Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/199a35a6-b81e-3610-b33b-a03822f268a0.roa
File:                     199a35a6-b81e-3610-b33b-a03822f268a0.roa (raw, json)
Hash identifier:          JikaNamMSB/4vNxp6yHIQ1/FapOj2wRiuqWwr6DxggU=
Subject key identifier:   6F:B1:2B:8F:51:7B:A1:E1:EF:8E:28:84:47:CF:E7:6A:E9:1F:25:7A
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA0D6F4F8C7796D83F2780
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/199a35a6-b81e-3610-b33b-a03822f268a0.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     9009
IP address blocks:        104.252.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:0d:6f:4f:8c:77:96:d8:3f:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=51ed9a51-3f2d-4d2b-8b7b-e21903c7c9ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:31:a3:31:bf:be:3f:78:8a:ed:99:45:bb:68:
                    57:40:30:bb:6a:5f:1c:69:70:dc:08:d7:b0:1f:a4:
                    5c:33:4e:cb:b5:41:47:84:29:46:f8:1b:19:c9:68:
                    60:e2:ae:fd:dd:2d:55:5b:9e:6e:0a:cc:34:05:1b:
                    b3:63:94:33:3c:91:d2:bf:55:e6:05:7e:35:35:7f:
                    ea:2d:c7:75:c2:56:54:1e:82:ad:45:b4:f1:f1:d2:
                    62:89:e8:77:72:db:68:99:7e:b6:92:67:aa:b8:58:
                    2f:26:ad:35:e1:b1:fb:66:8a:85:b4:5d:bf:96:b2:
                    a8:e3:cb:ba:56:31:de:0f:47:b7:2a:18:a6:ec:1e:
                    de:ab:12:99:f1:cb:42:29:d9:00:40:21:ac:3e:ef:
                    a2:4d:20:4f:aa:7a:1c:df:cb:dc:d7:9f:b8:9d:82:
                    fb:ce:ec:25:05:36:cb:33:99:a3:85:ae:6c:b0:6b:
                    be:ed:a2:6e:e6:0c:20:17:0c:65:1b:b6:13:de:62:
                    94:1b:07:0d:b9:1e:f7:80:43:fe:95:17:ba:6c:be:
                    ef:07:8f:88:62:3b:a7:26:a5:c5:31:7b:e0:62:f0:
                    1b:7f:10:ea:20:53:38:b8:b2:04:a2:79:93:64:ab:
                    a0:0b:d3:77:8b:a4:a9:64:19:cc:ac:3a:af:f5:3b:
                    e7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B1:2B:8F:51:7B:A1:E1:EF:8E:28:84:47:CF:E7:6A:E9:1F:25:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/199a35a6-b81e-3610-b33b-a03822f268a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:e5:18:ec:8e:79:a6:de:bc:b9:74:04:da:f1:7d:7d:55:41:
         08:69:92:4d:0b:12:66:4f:84:5f:4e:0f:f4:71:fb:9a:fd:46:
         b0:76:bf:75:01:b0:f5:8b:49:09:59:a0:db:53:47:a8:25:e3:
         cd:92:cf:aa:c6:2c:1f:8c:db:c5:8b:38:4b:45:c4:6d:1c:e5:
         73:8c:0c:6e:e3:0e:cd:c2:1b:6b:42:2c:f6:2a:c1:49:a7:f4:
         3b:f5:34:ba:7d:92:3d:5e:d8:14:e2:2b:00:c4:5d:38:84:77:
         28:21:b2:a5:b8:f9:eb:89:a4:86:ff:b5:3f:54:41:17:31:81:
         33:0f:a9:d4:f9:90:67:6e:5f:16:57:74:f8:64:0e:c7:08:f1:
         b4:6e:7f:80:3e:bd:e8:5f:d3:ab:38:40:77:bf:2b:f3:98:aa:
         67:13:b8:9b:48:ec:22:d3:25:e5:b0:26:55:80:bc:d3:74:cf:
         f2:14:83:ef:86:13:7f:6c:57:ea:78:de:c1:23:75:98:5e:e2:
         1c:58:56:d4:19:03:64:af:0d:df:25:bc:61:ef:07:5c:57:99:
         f6:a2:ec:08:99:4e:6b:a3:21:b9:8b:92:1f:04:48:4e:05:a2:
         36:03:57:4c:8c:3b:7b:ff:e3:d1:3a:79:a5:45:fb:bb:d1:72:
         ce:86:0f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:54:39 2026 by rpki-client