Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a584c81d-dd5f-3cf3-ab00-8b82c528a0c0.roa
File:                     a584c81d-dd5f-3cf3-ab00-8b82c528a0c0.roa (raw, json)
Hash identifier:          g8XZxsKNnaN7evXHbAItH7VncvZ9dQ8x9//fDaT/jhE=
Subject key identifier:   43:B8:70:F4:9E:E7:09:07:5D:33:82:36:90:5E:16:C9:23:24:03:79
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDC839B5D2B883232E9A2C0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a584c81d-dd5f-3cf3-ab00-8b82c528a0c0.roa
Signing time:             Tue 07 Apr 2026 16:29:00 +0000
ROA not before:           Tue 07 Apr 2026 16:29:00 +0000
ROA not after:            Mon 06 Jul 2026 16:29:00 +0000
asID:                     9009
IP address blocks:        104.253.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dc:83:9b:5d:2b:88:32:32:e9:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:29:00 2026 GMT
            Not After : Jul  6 16:29:00 2026 GMT
        Subject: CN=dea7ae37-da5a-4c1d-8553-12de62acc066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:64:50:f0:73:d7:6a:47:c1:33:54:b4:7c:80:
                    97:e3:5a:f4:5d:89:f4:c4:7a:c0:2e:06:38:d2:a6:
                    d6:36:9d:62:73:90:21:ad:4e:76:06:4f:02:ae:60:
                    04:c0:8d:d9:9a:59:58:c7:c7:63:27:5e:45:96:21:
                    e2:52:e2:cd:09:bd:f2:95:9f:e9:03:01:d7:24:68:
                    bb:a4:e5:c6:43:48:9f:0e:04:bd:4c:42:71:c4:80:
                    8e:9c:d9:95:c9:c1:bd:6b:9d:01:19:cf:3f:0b:da:
                    f0:7d:bd:c1:e6:0c:00:9b:03:0b:a7:98:e2:89:56:
                    ed:90:89:80:c9:be:31:b6:aa:35:a7:15:c9:c4:20:
                    0e:b3:64:f7:23:b9:e4:bd:ff:af:be:09:24:ba:50:
                    0b:6d:9a:f8:89:58:19:3e:e9:ed:1f:cb:b2:c7:19:
                    74:7a:d9:ed:ac:cd:83:a4:41:30:5c:6d:cc:44:1b:
                    86:cc:f3:f3:f3:53:be:6e:6a:5d:09:c3:00:df:18:
                    05:63:b3:6b:41:b5:71:5c:74:59:c1:8a:5f:f5:a0:
                    9d:5f:bb:40:50:77:de:51:3d:f3:21:eb:40:16:8f:
                    ea:50:e2:da:5c:0b:6d:3c:78:c8:c1:42:4d:0d:24:
                    e3:08:08:11:5f:4c:c8:be:2e:60:b5:9b:28:71:23:
                    d4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B8:70:F4:9E:E7:09:07:5D:33:82:36:90:5E:16:C9:23:24:03:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a584c81d-dd5f-3cf3-ab00-8b82c528a0c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:4f:99:97:4b:e4:f1:15:58:09:dd:33:d8:57:9e:7c:83:b7:
         6c:a3:f1:a6:8a:4e:9c:3d:92:8d:75:25:65:16:47:a6:27:21:
         1f:da:57:3e:0d:2e:61:93:eb:d1:0b:b6:a7:91:aa:e1:25:b0:
         b0:0e:5c:a1:8b:a7:45:21:56:4e:fa:c0:f8:75:bd:24:c5:d8:
         46:bc:ab:21:6f:62:25:4d:34:20:88:a7:a3:1c:ac:92:71:8b:
         aa:29:7f:c2:a0:df:f2:1e:5c:14:d7:fe:f4:04:58:aa:88:38:
         49:6e:bd:e2:f9:d9:3a:2b:81:a7:44:52:4f:f6:0d:70:d1:2a:
         a6:8f:ef:f8:02:00:0e:05:9d:67:50:dd:01:7f:12:b0:8b:67:
         4f:1b:3b:8a:c6:d8:42:84:8d:1f:81:11:6c:e2:d1:21:e1:51:
         55:71:0e:da:98:d0:bb:8b:a4:5b:bf:fa:98:82:68:60:4d:5d:
         79:2d:b0:de:a8:50:c7:82:3c:b5:20:68:29:cd:e8:04:9c:57:
         3d:1b:a2:40:19:ca:4d:91:c7:e4:a0:06:8d:3d:91:51:1e:4b:
         e8:4a:8f:d8:2f:ed:32:f9:0c:0f:38:28:cb:bd:c6:2f:e2:09:
         12:a4:17:43:36:65:0b:83:62:fc:9d:a7:5f:49:f7:d0:ef:b1:
         be:90:e4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:41:20 2026 by rpki-client