Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/88275caa-3466-3b7c-ba7f-b5a3c016b798.roa
File:                     88275caa-3466-3b7c-ba7f-b5a3c016b798.roa (raw, json)
Hash identifier:          cuo3iG0XEf7lCoOPgjZt1K3Z2a0Y09nsHE93x5w3Qjg=
Subject key identifier:   57:CA:BC:25:B0:90:66:64:AF:4D:82:43:7C:65:CC:BF:39:00:03:40
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDC51F99C9F5D8BC7E51400
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/88275caa-3466-3b7c-ba7f-b5a3c016b798.roa
Signing time:             Tue 07 Apr 2026 16:28:36 +0000
ROA not before:           Tue 07 Apr 2026 16:28:36 +0000
ROA not after:            Mon 06 Jul 2026 16:28:36 +0000
asID:                     44133
IP address blocks:        104.253.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dc:51:f9:9c:9f:5d:8b:c7:e5:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:28:36 2026 GMT
            Not After : Jul  6 16:28:36 2026 GMT
        Subject: CN=0708fe3a-e53a-4808-9de6-ab971449550c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:31:86:69:12:d0:4f:29:33:99:4d:cd:29:7e:
                    97:e4:3e:c1:9e:ca:28:be:e5:2b:07:e6:a1:00:e5:
                    d0:b2:e5:52:1c:26:06:8d:17:e4:ab:56:6c:7b:9f:
                    b7:a0:86:46:86:7a:d1:74:d7:41:7f:83:23:27:45:
                    22:4e:35:20:2a:71:c5:91:2c:e9:6e:72:7f:dd:90:
                    f1:81:fe:d3:a2:48:ee:58:91:7a:35:ea:b2:cf:ba:
                    f1:ca:51:bb:b7:97:70:46:82:05:ab:be:20:61:53:
                    18:6c:22:cf:8e:17:03:a8:19:ce:b4:4d:5c:94:ba:
                    f1:1d:b2:5c:dd:7e:4d:b4:6b:1d:c0:6a:e3:43:9c:
                    bf:22:3e:3c:44:a8:e1:05:a4:77:b8:88:40:b9:86:
                    f2:74:de:ed:6b:78:1e:b3:3f:4c:83:ed:24:e9:d2:
                    bd:05:85:9e:13:95:36:da:d3:f7:30:5f:f5:fa:cc:
                    d8:8b:15:25:35:81:5d:e2:91:e9:5f:14:7d:73:d3:
                    dc:81:ab:18:f5:e7:6c:de:8a:ae:5b:03:39:5c:ac:
                    95:dd:d4:0e:db:28:2a:69:40:2d:bd:16:31:02:df:
                    de:fb:26:1e:18:8b:61:e5:46:01:e1:f1:94:cf:2f:
                    7e:70:40:38:01:6f:1b:3b:28:0c:35:d9:14:49:64:
                    08:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:CA:BC:25:B0:90:66:64:AF:4D:82:43:7C:65:CC:BF:39:00:03:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/88275caa-3466-3b7c-ba7f-b5a3c016b798.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:71:c4:86:ad:31:70:77:56:9f:39:84:95:f1:80:df:c5:fd:
         f6:a4:a7:9b:16:04:d0:b5:d5:1e:a4:2e:ef:3d:f0:db:d9:1c:
         d3:4c:8f:0e:04:56:87:dc:3d:84:2f:a8:c0:40:1d:61:fc:fb:
         ae:20:4f:52:7a:0e:73:73:ff:96:4d:4f:a3:b1:56:82:05:1e:
         1f:7d:fe:9b:97:a8:d0:52:ec:8f:0e:92:f9:a8:3a:10:32:a0:
         7b:71:0c:d2:d0:30:d7:6b:15:05:da:fc:68:01:f1:bb:7d:fd:
         7f:26:61:bb:1d:29:d5:2c:b5:2c:37:f0:0e:7f:3c:fb:70:ca:
         0c:91:5a:e6:92:e2:45:1b:1e:86:9b:d2:e4:83:66:10:62:f9:
         9e:df:98:4c:83:8c:7d:19:07:ae:f5:87:35:7b:26:ea:e3:fa:
         86:f1:7d:37:c0:81:25:7e:fb:e1:53:7f:17:db:9d:f0:21:d9:
         95:07:26:2f:e0:f7:fa:50:dc:c1:ce:7b:c8:ac:26:67:b6:19:
         bf:c6:4c:a8:cd:b6:4f:0d:48:cc:65:a0:06:c7:16:9d:8f:f9:
         2f:25:77:05:9a:42:5a:93:ed:4d:0c:60:c3:65:fa:42:00:6c:
         8f:8e:84:b5:04:e1:2b:0a:ba:27:80:89:bb:13:24:cc:1e:05:
         b0:cd:c9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:44:02 2026 by rpki-client