Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/826d7fc2-2edf-3568-ab13-a0634c00688f.roa
File:                     826d7fc2-2edf-3568-ab13-a0634c00688f.roa (raw, json)
Hash identifier:          cXhywv0NgUEdx5z9D7+OUbjlXIjqVvM/xy0J0EN9+GU=
Subject key identifier:   F3:18:BF:08:04:06:20:AC:E7:02:00:58:02:03:D4:09:90:C3:37:4E
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDC2808BF5EAD7ECA2BCD00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/826d7fc2-2edf-3568-ab13-a0634c00688f.roa
Signing time:             Tue 07 Apr 2026 16:28:16 +0000
ROA not before:           Tue 07 Apr 2026 16:28:16 +0000
ROA not after:            Mon 06 Jul 2026 16:28:16 +0000
asID:                     262287
IP address blocks:        104.253.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dc:28:08:bf:5e:ad:7e:ca:2b:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:28:16 2026 GMT
            Not After : Jul  6 16:28:16 2026 GMT
        Subject: CN=0ba609be-10df-4677-bfd4-83dae91f14ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d9:a1:02:d1:8e:ea:85:9b:39:a3:f2:df:a2:
                    fa:ef:8a:e3:db:c3:d0:5a:1a:96:e5:b7:ce:16:20:
                    ba:96:ec:63:13:14:9c:33:46:9d:90:b3:22:4b:5d:
                    d2:79:14:af:a4:78:d1:90:ec:d4:a9:ba:38:20:79:
                    5e:89:05:e0:45:6c:6e:0d:38:3c:be:c6:97:f9:f4:
                    67:ae:35:01:6c:eb:d9:7e:a1:b4:ab:85:7b:80:72:
                    b8:62:af:b0:75:3f:6d:23:f9:d1:ea:b2:15:64:b6:
                    1a:6c:70:6d:66:91:11:59:31:97:a7:99:a8:43:18:
                    b8:c8:28:f8:cc:25:07:a3:d7:a1:11:ea:04:e2:08:
                    bb:78:41:a1:55:8d:ee:89:c2:65:24:f0:9f:37:33:
                    73:2f:af:a2:a2:59:86:29:a5:fc:33:31:bd:c2:ee:
                    cc:05:55:9c:e7:41:4b:68:da:78:e7:89:98:56:fc:
                    40:56:b2:77:cc:e5:75:9d:38:de:73:5e:2e:81:48:
                    82:c5:ce:4a:bf:c9:67:a1:0c:18:f9:af:df:77:cd:
                    f5:6a:50:89:b5:51:35:9e:ba:96:95:d0:41:aa:2d:
                    59:4c:0b:ed:e5:67:6b:81:07:2b:c1:c6:aa:a3:eb:
                    6a:07:f9:25:d1:9b:57:43:cd:d8:37:3c:19:b0:94:
                    99:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:18:BF:08:04:06:20:AC:E7:02:00:58:02:03:D4:09:90:C3:37:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/826d7fc2-2edf-3568-ab13-a0634c00688f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:a7:bd:ae:6f:3c:d2:8c:0f:ab:b7:33:30:36:b4:c3:9b:91:
         48:60:d1:b3:fa:2a:9b:03:37:93:c2:ff:ef:db:17:88:2a:67:
         8d:77:00:a5:51:9a:f8:07:96:92:2c:19:42:b3:28:e5:86:d4:
         7a:3a:14:4b:c8:04:3b:c8:94:f3:93:e4:6b:40:c3:24:a6:42:
         5d:65:51:ec:6a:4e:8a:98:c6:74:11:d1:fb:61:6c:d6:08:8f:
         9f:95:15:bc:91:7f:2d:d6:f3:8a:08:6f:20:15:02:2b:c2:1d:
         b6:ea:54:37:46:30:fb:06:23:1e:31:17:60:21:2c:74:2e:d8:
         c1:74:7a:21:42:bf:53:dc:6b:5f:9f:5c:33:90:a7:b4:42:18:
         22:36:ce:b9:d5:87:9b:f4:80:a6:5a:c1:e4:65:97:38:8c:73:
         a6:ba:ad:46:ab:c1:26:86:c9:43:bc:4d:42:d8:7d:7a:39:34:
         58:a7:51:ee:6b:4b:4d:2b:ba:d9:40:94:86:dc:9a:9a:68:f4:
         a3:f7:cb:11:de:3c:9b:5b:8d:23:37:44:82:79:a4:ea:78:4b:
         59:d6:43:0b:06:8b:9e:2c:a0:68:9d:93:47:1b:26:51:d1:5f:
         06:ba:d0:2b:31:c2:bf:59:a5:2a:da:9b:9a:cc:61:da:14:05:
         8a:f9:87:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1t3CgIv16tfsorzQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDQwNzE2MjgxNloXDTI2MDcwNjE2MjgxNlowLzEtMCsGA1UEAxMk
MGJhNjA5YmUtMTBkZi00Njc3LWJmZDQtODNkYWU5MWYxNGVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdmhAtGO6oWbOaPy36L674rj28PQWhqW5bfO
FiC6luxjExScM0adkLMiS13SeRSvpHjRkOzUqbo4IHleiQXgRWxuDTg8vsaX+fRn
rjUBbOvZfqG0q4V7gHK4Yq+wdT9tI/nR6rIVZLYabHBtZpERWTGXp5moQxi4yCj4
zCUHo9ehEeoE4gi7eEGhVY3uicJlJPCfNzNzL6+iolmGKaX8MzG9wu7MBVWc50FL
aNp454mYVvxAVrJ3zOV1nTjec14ugUiCxc5Kv8lnoQwY+a/fd831alCJtVE1nrqW
ldBBqi1ZTAvt5WdrgQcrwcaqo+tqB/kl0ZtXQ83YNzwZsJSZgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPMYvwgEBiCs5wIAWAID1AmQwzdOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvODI2ZDdmYzItMmVkZi0z
NTY4LWFiMTMtYTA2MzRjMDA2ODhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP1bMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABenva5vPNKMD6u3MzA2tMObkUhg0bP6KpsDN5PC/+/bF4gqZ413AKVR
mvgHlpIsGUKzKOWG1Ho6FEvIBDvIlPOT5GtAwySmQl1lUexqToqYxnQR0fthbNYI
j5+VFbyRfy3W84oIbyAVAivCHbbqVDdGMPsGIx4xF2AhLHQu2MF0eiFCv1Pca1+f
XDOQp7RCGCI2zrnVh5v0gKZaweRllziMc6a6rUarwSaGyUO8TULYfXo5NFinUe5r
S00rutlAlIbcmppo9KP3yxHePJtbjSM3RIJ5pOp4S1nWQwsGi54soGidk0cbJlHR
Xwa60Csxwr9ZpSram5rMYdoUBYr5hzU=
-----END CERTIFICATE-----
Generated at Wed Apr 8 01:42:28 2026 by rpki-client