Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/19212885-1519-300b-98b6-aeab49c113ae.roa
File:                     19212885-1519-300b-98b6-aeab49c113ae.roa (raw, json)
Hash identifier:          oNB7I/yOanzlo1apRtRQEd4Cr/FjKc4FbZD5dPrpjcc=
Subject key identifier:   41:8F:17:73:08:42:11:73:C3:EB:AF:9D:E6:0F:62:59:36:D9:8D:43
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA17ADFFCF1F3635FB4F00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/19212885-1519-300b-98b6-aeab49c113ae.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     211273
IP address blocks:        104.253.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:17:ad:ff:cf:1f:36:35:fb:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=f0cf6007-be56-4265-ac58-ca398b5c2704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:92:c7:58:47:8f:15:a3:36:1b:5d:f0:f8:25:
                    f0:4a:41:89:45:dc:dc:90:4e:f3:38:79:fa:69:dd:
                    8a:00:15:0a:76:df:0d:24:ee:a6:4b:da:0b:c0:ca:
                    f1:73:2e:df:2e:d5:07:83:7a:61:4c:59:da:74:a7:
                    b9:a6:8a:18:07:5c:7f:a3:71:3f:9b:2f:25:03:30:
                    ab:de:e1:87:df:7b:9c:4d:47:9a:cf:69:24:f4:a7:
                    0a:c9:fe:a0:af:d3:71:4b:ba:da:bb:03:f3:ac:84:
                    9e:63:15:74:36:52:22:86:14:a5:6d:83:06:79:49:
                    6c:23:13:fb:71:02:ce:f8:2f:9e:34:f1:39:d2:a9:
                    17:1d:09:3f:94:18:60:9e:03:39:01:04:e5:fa:db:
                    e7:34:4f:01:89:b5:df:2f:01:33:84:d3:11:ac:dc:
                    de:4d:e7:c9:62:2d:41:f2:b1:0e:2d:17:6f:fc:bf:
                    ee:78:10:93:98:f1:dc:0f:7c:87:fa:a7:cd:09:d1:
                    a3:d0:9b:39:2e:9c:72:d4:1d:69:cf:d2:a9:28:fd:
                    1f:73:55:60:2c:c3:02:0f:95:07:32:9d:71:b9:73:
                    90:fc:b8:89:cb:5a:8e:e7:cc:ff:ee:ad:dc:4b:ef:
                    39:25:dd:94:63:60:d8:62:e1:d3:97:19:c6:07:3e:
                    fb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:8F:17:73:08:42:11:73:C3:EB:AF:9D:E6:0F:62:59:36:D9:8D:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/19212885-1519-300b-98b6-aeab49c113ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:f5:62:7f:c4:89:6f:b5:a2:ea:7a:8b:d9:06:06:a3:61:09:
         d4:14:21:5b:0b:16:66:19:f7:d7:9d:9f:02:ce:5f:ce:ab:80:
         45:f7:16:5a:39:fe:80:4d:38:7c:d5:ac:38:8a:b8:9a:14:70:
         35:0d:6d:77:4d:ba:25:b0:30:9d:b3:9e:40:ca:f6:1d:85:21:
         d6:0b:c3:a5:aa:2c:06:f3:c1:24:77:d3:b8:b6:a9:cb:10:16:
         7e:b3:3a:96:f5:0d:c8:2e:66:2d:e6:a6:73:35:ce:58:61:39:
         9e:7d:be:ba:0b:24:73:18:3f:43:72:52:79:4e:1f:57:b9:bb:
         f2:3b:b9:0b:23:f6:45:b2:9b:30:d8:36:cf:52:39:0d:2f:c4:
         1c:80:2f:e7:e4:1f:4b:98:2e:51:8e:ea:08:36:64:f4:78:72:
         51:40:68:9f:65:bd:1b:d3:2e:e8:5e:d4:7a:22:4f:7a:97:85:
         c2:b6:27:01:02:46:78:a9:cb:f3:09:79:7c:bf:d3:ac:17:90:
         86:3b:9c:fe:8d:03:66:1e:af:f7:99:a6:af:94:cf:9a:a4:28:
         05:1f:d2:e8:be:41:1d:ce:d8:f7:d6:8a:be:f0:98:8a:cb:59:
         60:ce:eb:d6:81:93:fe:33:cf:22:b3:32:ef:62:a6:15:46:fd:
         67:df:19:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5Nuhet/88fNjX7TwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDYyNjIxMDAxMVoXDTI2MDkyNDIxMDAxMVowLzEtMCsGA1UEAxMk
ZjBjZjYwMDctYmU1Ni00MjY1LWFjNTgtY2EzOThiNWMyNzA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpLHWEePFaM2G13w+CXwSkGJRdzckE7zOHn6
ad2KABUKdt8NJO6mS9oLwMrxcy7fLtUHg3phTFnadKe5pooYB1x/o3E/my8lAzCr
3uGH33ucTUeaz2kk9KcKyf6gr9NxS7rauwPzrISeYxV0NlIihhSlbYMGeUlsIxP7
cQLO+C+eNPE50qkXHQk/lBhgngM5AQTl+tvnNE8BibXfLwEzhNMRrNzeTefJYi1B
8rEOLRdv/L/ueBCTmPHcD3yH+qfNCdGj0Js5Lpxy1B1pz9KpKP0fc1VgLMMCD5UH
Mp1xuXOQ/LiJy1qO58z/7q3cS+85Jd2UY2DYYuHTlxnGBz77KwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEGPF3MIQhFzw+uvneYPYlk22Y1DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvMTkyMTI4ODUtMTUxOS0z
MDBiLTk4YjYtYWVhYjQ5YzExM2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP2vMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAr1Yn/EiW+1oup6i9kGBqNhCdQUIVsLFmYZ99ednwLOX86rgEX3Flo5
/oBNOHzVrDiKuJoUcDUNbXdNuiWwMJ2znkDK9h2FIdYLw6WqLAbzwSR307i2qcsQ
Fn6zOpb1DcguZi3mpnM1zlhhOZ59vroLJHMYP0NyUnlOH1e5u/I7uQsj9kWymzDY
Ns9SOQ0vxByAL+fkH0uYLlGO6gg2ZPR4clFAaJ9lvRvTLuhe1HoiT3qXhcK2JwEC
Rnipy/MJeXy/06wXkIY7nP6NA2Yer/eZpq+Uz5qkKAUf0ui+QR3O2PfWir7wmIrL
WWDO69aBk/4zzyKzMu9iphVG/WffGbY=
-----END CERTIFICATE-----
Generated at Tue Jul 7 11:56:27 2026 by rpki-client