Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f299eacf-9645-3c2e-bf77-214a664ccdae.roa
File:                     f299eacf-9645-3c2e-bf77-214a664ccdae.roa (raw, json)
Hash identifier:          96Xi5R2qBUnecgQNayrqb1BbC/f0N+tCq3snJvyPl4A=
Subject key identifier:   73:91:E7:03:77:8A:D5:9A:D9:DF:01:00:AF:03:B6:8F:03:76:F9:6C
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDC3E10C244E4684713FA40
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f299eacf-9645-3c2e-bf77-214a664ccdae.roa
Signing time:             Tue 07 Apr 2026 16:28:27 +0000
ROA not before:           Tue 07 Apr 2026 16:28:27 +0000
ROA not after:            Mon 06 Jul 2026 16:28:27 +0000
asID:                     18779
IP address blocks:        104.253.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dc:3e:10:c2:44:e4:68:47:13:fa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:28:27 2026 GMT
            Not After : Jul  6 16:28:27 2026 GMT
        Subject: CN=067ad6ec-f570-415c-a891-9d6fb1596c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:95:71:d6:1f:bf:6f:5f:97:2f:fd:14:9a:fa:
                    6a:82:c1:51:01:5c:92:9e:45:b5:e9:9a:ab:57:30:
                    a4:65:4e:1a:ee:43:55:94:6a:d6:b2:c9:2d:e7:c7:
                    6c:4d:ea:96:70:5a:b0:bf:52:fd:df:73:ea:3f:31:
                    19:e3:82:7c:80:1c:b9:9c:5a:da:fa:5e:4e:ca:94:
                    b9:08:12:a7:4d:85:27:9b:14:80:d8:ed:bc:85:e8:
                    3c:73:36:fb:01:00:b2:61:14:a8:b6:a2:32:df:1a:
                    e8:a7:b8:ad:8d:fb:48:d6:dd:11:4b:9d:f7:11:ee:
                    dc:0e:46:33:df:9a:60:49:75:a5:fc:b8:e9:9c:c2:
                    02:82:80:1a:7f:c2:e2:6c:0b:47:1a:92:3c:e9:a7:
                    bf:00:82:69:6b:de:48:2a:5d:45:2d:17:5b:46:86:
                    00:e2:dd:16:50:94:68:22:1e:36:9c:2f:21:3b:fd:
                    2d:25:2a:f6:c2:94:79:bf:b3:f5:a0:be:24:90:fd:
                    99:66:d0:97:cb:db:90:3d:2c:00:d2:32:b4:2c:eb:
                    35:4f:d2:1d:6d:76:76:e7:17:f0:44:7e:2c:ac:af:
                    ff:b6:9e:4f:a7:f6:33:7b:fe:e4:95:c8:72:22:68:
                    7e:fa:20:8d:9b:bc:1b:27:ee:0c:d6:5c:7a:a2:9a:
                    4b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:91:E7:03:77:8A:D5:9A:D9:DF:01:00:AF:03:B6:8F:03:76:F9:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f299eacf-9645-3c2e-bf77-214a664ccdae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:26:87:43:b2:e7:9d:b5:61:1b:ed:43:05:66:8d:59:53:e1:
         e2:2b:46:3b:cd:0d:26:39:f8:e7:6f:4e:de:2a:70:0d:86:cb:
         b1:35:1f:c3:c0:93:ab:c8:63:10:20:3f:9e:91:8e:2d:66:05:
         e8:77:04:31:60:1d:0b:73:ab:69:8b:d7:04:f5:9b:88:86:be:
         11:c1:cd:44:d8:e1:01:f5:fa:49:d4:fb:37:d9:00:1f:40:e4:
         7a:5b:27:c4:aa:29:77:56:8d:0a:36:35:f5:e7:9a:cb:d9:78:
         a9:1c:a2:33:5f:2b:56:21:11:f9:3e:40:a2:bd:e5:8a:3e:3f:
         65:e8:fe:84:6c:1c:a1:b6:50:38:be:cf:8f:2e:ba:6c:bc:42:
         e8:2a:41:c4:0c:e4:50:2a:37:5e:ab:7d:4f:37:da:11:07:43:
         db:fb:fd:b5:fe:07:99:3e:d2:63:6e:5e:b4:10:4e:dc:99:a1:
         58:4f:16:10:63:f5:ed:ee:fc:aa:3c:a6:8f:58:cc:1b:02:3d:
         3f:d7:b4:79:5b:12:b5:57:ae:ba:d5:e3:5d:c1:1e:66:14:b8:
         7e:56:a2:aa:4f:c3:ca:1f:a7:2d:b7:98:39:b1:7d:72:56:64:
         61:e4:69:ee:2a:e7:35:9f:c8:cb:6b:47:f6:67:c0:4e:ce:29:
         7c:0a:b0:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1t3D4QwkTkaEcT+kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDQwNzE2MjgyN1oXDTI2MDcwNjE2MjgyN1owLzEtMCsGA1UEAxMk
MDY3YWQ2ZWMtZjU3MC00MTVjLWE4OTEtOWQ2ZmIxNTk2YzE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5Vx1h+/b1+XL/0UmvpqgsFRAVySnkW16Zqr
VzCkZU4a7kNVlGrWsskt58dsTeqWcFqwv1L933PqPzEZ44J8gBy5nFra+l5OypS5
CBKnTYUnmxSA2O28heg8czb7AQCyYRSotqIy3xrop7itjftI1t0RS533Ee7cDkYz
35pgSXWl/LjpnMICgoAaf8LibAtHGpI86ae/AIJpa95IKl1FLRdbRoYA4t0WUJRo
Ih42nC8hO/0tJSr2wpR5v7P1oL4kkP2ZZtCXy9uQPSwA0jK0LOs1T9IdbXZ25xfw
RH4srK//tp5Pp/Yze/7klchyImh++iCNm7wbJ+4M1lx6oppLAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHOR5wN3itWa2d8BAK8Dto8DdvlsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvZjI5OWVhY2YtOTY0NS0z
YzJlLWJmNzctMjE0YTY2NGNjZGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP1sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB8mh0Oy5521YRvtQwVmjVlT4eIrRjvNDSY5+OdvTt4qcA2Gy7E1H8PA
k6vIYxAgP56Rji1mBeh3BDFgHQtzq2mL1wT1m4iGvhHBzUTY4QH1+knU+zfZAB9A
5HpbJ8SqKXdWjQo2NfXnmsvZeKkcojNfK1YhEfk+QKK95Yo+P2Xo/oRsHKG2UDi+
z48uumy8QugqQcQM5FAqN16rfU832hEHQ9v7/bX+B5k+0mNuXrQQTtyZoVhPFhBj
9e3u/Ko8po9YzBsCPT/XtHlbErVXrrrV413BHmYUuH5WoqpPw8ofpy23mDmxfXJW
ZGHkae4q5zWfyMtrR/ZnwE7OKXwKsJY=
-----END CERTIFICATE-----
Generated at Wed Apr 8 01:39:33 2026 by rpki-client