e6:
         8a:c4:73:2c:53:a3:ee:36:0c:98:20:3a:ad:29:b9:39:59:a3:
         c0:a6:fe:99:84:52:11:14:0f:ff:7e:4e:bb:34:7b:25:b2:57:
         95:58:a1:0d:dd:c2:72:f4:60:53:0a:ea:1c:ee:03:c3:8c:f7:
         85:ac:c2:06:45:6f:17:07:7c:5c:27:f6:02:d6:10:8e:23:48:
         2a:ed:31:53:86:c3:b6:53:dd:22:5c:19:67:0f:70:c5:86:eb:
         8b:da:a4:33:31:03:2b:20:97:99:f6:8e:4b:6f:c8:af:7c:4c:
         0b:72:e4:d0:0a:7b:3f:7c:63:ce:e3:83:1a:a1:a4:d0:ee:fd:
         dd:70:57:7b:f9:c1:3f:24:87:d8:05:05:f3:74:33:70:34:49:
         e9:53:2c:f4:7c:e5:66:c4:df:28:4d:ce:7f:1f:aa:63:e3:cb:
         b9:b6:07:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:39:30 2026 by rpki-client