Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/ce966cd1-d626-3de4-9ba0-c5db713e79a0.roa
File:                     ce966cd1-d626-3de4-9ba0-c5db713e79a0.roa (raw, json)
Hash identifier:          omM1jZtidOHjPm/I5oAg2ImRzKviTKer+rpapIZjjoo=
Subject key identifier:   15:65:42:83:81:1F:CB:28:74:20:19:BF:63:07:E2:9E:6B:BE:0F:50
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DD803A93C796C1C6E6B7100
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/ce966cd1-d626-3de4-9ba0-c5db713e79a0.roa
Signing time:             Tue 07 Apr 2026 16:19:56 +0000
ROA not before:           Tue 07 Apr 2026 16:19:56 +0000
ROA not after:            Mon 06 Jul 2026 16:19:56 +0000
asID:                     834
IP address blocks:        104.252.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:d8:03:a9:3c:79:6c:1c:6e:6b:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:19:56 2026 GMT
            Not After : Jul  6 16:19:56 2026 GMT
        Subject: CN=33806414-5f16-48cc-a615-b1c346ed2c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:26:0b:78:98:ef:7b:51:fc:be:42:6b:68:68:
                    02:71:c1:6c:e7:df:1a:14:85:9c:32:9b:89:f7:84:
                    21:c0:f6:c3:e6:00:c0:84:c4:42:2c:9c:7c:ad:74:
                    03:72:9a:3b:82:62:8e:10:4c:bf:04:6b:75:fa:95:
                    89:5d:c3:48:16:65:77:1f:a5:21:ea:3e:c0:7b:28:
                    ec:b3:07:79:d6:38:0a:7b:74:37:ff:b4:de:bf:2c:
                    1c:3b:03:6a:04:a0:30:61:36:4d:97:a7:5c:b6:76:
                    60:5d:52:7e:32:54:6c:c4:61:c0:92:28:11:e4:2e:
                    67:29:5d:91:9c:27:09:91:bc:57:f3:96:75:40:30:
                    3e:94:75:c5:4e:a6:dd:b4:a6:0d:4a:ea:f2:c5:ec:
                    dc:b4:44:89:ba:7c:87:6b:e2:32:31:cb:c9:46:47:
                    62:cb:92:f9:89:ad:49:34:8a:d1:6c:8d:70:a7:e7:
                    10:da:3e:f0:fc:ca:06:c5:77:f8:96:46:14:1d:fc:
                    31:02:44:db:1b:26:6c:21:e5:de:99:84:c8:10:30:
                    2b:09:13:29:9f:67:43:a2:71:fd:9a:58:31:9d:cd:
                    8f:f2:a3:01:05:74:97:98:3f:81:68:f6:53:c9:c9:
                    50:3e:5d:c5:c6:3c:50:ae:f9:4c:73:76:7a:21:c2:
                    5c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:65:42:83:81:1F:CB:28:74:20:19:BF:63:07:E2:9E:6B:BE:0F:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/ce966cd1-d626-3de4-9ba0-c5db713e79a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:7a:c2:ea:b8:27:c0:22:db:75:97:11:a4:d8:d0:81:d3:8d:
         47:7d:c2:40:9a:87:fc:90:1d:de:2c:11:94:55:af:73:5b:95:
         74:92:7b:db:9c:7d:f7:db:a8:05:c3:09:b2:3a:a3:55:9e:bb:
         59:80:6d:57:ce:e9:d6:dd:9f:1e:23:85:78:92:30:15:15:9c:
         89:a4:64:99:6c:7b:f7:2b:f1:13:b4:63:b3:c3:69:1a:47:dd:
         09:4c:cb:2a:f8:e2:7a:cf:57:f7:8c:30:8e:21:d8:61:b4:05:
         70:f9:9e:f0:c2:fc:55:e9:76:97:cb:64:a2:fa:0b:74:a9:99:
         65:fa:d4:95:97:57:56:66:d6:c9:26:ce:e1:96:92:a0:f7:bc:
         d5:1e:af:aa:12:57:02:c0:6e:9c:1a:8e:f0:eb:d0:99:36:46:
         56:80:14:5e:82:aa:2d:74:0d:0c:59:5d:16:b8:75:a7:ad:ae:
         ea:6b:12:3a:28:a7:0b:96:2d:c9:c8:a8:22:c2:ef:4e:b3:e9:
         bb:a3:3e:00:ea:22:a4:d0:1b:5b:9b:a4:5e:f8:08:f0:bf:af:
         bd:fa:40:8e:57:00:96:07:5b:e1:4f:5e:fa:e3:d9:af:97:87:
         76:e0:3e:6a:b6:15:b1:29:74:33:e7:31:75:62:b4:f7:bd:85:
         32:14:cd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:43:49 2026 by rpki-client