Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/cf81b6b4-c938-33d7-a9e7-1b979a0d3ba5.roa
File:                     cf81b6b4-c938-33d7-a9e7-1b979a0d3ba5.roa (raw, json)
Hash identifier:          Q7wUphoCLGJoBHNXBXxVfDHX7+wAHzsrlMvFgqUKbCQ=
Subject key identifier:   42:9D:31:7E:F6:A7:E8:B4:08:30:0B:7B:11:4E:A4:AA:57:59:AC:A2
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDBD5205FC57CC8D0A97DF8
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/cf81b6b4-c938-33d7-a9e7-1b979a0d3ba5.roa
Signing time:             Tue 07 Apr 2026 16:27:37 +0000
ROA not before:           Tue 07 Apr 2026 16:27:37 +0000
ROA not after:            Mon 06 Jul 2026 16:27:37 +0000
asID:                     213823
IP address blocks:        104.252.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:db:d5:20:5f:c5:7c:c8:d0:a9:7d:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:27:37 2026 GMT
            Not After : Jul  6 16:27:37 2026 GMT
        Subject: CN=165003d7-7177-4931-8db3-d0610b2c1442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:56:17:a1:18:b1:63:7d:93:fc:1c:16:dc:78:
                    44:f2:64:e8:96:ce:b4:50:bf:f4:3e:1e:eb:3c:cf:
                    e0:8a:46:a1:63:e0:6b:64:58:46:c4:f8:da:e8:14:
                    37:c8:5f:fd:02:90:ba:7e:d0:c4:2b:bf:41:c1:b1:
                    6d:af:5e:d0:d5:b4:4f:20:70:f9:94:77:4b:9e:9e:
                    2e:9f:6c:ac:94:eb:f5:de:41:56:ec:f8:7e:96:b4:
                    c5:6c:cf:a5:69:db:f2:f9:95:f3:58:92:4b:f5:a2:
                    dc:75:05:99:29:96:91:ed:5f:39:8b:09:ac:b7:0b:
                    95:5b:87:d5:11:ea:23:e6:f3:96:de:51:a6:78:f3:
                    90:b1:a4:20:e6:8a:1d:05:c7:fe:94:47:14:76:07:
                    ae:dd:b0:05:2d:9c:22:f7:0a:30:82:b6:41:52:c2:
                    51:71:83:3a:6b:3e:cd:4f:29:9f:57:9b:6e:41:31:
                    bf:db:25:1b:2b:60:11:49:4d:f8:40:a1:37:b9:67:
                    41:48:d6:b2:ea:56:5d:71:99:e1:93:28:b4:18:14:
                    40:e2:3a:10:8b:20:30:e8:26:99:33:fd:26:2b:bb:
                    69:75:d0:0b:c0:5d:47:f1:f7:94:c9:35:e8:94:1c:
                    7b:c7:9b:2f:f1:8f:e1:2d:94:17:4c:d4:0a:03:67:
                    70:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:9D:31:7E:F6:A7:E8:B4:08:30:0B:7B:11:4E:A4:AA:57:59:AC:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/cf81b6b4-c938-33d7-a9e7-1b979a0d3ba5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:9d:34:b9:5b:1e:38:51:f2:49:85:5b:82:9d:e6:7b:47:af:
         5e:72:f7:9b:78:98:cb:e3:09:4b:21:29:cc:4e:31:f9:59:4b:
         32:5f:7a:09:d4:52:4c:f4:15:8a:33:b9:84:3d:3f:c9:f4:12:
         ce:12:73:b6:08:eb:70:0e:c7:dc:f8:34:8c:2c:ca:a0:84:25:
         81:bb:b2:62:b7:47:50:07:cb:f0:1b:4f:01:04:a7:b4:87:9f:
         10:6d:08:a2:54:7f:c9:c2:f4:bd:56:72:44:0d:1c:8e:aa:43:
         e5:41:66:8f:18:37:76:f9:f3:12:7c:d2:80:b4:36:3c:91:5b:
         c6:b1:aa:a9:4d:2e:d1:e5:72:d3:da:bb:aa:89:a1:97:f0:03:
         b1:87:f5:42:40:44:1f:19:92:27:f0:e6:02:52:d5:35:3a:a5:
         1e:5f:f4:b1:45:fd:6a:cb:57:2f:ae:e5:f1:45:fa:53:8d:e9:
         9f:46:88:ef:e6:77:66:f4:09:c7:dd:81:8c:db:3f:3f:37:f5:
         4b:2c:d5:99:e4:02:13:de:4f:75:71:e5:39:be:cc:6c:17:5f:
         62:20:65:6e:8d:6e:ab:33:86:4a:7f:7f:ce:1c:95:39:69:f7:
         a9:24:7b:5f:ee:96:a3:aa:a0:92:fa:c8:8a:f0:54:47:f6:84:
         78:6c:07:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:40:38 2026 by rpki-client