Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/da44fc55-a6d7-3377-b66c-1bd508a77be9.roa
File:                     da44fc55-a6d7-3377-b66c-1bd508a77be9.roa (raw, json)
Hash identifier:          iP03Ew50bG/5gvWkKtfvNeahLvlHiRvL4oPoP2u86OU=
Subject key identifier:   D6:78:1B:78:29:27:7A:81:2D:22:9D:78:AD:95:C7:F2:ED:3C:E9:92
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDC3E73FC3F9E5FA6438100
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/da44fc55-a6d7-3377-b66c-1bd508a77be9.roa
Signing time:             Tue 07 Apr 2026 16:28:27 +0000
ROA not before:           Tue 07 Apr 2026 16:28:27 +0000
ROA not after:            Mon 06 Jul 2026 16:28:27 +0000
asID:                     18779
IP address blocks:        104.253.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dc:3e:73:fc:3f:9e:5f:a6:43:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:28:27 2026 GMT
            Not After : Jul  6 16:28:27 2026 GMT
        Subject: CN=6670a707-105f-4a1d-a2f4-3d59cd191759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:77:1b:f2:13:6b:8c:62:71:88:d2:f1:82:d4:
                    5f:f0:83:b8:c3:a5:e0:22:8b:b7:6f:58:f7:eb:9c:
                    67:5e:bb:48:7f:7b:37:56:1b:a3:28:01:03:ca:cb:
                    6d:48:12:a4:96:d1:9e:76:71:57:65:49:b0:b4:12:
                    c1:ca:16:3c:4a:fe:d0:2e:0d:bd:18:e1:29:65:d5:
                    a2:dd:3c:f8:af:f7:f3:4d:e7:a3:b5:f5:10:19:58:
                    8d:5c:15:61:a7:2d:2b:d3:12:72:fc:b9:99:0f:52:
                    23:6f:60:54:2e:92:c5:de:d9:eb:70:63:d1:5c:42:
                    98:7f:cc:d8:67:e1:3c:a4:bc:82:05:73:1e:cb:b5:
                    05:d7:87:bd:19:d6:62:51:88:1a:3b:30:e4:e8:56:
                    ca:3a:35:f1:87:9c:af:56:c2:87:df:8c:6d:d2:45:
                    5a:e5:15:63:3b:af:8a:4b:45:6d:d1:00:55:49:67:
                    05:86:ce:ec:a9:ff:95:8f:bb:72:21:2d:ca:10:e1:
                    dd:77:bb:47:b1:c9:38:a6:3f:9a:91:09:40:99:a6:
                    f6:81:33:39:86:6e:68:01:01:a1:59:e4:84:2b:47:
                    62:21:18:fd:25:d5:9a:f0:24:17:1e:c9:97:dc:7e:
                    8d:b1:70:47:1c:be:9b:60:66:5b:37:60:50:92:64:
                    33:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:78:1B:78:29:27:7A:81:2D:22:9D:78:AD:95:C7:F2:ED:3C:E9:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/da44fc55-a6d7-3377-b66c-1bd508a77be9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:c3:f5:8c:37:76:1f:bd:a9:05:ae:d0:40:cf:bc:c5:58:be:
         b8:a5:2e:57:a0:34:b4:fd:b5:23:d8:ed:84:a9:14:b1:b4:98:
         b9:d1:ce:97:5b:35:08:2b:0d:44:39:b5:ba:e8:55:93:29:11:
         5b:c7:0d:ee:3e:d5:d1:c0:c8:f7:9a:d7:d4:b1:ab:00:2f:a2:
         21:45:06:98:b1:37:97:f0:e0:9b:97:b7:60:34:de:ce:bc:84:
         c2:bf:1b:b6:91:4c:5f:0b:d4:65:30:c1:8b:74:02:fe:4a:ae:
         dc:8b:b5:aa:89:7b:71:85:d8:d7:97:e7:95:c5:31:27:8d:54:
         51:19:ca:52:08:65:c3:ee:06:17:af:d9:66:28:ab:a1:4d:56:
         a0:83:e9:e4:fb:73:89:d5:f2:d3:86:4c:00:ca:1e:98:fa:66:
         0e:76:21:8a:13:7f:2f:15:83:d5:59:33:70:5d:f3:f6:4e:ce:
         aa:6f:d0:bf:36:c8:45:e1:8c:7a:70:23:58:4d:8b:6a:4c:b7:
         01:b4:b1:07:d3:3f:f6:16:fa:69:85:cf:96:02:b1:14:23:b2:
         ed:7e:b6:e7:85:a1:e7:65:4e:dd:b9:19:fc:a4:3a:79:59:02:
         72:5c:d5:72:40:62:5e:e7:af:c2:c8:12:db:21:95:f9:64:23:
         ab:67:29:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:40:48 2026 by rpki-client