Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/bdbf5cd8-4849-33f6-830f-17bb1d055bbd.roa
File:                     bdbf5cd8-4849-33f6-830f-17bb1d055bbd.roa (raw, json)
Hash identifier:          UQhJLyPQcHoKkPZO8YgJgGQe6EXR338Lq+zSG9rTby4=
Subject key identifier:   EB:09:E4:9A:1F:F6:0B:6C:BF:C5:62:DD:14:5E:FA:18:42:18:A8:67
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDC401677487CCDE02BF5C0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/bdbf5cd8-4849-33f6-830f-17bb1d055bbd.roa
Signing time:             Tue 07 Apr 2026 16:28:28 +0000
ROA not before:           Tue 07 Apr 2026 16:28:28 +0000
ROA not after:            Mon 06 Jul 2026 16:28:28 +0000
asID:                     9009
IP address blocks:        104.253.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dc:40:16:77:48:7c:cd:e0:2b:f5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:28:28 2026 GMT
            Not After : Jul  6 16:28:28 2026 GMT
        Subject: CN=a4cacd30-71bd-463a-9294-aa612f1137fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4e:30:d6:b9:16:78:99:70:e9:74:c5:c8:6b:
                    c7:70:01:05:b7:49:84:1a:ff:7a:c2:c7:cb:e0:48:
                    14:fa:41:5c:f3:ad:d6:3f:51:13:ca:71:b2:29:c9:
                    c6:bc:02:57:d6:2c:70:89:82:77:e1:ad:40:b5:a2:
                    6b:30:1c:5b:dd:84:91:76:c4:b5:a6:5b:07:6d:36:
                    d9:bb:4b:2d:fa:eb:2f:6a:86:bd:50:ce:e5:46:61:
                    8f:62:0e:ac:4f:9c:bc:35:2f:cd:c0:f0:d0:ad:bc:
                    11:d9:5d:4a:bb:56:1d:33:3d:57:e8:54:30:28:db:
                    40:66:8c:6f:ab:97:cf:a7:fb:46:51:65:9c:4a:97:
                    ba:c9:54:33:4f:f0:4f:4c:17:a5:31:3a:55:eb:7c:
                    46:62:f0:4a:60:77:bc:d6:96:e1:2b:31:73:59:3f:
                    95:f8:9a:28:88:3d:26:f5:7a:df:c9:71:74:02:6e:
                    2b:cd:6a:7a:b5:fa:ca:d1:5b:47:7d:11:42:af:0e:
                    89:30:ca:fd:87:91:8d:91:22:e8:47:5a:83:57:a2:
                    6b:aa:99:61:13:26:eb:67:c1:09:4b:b9:50:d8:b3:
                    ce:a9:75:be:66:f7:fa:1d:48:07:3d:a4:82:8c:80:
                    89:09:d8:e6:b0:19:f2:e8:14:3c:a1:0d:6b:da:3a:
                    11:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:09:E4:9A:1F:F6:0B:6C:BF:C5:62:DD:14:5E:FA:18:42:18:A8:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/bdbf5cd8-4849-33f6-830f-17bb1d055bbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:d3:77:d7:b1:2b:4a:69:fb:0a:58:f0:8e:98:e8:4c:16:70:
         68:e2:4d:d2:cd:46:9d:22:44:33:d1:81:eb:5e:8d:6c:a2:a3:
         34:ee:25:0e:8d:f7:38:01:0a:a0:ee:e8:ae:ec:19:93:91:cc:
         56:c5:96:a2:91:f0:e8:74:51:6f:6e:61:62:02:62:b3:1e:a4:
         98:a4:3f:d7:a4:8a:7b:b9:2c:23:b4:72:83:1b:d8:27:46:92:
         58:b2:2c:03:bc:77:00:74:44:ba:8c:00:3c:ec:e1:26:f7:c5:
         06:75:3c:6d:6b:43:52:4d:0b:49:3b:9b:99:f6:a6:d5:2e:e5:
         b8:d4:6d:41:bf:eb:60:29:35:25:a5:6b:0c:e7:ff:e4:4d:8d:
         b4:3c:51:6f:de:b8:f8:23:67:47:58:fd:7e:7f:06:f6:55:4f:
         0e:26:09:bb:53:1e:41:ac:93:21:cc:6e:be:8e:91:ae:95:c8:
         b0:cc:92:10:0d:20:ea:ab:ff:f2:2f:55:f6:e0:6b:e9:1e:75:
         5c:51:44:59:14:a9:41:79:c9:0f:b1:4e:2c:3d:31:54:74:66:
         11:00:9e:e3:4d:bd:bc:ce:6c:cd:d2:a5:b0:5e:84:1a:60:5c:
         f5:ff:15:47:a9:3e:b9:56:46:8d:b7:20:91:c5:9b:88:e1:73:
         3b:43:12:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1t3EAWd0h8zeAr9cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDQwNzE2MjgyOFoXDTI2MDcwNjE2MjgyOFowLzEtMCsGA1UEAxMk
YTRjYWNkMzAtNzFiZC00NjNhLTkyOTQtYWE2MTJmMTEzN2ZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyk4w1rkWeJlw6XTFyGvHcAEFt0mEGv96wsfL
4EgU+kFc863WP1ETynGyKcnGvAJX1ixwiYJ34a1AtaJrMBxb3YSRdsS1plsHbTbZ
u0st+usvaoa9UM7lRmGPYg6sT5y8NS/NwPDQrbwR2V1Ku1YdMz1X6FQwKNtAZoxv
q5fPp/tGUWWcSpe6yVQzT/BPTBelMTpV63xGYvBKYHe81pbhKzFzWT+V+JooiD0m
9XrfyXF0Am4rzWp6tfrK0VtHfRFCrw6JMMr9h5GNkSLoR1qDV6JrqplhEybrZ8EJ
S7lQ2LPOqXW+Zvf6HUgHPaSCjICJCdjmsBny6BQ8oQ1r2joR1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOsJ5Jof9gtsv8Vi3RRe+hhCGKhnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvYmRiZjVjZDgtNDg0OS0z
M2Y2LTgzMGYtMTdiYjFkMDU1YmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP2XMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGTTd9exK0pp+wpY8I6Y6EwWcGjiTdLNRp0iRDPRgetejWyiozTuJQ6N
9zgBCqDu6K7sGZORzFbFlqKR8Oh0UW9uYWICYrMepJikP9ekinu5LCO0coMb2CdG
kliyLAO8dwB0RLqMADzs4Sb3xQZ1PG1rQ1JNC0k7m5n2ptUu5bjUbUG/62ApNSWl
awzn/+RNjbQ8UW/euPgjZ0dY/X5/BvZVTw4mCbtTHkGskyHMbr6Oka6VyLDMkhAN
IOqr//IvVfbga+kedVxRRFkUqUF5yQ+xTiw9MVR0ZhEAnuNNvbzObM3SpbBehBpg
XPX/FUepPrlWRo23IJHFm4jhcztDElk=
-----END CERTIFICATE-----
Generated at Wed Apr 8 01:39:28 2026 by rpki-client