Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/7f92fe8e-d973-38d5-83e7-4be6fba3fc15.roa
File:                     7f92fe8e-d973-38d5-83e7-4be6fba3fc15.roa (raw, json)
Hash identifier:          9KQUosLCDB7+iXQZ0SC9Pl4/OO2qJnsJh9aoFJqUSJo=
Subject key identifier:   88:4D:B2:6A:89:C9:EC:A4:97:F5:C1:22:85:09:C3:38:B8:AD:56:26
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDC2624A55BDA86040BE240
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/7f92fe8e-d973-38d5-83e7-4be6fba3fc15.roa
Signing time:             Tue 07 Apr 2026 16:28:15 +0000
ROA not before:           Tue 07 Apr 2026 16:28:15 +0000
ROA not after:            Mon 06 Jul 2026 16:28:15 +0000
asID:                     18779
IP address blocks:        104.253.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dc:26:24:a5:5b:da:86:04:0b:e2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:28:15 2026 GMT
            Not After : Jul  6 16:28:15 2026 GMT
        Subject: CN=c1c7f81d-df1c-4061-8d6e-257837f4b76e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:15:9d:8a:5f:45:6b:90:ea:ce:17:e0:a3:e8:
                    73:5c:d4:28:10:7b:79:1f:f3:57:26:11:86:85:c6:
                    cc:19:c6:88:74:0d:9b:01:0b:dd:3b:45:3b:3a:1e:
                    af:b8:ad:1f:40:ba:cf:7f:05:c0:92:84:d2:32:1f:
                    3d:b8:0c:18:35:13:5a:61:80:a4:a4:d1:be:22:31:
                    27:44:69:41:31:d0:e9:0a:dc:f8:f8:c0:00:3e:00:
                    ac:3f:5a:75:55:7c:8b:8b:9e:f4:a5:5e:ae:47:74:
                    02:05:a2:af:0a:ea:fe:af:81:2a:0b:c5:a2:e9:1e:
                    01:c7:11:30:73:e5:86:11:65:fb:a3:fc:f9:f4:d0:
                    11:b8:48:71:99:8b:ca:5e:cb:27:e1:e2:72:58:9b:
                    3c:d6:5d:29:14:89:5b:41:6b:06:56:99:84:ea:e6:
                    a6:9c:0c:5d:c4:45:cf:00:ea:4d:92:ba:25:1c:23:
                    27:0e:1e:8f:2c:d9:06:fb:77:f5:9e:03:1b:6d:80:
                    40:ec:54:fb:a1:99:49:d4:42:06:4e:c5:28:b3:76:
                    55:d3:62:19:87:2f:18:aa:2f:9c:a6:d8:36:e0:01:
                    8b:e9:81:15:71:4f:f1:7a:48:f4:2c:14:a6:a9:39:
                    06:ee:c5:79:7a:8d:5e:de:a2:78:1b:6a:44:50:a4:
                    e1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:4D:B2:6A:89:C9:EC:A4:97:F5:C1:22:85:09:C3:38:B8:AD:56:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/7f92fe8e-d973-38d5-83e7-4be6fba3fc15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:88:38:61:3f:1e:7b:88:c0:af:4e:ac:91:55:6b:18:e9:98:
         16:e7:97:a4:a3:0f:27:1b:84:ff:02:ca:dc:eb:d6:b0:d1:e7:
         6b:d8:57:c5:f3:98:f4:26:11:ff:fb:74:19:ea:32:c9:e1:88:
         85:8a:93:3e:68:02:36:f4:76:3a:31:ff:af:88:14:47:a2:de:
         71:e0:12:66:c1:b0:29:7b:df:36:7a:a8:08:61:a2:82:ec:1d:
         07:39:a1:9c:c7:5a:b6:d5:9f:6b:40:38:a1:e2:41:9a:c3:28:
         75:5f:ab:2b:5e:db:50:75:cd:b2:bd:cd:65:c6:57:16:9b:90:
         6a:ab:29:bd:b4:a4:d0:fb:3c:0c:f7:71:47:f0:e9:63:6e:21:
         a0:51:89:bf:fd:7e:2f:68:41:91:59:76:1e:b5:e2:48:0e:3e:
         5f:0d:62:1d:a9:55:8c:74:ce:60:22:7a:ec:38:12:de:8d:d1:
         cd:0d:72:44:1f:97:57:e8:46:7c:35:24:94:ea:28:48:8a:cd:
         8b:63:e8:ec:cc:33:b4:e3:6b:59:e7:b1:4d:a6:a7:13:79:19:
         df:17:ab:99:72:b7:0c:a0:db:a0:a0:ac:02:d4:68:53:55:18:
         ad:cb:97:fa:ca:fd:69:31:f2:8c:9d:1c:e8:96:6f:ad:cd:b9:
         23:78:34:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1t3CYkpVvahgQL4kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDQwNzE2MjgxNVoXDTI2MDcwNjE2MjgxNVowLzEtMCsGA1UEAxMk
YzFjN2Y4MWQtZGYxYy00MDYxLThkNmUtMjU3ODM3ZjRiNzZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhWdil9Fa5Dqzhfgo+hzXNQoEHt5H/NXJhGG
hcbMGcaIdA2bAQvdO0U7Oh6vuK0fQLrPfwXAkoTSMh89uAwYNRNaYYCkpNG+IjEn
RGlBMdDpCtz4+MAAPgCsP1p1VXyLi570pV6uR3QCBaKvCur+r4EqC8Wi6R4BxxEw
c+WGEWX7o/z59NARuEhxmYvKXssn4eJyWJs81l0pFIlbQWsGVpmE6uamnAxdxEXP
AOpNkrolHCMnDh6PLNkG+3f1ngMbbYBA7FT7oZlJ1EIGTsUos3ZV02IZhy8Yqi+c
ptg24AGL6YEVcU/xekj0LBSmqTkG7sV5eo1e3qJ4G2pEUKThOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIhNsmqJyeykl/XBIoUJwzi4rVYmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvN2Y5MmZlOGUtZDk3My0z
OGQ1LTgzZTctNGJlNmZiYTNmYzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP0xMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFmIOGE/HnuIwK9OrJFVaxjpmBbnl6SjDycbhP8Cytzr1rDR52vYV8Xz
mPQmEf/7dBnqMsnhiIWKkz5oAjb0djox/6+IFEei3nHgEmbBsCl73zZ6qAhhooLs
HQc5oZzHWrbVn2tAOKHiQZrDKHVfqyte21B1zbK9zWXGVxabkGqrKb20pND7PAz3
cUfw6WNuIaBRib/9fi9oQZFZdh614kgOPl8NYh2pVYx0zmAieuw4Et6N0c0NckQf
l1foRnw1JJTqKEiKzYtj6OzMM7Tja1nnsU2mpxN5Gd8Xq5lytwyg26CgrALUaFNV
GK3Ll/rK/Wkx8oydHOiWb63NuSN4NMs=
-----END CERTIFICATE-----
Generated at Wed Apr 8 01:39:26 2026 by rpki-client