Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/c341fcf1-2f17-3dba-a0ac-a0e9eec08324.roa
File:                     c341fcf1-2f17-3dba-a0ac-a0e9eec08324.roa (raw, json)
Hash identifier:          9q2bWhVrVU15Tkc0xIQVrp6dNEWvJhxM2Gd3DJP5fig=
Subject key identifier:   4B:95:AF:CE:F5:CB:D3:33:F9:38:61:08:FF:F1:BB:63:9C:25:91:F3
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDBE99C1E076C070A1B3A32
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/c341fcf1-2f17-3dba-a0ac-a0e9eec08324.roa
Signing time:             Tue 07 Apr 2026 16:27:47 +0000
ROA not before:           Tue 07 Apr 2026 16:27:47 +0000
ROA not after:            Mon 06 Jul 2026 16:27:47 +0000
asID:                     10557
IP address blocks:        104.252.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:db:e9:9c:1e:07:6c:07:0a:1b:3a:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:27:47 2026 GMT
            Not After : Jul  6 16:27:47 2026 GMT
        Subject: CN=587249cb-4d5d-4a81-b1b4-88bfd906d832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d5:6e:a5:28:cc:28:d5:76:da:0b:76:8d:d3:
                    ac:f3:5e:0e:6b:99:30:c3:1c:36:4b:e4:a1:9f:a2:
                    24:63:06:c9:8d:61:42:d4:4b:1f:3d:e7:13:dc:ce:
                    e1:53:d0:92:3d:ee:e6:e8:aa:b5:58:7e:5c:35:b6:
                    8f:c4:be:ed:d8:10:f8:53:f8:63:38:42:0b:4e:f8:
                    9d:52:b0:e5:2a:d5:e5:60:df:c0:0d:ca:49:32:77:
                    0a:5a:f0:aa:35:f7:8f:02:9e:c2:24:db:a3:cc:65:
                    77:63:be:52:8e:5c:8c:06:ef:d4:17:6a:e2:d7:fa:
                    75:18:a4:8c:d3:9b:f9:6c:47:be:29:83:c1:dd:1b:
                    27:90:cd:4e:7c:18:a0:6b:f0:a9:04:43:5b:1d:f4:
                    a5:c1:f1:09:57:98:e3:bd:bc:4f:16:48:be:e8:12:
                    f5:28:75:8e:b8:dd:86:ed:17:0e:73:0d:ec:f0:7d:
                    55:ec:a3:df:48:53:4f:40:72:85:ed:74:5f:d3:4b:
                    62:a2:38:10:28:d8:23:23:4f:7c:85:2c:9c:96:85:
                    51:c0:e7:23:a6:ae:bb:be:82:aa:f5:cf:93:24:b0:
                    e1:79:15:2c:8f:4a:98:ac:2b:84:09:8d:fe:01:c0:
                    e7:e2:9b:4f:6f:7a:7d:c1:39:03:44:ef:91:10:25:
                    2f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:95:AF:CE:F5:CB:D3:33:F9:38:61:08:FF:F1:BB:63:9C:25:91:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/c341fcf1-2f17-3dba-a0ac-a0e9eec08324.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:46:12:8a:3b:1f:98:87:3f:6f:8b:c4:51:81:64:c0:2c:26:
         de:eb:2f:18:d9:72:1d:02:d3:f5:88:fa:9b:61:94:05:01:c2:
         9d:70:e9:4b:c7:7c:86:3e:a3:39:96:52:77:06:62:5c:a8:0c:
         ca:54:0e:ed:09:3b:fb:59:7d:05:cf:85:31:9b:af:98:d1:7f:
         eb:0a:14:8a:1f:a1:07:d6:71:1d:01:e8:12:51:2c:bd:00:e0:
         51:49:b5:c3:97:e4:0f:73:96:a0:e7:8d:a3:49:f7:67:44:d0:
         77:9d:e6:e2:83:b6:0b:a8:f6:75:63:ac:1e:54:c6:74:ae:96:
         5c:99:f7:79:ec:71:4f:b3:06:b3:0e:2a:70:3b:88:bf:8f:c9:
         ee:69:18:bd:47:0f:91:8b:ce:43:33:af:d3:f4:02:7b:74:cc:
         4e:2b:77:ea:86:28:c0:60:1b:42:e9:40:f1:34:2b:e5:16:7e:
         77:7b:1d:83:aa:f1:fd:d6:1c:f4:d9:f9:83:f7:61:cb:b8:cd:
         ba:aa:0c:90:3a:de:e0:5a:b0:b6:0c:6b:65:5b:da:75:15:22:
         d6:5b:0f:c6:a0:ec:8d:75:fa:f4:f5:b6:46:f1:f1:dc:0c:64:
         e8:21:2a:d8:31:f4:d3:5e:a6:4e:07:55:ff:b0:fc:68:24:ce:
         27:98:aa:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:39:30 2026 by rpki-client