Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/546c1d0e-f9f9-3960-a810-7cf71302d557.roa
File:                     546c1d0e-f9f9-3960-a810-7cf71302d557.roa (raw, json)
Hash identifier:          axChbDiWgl+9mPj4HPkj/oEm9filKVgaGYc/o5XsiJk=
Subject key identifier:   3A:C2:5C:57:DC:24:6A:14:68:80:7E:62:0D:5B:64:E1:71:B1:B7:59
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DD8042CF62904B512AAD020
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/546c1d0e-f9f9-3960-a810-7cf71302d557.roa
Signing time:             Tue 07 Apr 2026 16:19:56 +0000
ROA not before:           Tue 07 Apr 2026 16:19:56 +0000
ROA not after:            Mon 06 Jul 2026 16:19:56 +0000
asID:                     834
IP address blocks:        104.253.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:d8:04:2c:f6:29:04:b5:12:aa:d0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:19:56 2026 GMT
            Not After : Jul  6 16:19:56 2026 GMT
        Subject: CN=8db65283-9f92-497a-8c73-827b2cd54bf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:93:69:29:1e:40:70:f3:e9:72:77:ef:e6:6f:
                    6b:ba:e7:bf:97:b8:9b:cd:89:ad:66:ed:a4:65:51:
                    0d:48:40:35:90:d0:f8:18:15:17:53:ae:6f:a6:d0:
                    26:75:5e:fa:40:55:4e:72:9d:ea:4a:e2:b5:76:ca:
                    11:71:38:f2:ff:f4:b6:84:51:93:11:44:81:6a:ea:
                    88:71:32:f9:1a:cb:07:1b:68:54:36:bd:a7:41:4f:
                    2d:2c:93:7b:6c:08:cd:fc:9c:f2:b7:c2:80:e8:11:
                    41:f9:75:71:29:cc:9e:7b:6e:ba:a4:52:66:77:50:
                    b9:fa:55:1b:ae:12:44:76:56:a0:e7:0d:00:57:b8:
                    de:95:d8:c2:31:3e:e1:dd:45:e2:81:51:d7:20:3e:
                    ed:03:72:bb:67:c5:88:4b:ea:fe:2b:55:fd:7e:7a:
                    ea:d6:35:d5:16:95:7a:ca:27:d0:b5:01:e1:90:3b:
                    63:d3:62:52:cb:15:61:52:07:62:5b:5b:9f:04:cd:
                    b3:f8:db:16:5b:0c:c5:c5:0a:70:8e:b7:7e:fd:98:
                    b6:0d:4d:2f:5b:05:87:7e:66:17:65:e4:0b:f3:56:
                    21:2f:6d:0f:e3:0a:ea:3a:cc:58:0c:a9:99:26:78:
                    2c:c6:81:b1:4c:be:23:43:ff:da:57:f0:8a:5e:a8:
                    24:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C2:5C:57:DC:24:6A:14:68:80:7E:62:0D:5B:64:E1:71:B1:B7:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/546c1d0e-f9f9-3960-a810-7cf71302d557.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:88:d4:07:8b:95:07:b4:25:67:4a:b5:ef:e7:c9:5a:f9:6b:
         20:60:27:21:da:3a:ab:6d:b5:9c:23:03:f1:cb:2c:c9:94:94:
         3d:c4:29:6e:83:38:09:a5:b4:fd:c6:60:6f:e3:6a:71:b6:f9:
         ba:23:cf:16:f4:fe:a8:44:bc:c4:ad:3d:ab:4c:e9:44:e8:0f:
         95:01:41:26:54:9b:00:b2:c4:8d:d1:0f:5a:cd:79:c1:40:45:
         2f:41:29:fa:74:e3:91:b6:f1:75:e3:a5:6b:db:f2:6c:b4:49:
         e2:f3:0b:ca:f9:e2:1b:74:8b:5d:86:8b:2f:3e:a8:89:90:a4:
         7c:5b:96:df:f0:89:a9:77:fd:eb:7d:7e:62:fb:0d:80:6d:1d:
         30:73:ab:87:80:99:f2:fe:d5:8b:e5:2e:27:85:f4:2a:fa:91:
         55:1d:aa:05:c1:03:de:92:55:43:08:7f:df:e9:4e:0a:17:11:
         ca:d9:dd:46:19:20:8c:11:85:9e:d7:b2:ca:34:92:de:f2:92:
         bc:55:52:bb:a2:b5:51:13:4b:d4:b0:13:5d:f4:7f:48:db:3c:
         f9:60:fb:83:28:da:df:15:16:5f:13:0e:18:be:cc:22:29:c0:
         d0:f9:62:89:41:10:90:a8:06:6b:04:b7:2d:27:f5:4d:3d:b5:
         d3:39:24:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:44:37 2026 by rpki-client