Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/dd10cd24-b84f-3d46-b507-985117f0aa88.roa
File:                     dd10cd24-b84f-3d46-b507-985117f0aa88.roa (raw, json)
Hash identifier:          efVws7Wd9zAqToXUzWCqhParucFCytOqymdwRwxHORY=
Subject key identifier:   DE:7A:2F:25:AF:3E:60:E0:1C:BA:83:46:B1:C1:FA:4A:D3:62:1E:FB
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDC13FED3D217B29C5FE6C0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/dd10cd24-b84f-3d46-b507-985117f0aa88.roa
Signing time:             Tue 07 Apr 2026 16:28:07 +0000
ROA not before:           Tue 07 Apr 2026 16:28:07 +0000
ROA not after:            Mon 06 Jul 2026 16:28:07 +0000
asID:                     18779
IP address blocks:        104.253.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dc:13:fe:d3:d2:17:b2:9c:5f:e6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:28:07 2026 GMT
            Not After : Jul  6 16:28:07 2026 GMT
        Subject: CN=74f8a09d-ec18-4119-be75-79b75c9f4edc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ce:8a:57:a1:33:ab:12:d0:f2:80:95:35:90:
                    d4:28:88:83:f4:f9:ea:a8:ce:07:ae:b9:a6:1d:9b:
                    d9:40:47:e4:fc:bb:e5:f2:72:59:30:64:e0:c3:22:
                    15:36:46:e6:9b:28:f2:f4:04:b3:5a:2a:79:5f:84:
                    38:4d:4e:c3:70:61:be:a9:9c:ed:81:ed:d7:db:f7:
                    d6:3a:00:0e:0e:3a:b2:5b:33:d8:df:88:b5:96:80:
                    c9:9d:8f:3c:4f:4b:ff:24:a3:6f:d4:5c:c8:58:50:
                    b7:b0:92:7e:78:07:f5:3e:8f:3a:74:08:9e:d8:f6:
                    b7:88:65:58:83:a4:8f:8f:37:63:be:bc:eb:37:3b:
                    88:78:c7:54:3b:76:83:a5:aa:20:4b:9a:77:e1:6e:
                    ce:61:6e:be:ee:97:36:7d:17:77:bb:ae:ed:12:27:
                    a6:49:44:05:54:6c:eb:18:1a:48:d4:1c:b0:64:b4:
                    c6:99:22:6d:37:1c:a9:18:a9:13:6c:19:1b:31:00:
                    cc:f4:01:a8:2a:af:e7:03:27:ba:65:1b:27:d8:17:
                    8f:ff:59:c5:8a:78:fd:57:8b:c2:a2:a4:71:09:5a:
                    ec:3e:be:fb:ba:61:3d:cb:66:cc:ab:84:29:38:41:
                    bd:6e:e6:84:0d:8b:4c:48:17:dd:c0:d1:03:90:4b:
                    cf:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:7A:2F:25:AF:3E:60:E0:1C:BA:83:46:B1:C1:FA:4A:D3:62:1E:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/dd10cd24-b84f-3d46-b507-985117f0aa88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:6d:29:1c:12:b2:cc:81:20:68:7b:15:bc:38:8a:14:25:3d:
         0c:54:9c:cc:79:80:f3:cc:88:c1:92:4f:95:d7:26:e1:24:3d:
         49:07:d9:c2:5e:80:44:42:49:48:e7:fe:04:e7:21:09:8e:47:
         2c:1d:b4:2a:63:ef:50:11:c6:b5:24:00:18:02:ae:8d:20:1d:
         b3:53:f6:dc:b2:3b:25:4b:49:f2:2a:df:3d:ad:cc:93:ea:3e:
         c6:f9:e1:21:30:6a:f9:78:b2:0e:d2:37:53:68:79:0f:b7:0b:
         a0:3c:a1:b7:83:42:c9:f7:17:71:ef:96:81:7c:d0:80:a2:61:
         34:83:34:e2:c6:eb:f5:24:69:2d:92:b8:c1:a3:33:cf:ea:3d:
         43:93:d1:66:1f:35:52:5e:01:af:87:90:26:fd:ea:44:dc:8e:
         f4:15:95:a1:d8:eb:f4:a7:55:14:3b:80:66:03:23:a6:c2:96:
         87:9e:af:0a:18:6f:3b:2d:ce:10:d9:b0:be:0f:e1:ef:31:58:
         89:2c:95:fa:8f:6e:92:06:4d:e2:34:f0:bb:6f:6e:56:2b:02:
         24:d8:7a:15:1b:bb:99:38:c5:98:6a:5d:fd:8d:9b:72:cd:28:
         66:19:fb:c7:40:ba:9f:93:78:a8:dc:ba:dd:ea:17:a4:6b:c9:
         4e:77:03:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:42:36 2026 by rpki-client