Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/19a8cfc2-670c-3c23-b322-807bf36fc8fb.roa
File:                     19a8cfc2-670c-3c23-b322-807bf36fc8fb.roa (raw, json)
Hash identifier:          xnZ98J7Kfj+oLIadW/fJRFb35zhNx1oyCWiLAp8eK50=
Subject key identifier:   85:F9:E4:A8:24:8E:77:F5:80:C3:12:49:E6:64:1C:73:26:64:7A:29
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA1690DBC8D0B78004A080
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/19a8cfc2-670c-3c23-b322-807bf36fc8fb.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     8881
IP address blocks:        104.253.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:16:90:db:c8:d0:b7:80:04:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=8b1fb754-3003-4c0c-ba02-4386c945e858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8e:fe:19:28:f3:33:98:c4:33:79:ec:7d:53:
                    9d:30:5f:cf:17:f1:bc:f1:85:08:21:cb:af:67:0d:
                    96:77:34:63:13:35:2f:b0:a2:0d:e5:d6:7a:ed:89:
                    84:87:a7:fd:51:91:19:e0:f0:bd:5e:cb:2d:c6:a4:
                    3b:ef:c6:bc:5e:bf:ae:d7:8f:cf:1d:a6:ef:2e:7c:
                    30:b3:b9:86:55:7d:e9:d3:0f:8e:18:2a:fa:52:d5:
                    57:f1:8e:8c:ed:b4:f9:87:de:e9:fc:38:08:58:ba:
                    0b:6d:74:d2:10:72:36:f8:4b:65:03:9d:f1:8f:37:
                    84:1a:ff:07:e4:07:cd:5c:b1:23:f8:5e:cd:71:9f:
                    db:09:6a:2c:c2:5b:e5:f4:b9:4d:34:58:ec:c4:11:
                    f2:be:43:9e:ba:e7:be:57:bf:ad:01:e6:4d:68:fe:
                    76:05:a9:e9:91:63:7e:75:7e:dc:40:2d:20:e6:33:
                    ac:41:f8:d0:c8:92:83:21:bc:6a:99:47:a7:ac:61:
                    d8:44:a7:02:a6:70:c7:63:cf:14:b3:6c:bb:4e:4b:
                    f7:87:74:65:31:83:de:ac:83:f9:47:05:f4:ef:b0:
                    a4:d4:07:60:f1:5c:62:42:13:9a:74:56:e2:d8:93:
                    27:4f:37:0b:7b:06:e3:61:53:74:cf:9c:b0:de:9a:
                    2e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F9:E4:A8:24:8E:77:F5:80:C3:12:49:E6:64:1C:73:26:64:7A:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/19a8cfc2-670c-3c23-b322-807bf36fc8fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:47:1a:f0:d1:07:98:25:f9:1c:6e:ae:09:40:1f:3c:91:ff:
         cd:3e:a9:7f:50:8f:0f:fe:fc:3b:7b:df:7d:8e:00:8e:71:81:
         b6:35:17:95:5d:e0:a3:9f:0f:75:a9:9c:09:e0:04:20:18:3f:
         aa:70:9a:4d:f1:8f:0e:7e:87:4a:0f:aa:e7:50:e3:70:d1:91:
         c0:48:c5:8b:bf:cc:50:9f:39:34:36:ad:c4:7d:3d:3f:b8:f5:
         b3:86:22:a9:84:31:0d:4f:21:68:15:f7:a5:a9:8f:c8:77:5b:
         c1:54:39:df:73:64:f8:ab:5e:5a:bc:88:59:ea:c1:39:66:c0:
         d4:bc:55:b6:34:ad:fa:2a:91:bc:c4:a9:d1:f6:3c:94:4c:02:
         49:dd:d8:30:0e:39:4e:02:9c:41:3b:e2:10:0c:9b:66:b5:93:
         f0:bd:54:45:81:28:24:3d:36:bf:f9:94:0a:01:ec:38:ee:81:
         7a:b8:d3:a7:a2:d7:55:ca:f8:64:e3:c9:6d:e0:90:2f:bd:8b:
         6d:da:ec:4a:8e:05:5f:7f:57:0c:5e:6f:cf:78:cd:9f:d7:41:
         6c:49:31:38:c5:9c:31:c0:2d:1e:4c:82:82:34:3c:a5:bc:5d:
         a5:46:67:02:b7:9e:8f:d6:17:7a:f6:c2:3f:7d:e4:a4:02:34:
         93:83:11:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:53:22 2026 by rpki-client