Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/119925c9-4abe-3635-b2eb-0184ab7543b4.roa
File:                     119925c9-4abe-3635-b2eb-0184ab7543b4.roa (raw, json)
Hash identifier:          s8b+Q1Y51hbobP1SDcTAAW7F+xmF7DguTBUSiaYcjms=
Subject key identifier:   30:62:CA:A6:AD:37:BB:EB:25:E1:DA:E1:77:91:DD:44:A1:82:D4:FE
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA0E36C842A56CB1E5FAC0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/119925c9-4abe-3635-b2eb-0184ab7543b4.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     59253
IP address blocks:        104.252.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:0e:36:c8:42:a5:6c:b1:e5:fa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=613a9722-37dd-449b-8622-81293224a2ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3b:7e:e5:67:14:61:a5:50:04:9d:9e:d4:64:
                    34:d1:82:44:f1:cc:ca:89:7c:d2:4a:af:c7:14:21:
                    14:40:24:e7:e8:18:0e:01:f9:08:cc:c1:69:96:04:
                    42:ee:66:71:81:58:6d:bf:32:ce:3e:31:76:39:ce:
                    e3:bd:9a:88:49:c9:31:a0:a4:91:49:df:61:d4:35:
                    b0:fa:61:60:b8:ae:59:0d:ca:c4:21:32:2c:a6:27:
                    86:ff:fb:a5:89:14:a9:14:8f:75:fc:c9:4f:fd:3e:
                    6c:30:26:15:40:df:98:f4:ff:39:7d:2b:43:b4:08:
                    fa:01:40:05:62:c6:83:54:9d:d2:a8:40:c9:a8:c0:
                    99:b3:ad:6e:7b:83:52:06:0b:2c:e8:cf:7a:7b:da:
                    d7:c9:bf:5b:85:2f:73:09:1d:ce:1a:ca:0b:ba:ab:
                    d3:c1:59:fb:08:bc:62:9d:d9:c8:43:14:2e:8a:42:
                    6b:52:9d:14:cd:d2:82:78:90:33:04:4f:e8:f1:2b:
                    a9:c2:0b:90:a2:25:e0:7b:8c:ee:42:21:5a:94:d5:
                    42:ca:48:f9:2a:7f:83:f3:94:4d:00:10:f9:a4:bf:
                    6e:0e:3d:69:29:76:b9:5e:0a:7f:db:d3:4d:04:94:
                    0c:60:26:92:19:c7:a3:90:2d:9d:45:c8:66:a3:68:
                    e3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:62:CA:A6:AD:37:BB:EB:25:E1:DA:E1:77:91:DD:44:A1:82:D4:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/119925c9-4abe-3635-b2eb-0184ab7543b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:ea:10:c7:26:e6:c8:9f:05:32:aa:05:c7:5f:79:f4:e0:5b:
         1e:90:95:45:56:b2:48:86:ca:ce:5d:10:8e:4b:88:ae:4e:59:
         c1:38:25:44:38:42:f5:81:74:1f:4b:f5:72:8a:10:12:2e:2d:
         33:54:4c:d2:99:7d:27:97:bf:45:ad:f7:6a:38:6a:cb:c0:b2:
         4b:1b:32:ba:a6:21:b6:9a:a7:8b:7a:8d:4a:cf:0b:8b:95:56:
         ab:ce:ed:63:e1:b1:24:95:1f:3e:25:3a:54:cc:fd:2a:90:23:
         6e:ab:c1:80:3d:95:00:21:e8:b6:34:4e:dc:79:21:ac:32:6f:
         e9:55:9e:ca:6e:e8:97:5e:04:b3:8a:4a:f6:df:a4:e4:88:54:
         06:a7:62:84:3c:08:2a:00:f9:84:74:b8:d5:46:37:57:d6:d5:
         1b:b9:4e:aa:fd:ba:72:d2:bf:cc:61:ae:f7:a2:e3:b3:d8:d7:
         c5:7c:20:b6:13:96:6c:38:65:f2:7c:07:44:40:0c:e2:24:e4:
         13:4b:41:ed:81:48:3e:5f:1e:3c:76:36:37:77:bc:c3:80:8d:
         d0:69:2f:97:9e:e6:2b:f5:be:28:7b:ff:eb:3d:e0:d6:68:76:
         a8:3b:f2:b1:1b:c1:bb:99:b0:3f:25:f4:7e:d4:1b:86:25:cb:
         b1:30:c4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:55:41 2026 by rpki-client