Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/16df6d81-c098-3b8c-a9d9-b05bc3049676.roa
File:                     16df6d81-c098-3b8c-a9d9-b05bc3049676.roa (raw, json)
Hash identifier:          C6z8Om2A9lVy8lSH52U3To+5SUMQck2j/yiMFZtkH9U=
Subject key identifier:   53:99:49:9D:A8:2D:5C:D6:3B:39:28:45:30:29:89:E7:C4:3E:F1:03
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA15EC97D446DDF3536B00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/16df6d81-c098-3b8c-a9d9-b05bc3049676.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     18779
IP address blocks:        104.253.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:15:ec:97:d4:46:dd:f3:53:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=d120b3be-cbad-4712-8523-0c0d2c5dc99d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:25:11:5a:6e:a6:d5:8b:ab:a7:7b:0e:66:20:
                    ae:05:57:c5:23:38:85:92:a3:0b:a8:6c:3f:62:76:
                    38:7a:7e:e7:c1:96:f1:b2:9c:c6:9f:9f:09:d9:61:
                    cb:10:ef:1a:38:ee:e9:b0:21:4b:07:47:16:dd:41:
                    90:5f:f2:13:21:fb:65:6d:21:95:3a:a3:0b:b4:32:
                    f2:e7:24:44:1c:54:42:1e:dd:50:dd:6f:0b:e6:08:
                    3d:20:03:78:38:4e:2a:8e:76:51:66:bc:13:c0:a8:
                    62:2c:00:dc:c6:4c:8b:1f:50:ae:1f:0f:2c:06:ad:
                    3d:d7:43:e5:15:87:e8:e8:87:84:29:06:a6:76:81:
                    a6:26:4a:5c:55:44:e6:01:2a:7d:f4:73:3f:ed:ca:
                    f1:83:27:1e:cc:ed:30:9b:d4:d1:65:d2:34:34:af:
                    da:41:f7:2c:22:57:7c:89:38:c2:46:ce:21:4a:e4:
                    58:85:e8:0d:14:52:9c:03:d7:02:25:07:a9:fe:f7:
                    8f:41:90:41:d9:a7:7e:8c:06:d6:86:64:1a:57:c9:
                    2f:ef:5a:62:3b:0c:49:90:c5:a0:a3:c7:c8:e5:23:
                    2b:0b:01:4d:60:66:32:3b:7f:77:6a:3d:df:ad:c2:
                    24:b5:13:f8:a7:3c:dc:1e:70:9c:61:fa:f2:4b:98:
                    3b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:99:49:9D:A8:2D:5C:D6:3B:39:28:45:30:29:89:E7:C4:3E:F1:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/16df6d81-c098-3b8c-a9d9-b05bc3049676.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:19:70:cc:de:06:ff:d3:e1:a5:84:52:02:02:aa:1f:82:87:
         18:75:82:79:6b:d0:f2:88:68:c2:0e:30:11:9f:d1:03:2f:9b:
         51:34:2b:f5:0a:ee:e5:22:88:a9:57:35:18:93:e8:e2:90:0c:
         65:12:18:10:83:ee:3b:75:26:0e:22:a3:d1:a9:1b:90:de:35:
         5a:83:73:dc:d6:d1:30:68:5d:c3:7b:b3:95:a0:01:9d:28:47:
         50:98:60:ce:a3:56:c9:ff:db:10:18:83:f9:97:0e:0d:d3:e2:
         8b:02:d2:b9:8c:85:ef:54:19:5f:c8:e9:22:26:0c:fd:a3:1d:
         66:a4:59:91:1e:84:81:cc:67:9e:43:c6:a3:61:b9:1b:e3:08:
         e7:51:11:3c:e5:e9:a0:28:55:e2:b8:b8:69:76:12:33:8c:eb:
         68:0d:42:2e:4c:00:f1:76:ed:3f:83:82:6d:4b:d4:d4:82:ec:
         09:96:2b:60:2c:3e:9c:4e:ca:fe:2b:b7:75:22:66:81:86:3f:
         49:c8:20:10:e3:cd:ad:50:04:9b:59:8a:8b:9c:0c:ed:97:18:
         8d:18:bb:c3:35:60:f1:5b:1f:ff:6f:ec:ff:d5:f5:01:ca:cf:
         8c:ba:20:52:17:c0:2a:b3:20:41:cd:46:8e:62:f1:41:ab:f4:
         9f:36:b0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:54:52 2026 by rpki-client