Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b9cfdb9e-e4f4-32a0-adeb-cddf932bf354.roa
File:                     b9cfdb9e-e4f4-32a0-adeb-cddf932bf354.roa (raw, json)
Hash identifier:          E6AnYLK3qaiI0pb9ovoLULeLh9RV64X1FdungjS2RY8=
Subject key identifier:   D1:2B:86:FA:A4:65:C4:13:57:72:FD:50:FA:54:6A:05:E0:39:3A:83
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDC404032124BB3000A9DC0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b9cfdb9e-e4f4-32a0-adeb-cddf932bf354.roa
Signing time:             Tue 07 Apr 2026 16:28:28 +0000
ROA not before:           Tue 07 Apr 2026 16:28:28 +0000
ROA not after:            Mon 06 Jul 2026 16:28:28 +0000
asID:                     63018
IP address blocks:        104.253.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dc:40:40:32:12:4b:b3:00:0a:9d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:28:28 2026 GMT
            Not After : Jul  6 16:28:28 2026 GMT
        Subject: CN=5ef6e4fc-ede3-43af-a089-e92f6ad9f4ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6c:01:b7:ce:f0:cf:44:36:be:d7:09:2e:06:
                    98:30:d9:77:25:a6:2b:18:c2:50:8a:95:2a:f3:52:
                    72:c0:ee:38:16:e7:0b:ac:0d:8b:32:42:d2:52:5f:
                    fe:19:53:69:b7:0e:63:c2:8e:6d:64:d0:96:03:04:
                    a3:67:58:11:95:91:8f:42:57:85:7a:64:5a:e8:bb:
                    62:84:f6:53:5c:de:9b:c4:9e:fb:4e:4e:18:dc:f7:
                    05:47:fb:6d:42:9d:ec:06:b3:0f:5a:ae:a5:1e:d7:
                    c3:bc:cb:79:d0:96:c9:d5:a2:a0:1c:eb:3e:e4:7e:
                    18:32:8b:3a:63:ea:68:2e:e3:40:02:b6:cb:34:87:
                    7f:41:60:4e:c2:80:21:95:05:f5:68:52:46:34:4a:
                    37:b1:79:c6:48:4d:bf:47:56:99:3b:d2:07:5d:29:
                    81:2b:5f:70:13:0a:4d:5d:e9:85:b7:62:9e:30:d1:
                    59:53:46:2d:11:00:8f:9b:ca:c0:96:16:cb:3e:22:
                    dc:cd:14:bf:43:0d:c7:16:4f:34:b8:05:92:f7:df:
                    06:30:61:80:a2:9c:4a:72:fd:71:79:fb:7a:0c:ea:
                    ad:6a:40:dc:10:53:1c:e8:b6:c3:81:0f:d0:7f:10:
                    80:75:51:6f:0f:26:c1:0a:f9:7a:41:ce:17:68:4c:
                    d6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2B:86:FA:A4:65:C4:13:57:72:FD:50:FA:54:6A:05:E0:39:3A:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b9cfdb9e-e4f4-32a0-adeb-cddf932bf354.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:d1:88:c1:0c:5b:75:a2:2a:bf:c6:fb:db:f5:d5:80:81:56:
         74:a8:f8:23:d6:f3:a5:6c:34:e3:3d:20:4b:c4:44:3d:be:f2:
         02:86:eb:55:47:45:60:06:bc:7a:03:e1:4a:6f:02:2b:93:7d:
         cf:66:1f:dd:7e:30:98:b4:a1:1c:b8:64:77:38:93:0d:5d:95:
         84:23:ee:0f:b7:00:18:91:ee:f9:0f:a9:53:68:2e:7e:72:3a:
         06:9b:00:9a:48:13:53:83:82:7b:9b:93:e3:37:9d:3f:58:b4:
         28:3c:ad:6b:7e:c3:8f:70:4e:d4:ae:5a:36:a5:84:11:03:cd:
         64:8a:39:d2:1b:76:a2:2e:87:ac:e4:66:01:38:26:7a:19:61:
         3b:74:3c:89:38:5d:f2:4d:c9:bc:a7:66:42:9c:5f:47:c5:df:
         6f:6d:d5:47:ea:d5:01:5a:9e:0b:bd:a5:66:5b:35:5f:92:0a:
         e5:9f:83:29:70:af:43:57:8e:e9:b7:ed:3f:b1:e2:d7:a3:9a:
         3e:3d:45:0f:b4:b5:61:7a:50:ca:4d:41:eb:3f:69:26:dd:2f:
         f9:18:3f:f9:6b:db:dc:77:f3:b2:fa:d6:6a:3d:09:76:72:6a:
         33:e7:6e:5b:bd:8c:09:a0:83:c6:50:fd:c1:a3:79:28:9d:06:
         49:a4:17:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:39:11 2026 by rpki-client