Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/e6f64482-574e-3b88-9c18-ee79192af628.roa
File:                     e6f64482-574e-3b88-9c18-ee79192af628.roa (raw, json)
Hash identifier:          u4oQJiySwh9TZPgNUjf70KEZLz48KFXHy6wmBIK2JJs=
Subject key identifier:   D8:31:0B:40:63:87:75:B6:B9:59:54:E5:F1:F0:3D:30:3F:24:68:1E
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDC274ECC01DC81FB1DD6C0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/e6f64482-574e-3b88-9c18-ee79192af628.roa
Signing time:             Tue 07 Apr 2026 16:28:16 +0000
ROA not before:           Tue 07 Apr 2026 16:28:16 +0000
ROA not after:            Mon 06 Jul 2026 16:28:16 +0000
asID:                     8881
IP address blocks:        104.253.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dc:27:4e:cc:01:dc:81:fb:1d:d6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:28:16 2026 GMT
            Not After : Jul  6 16:28:16 2026 GMT
        Subject: CN=ee64b5bf-3787-4151-9b93-f45b57e64b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d6:34:9d:3b:76:88:c6:12:c7:c8:f8:bc:ca:
                    52:33:76:65:31:9c:9e:c4:39:43:da:49:57:aa:bb:
                    3d:01:88:5e:6a:16:f5:7e:44:31:a6:a1:c5:15:18:
                    df:4e:9b:22:8c:1d:71:5f:68:49:a7:ca:0e:cb:c6:
                    be:32:77:5b:1c:fe:c2:ed:92:79:04:d4:01:ac:44:
                    ac:9e:12:3d:aa:7e:dd:c7:c2:7f:53:76:fd:20:a0:
                    22:b2:75:ef:dd:6c:08:5c:ec:1f:51:74:53:5b:76:
                    52:fd:38:e1:82:7d:a2:70:77:53:d8:82:eb:2e:dd:
                    1a:7e:13:3a:fc:75:32:73:16:2f:4d:68:ee:fd:a1:
                    be:ca:f1:d5:2f:72:58:e1:bd:94:ec:22:1a:2a:ac:
                    4f:5b:57:fb:4d:2e:2e:b2:c4:c3:e4:0b:ab:8e:28:
                    49:36:10:48:16:98:d2:57:39:9a:d1:cb:e2:e2:44:
                    9f:91:03:2a:16:7c:08:dd:40:07:36:49:87:08:b5:
                    02:9d:20:34:b6:ec:4e:83:df:9a:10:87:61:e7:8a:
                    2e:8e:ca:76:d9:86:9d:4a:1f:48:a2:28:30:70:ec:
                    30:28:8c:46:3a:8c:98:34:1c:cf:7e:b4:83:44:be:
                    31:de:a8:d0:25:ca:1f:34:e7:fb:d4:60:b9:03:d7:
                    77:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:31:0B:40:63:87:75:B6:B9:59:54:E5:F1:F0:3D:30:3F:24:68:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/e6f64482-574e-3b88-9c18-ee79192af628.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:3a:44:1d:36:af:6f:fb:84:8a:3e:6e:ea:3b:cf:bf:10:f9:
         bc:a8:23:a2:ba:c4:c1:3d:46:f7:17:45:14:3e:22:63:0c:1b:
         22:d8:a3:6c:b2:be:8f:e0:d3:24:4a:0c:0b:98:22:14:c6:c0:
         ce:42:31:80:fd:9f:b2:05:0b:7a:a5:e1:5c:ad:e0:9c:3b:3f:
         6c:bb:08:d4:8e:4f:68:3a:11:c7:a7:f5:84:5c:9b:48:06:c0:
         85:a2:f5:89:6c:45:f9:4c:a4:da:20:9e:28:da:b0:68:a7:fe:
         d8:88:29:6c:14:f5:bd:38:0d:b5:11:34:02:dc:b6:e8:93:2a:
         be:61:ef:6c:a8:d2:e7:47:f6:3a:41:8f:02:c5:63:38:d5:95:
         3c:52:70:90:1d:56:aa:96:fb:0e:ef:46:ac:28:b9:a5:8b:92:
         7d:39:25:3f:c6:cd:57:4f:7e:40:67:19:8a:73:00:73:61:95:
         60:42:a8:7a:0e:c4:a5:5a:5a:75:d6:9c:14:b7:77:42:97:c3:
         54:3e:94:60:31:0a:8f:4b:08:20:2e:71:0f:76:f8:ba:c8:85:
         03:e4:c7:63:6e:6f:f9:36:35:77:53:bf:fa:d2:d0:c9:be:b2:
         34:fb:52:3a:d1:b7:8f:41:21:90:03:20:98:85:12:10:20:ce:
         f6:8e:3c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:42:26 2026 by rpki-client