Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/19c5d98c-71a9-3f82-8eb1-20f951ffcfa1.roa
File:                     19c5d98c-71a9-3f82-8eb1-20f951ffcfa1.roa (raw, json)
Hash identifier:          e4RX9wCXabwdPY9ZCphXwbyWEDoyp/d6kfwuBRAzvN4=
Subject key identifier:   49:D1:1C:17:8E:53:B2:2D:67:55:7C:81:14:F3:58:9E:34:FC:F3:3A
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF44CCC7DD586ABDE6F4E8E00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/19c5d98c-71a9-3f82-8eb1-20f951ffcfa1.roa
Signing time:             Tue 25 Aug 2026 13:00:12 +0000
ROA not before:           Tue 25 Aug 2026 13:00:12 +0000
ROA not after:            Mon 23 Nov 2026 14:00:12 +0000
asID:                     211273
IP address blocks:        104.253.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:4c:cc:7d:d5:86:ab:de:6f:4e:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 25 13:00:12 2026 GMT
            Not After : Nov 23 14:00:12 2026 GMT
        Subject: CN=5bd0c033-ce6e-4d77-8e13-0118b21dde3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4f:58:63:a1:f3:80:3e:ba:e0:28:7a:2b:4f:
                    a5:d1:98:48:7c:65:3f:4c:90:be:be:90:20:c2:85:
                    17:c2:dd:e8:8b:f2:eb:9a:33:eb:c7:48:c2:11:4e:
                    a8:0f:e8:35:fa:90:5d:6b:be:ef:71:56:5a:94:d9:
                    bc:88:50:cd:32:53:9e:96:71:89:ae:0b:f9:dc:82:
                    b1:b9:27:31:02:58:55:99:6a:97:81:c8:65:3e:63:
                    f5:9a:ae:61:88:32:ba:bf:90:0a:f9:45:d9:e0:94:
                    9e:7c:08:63:78:88:82:bb:e4:85:9c:48:80:81:72:
                    fd:fe:ff:9e:45:df:84:3b:a2:c6:1e:de:b9:a9:68:
                    3b:a8:9b:46:42:30:5a:5b:32:80:59:66:b5:df:c3:
                    cc:ca:c4:8d:2b:1e:a6:2e:5c:a8:6e:d5:34:dd:5a:
                    32:a2:ef:c4:f8:48:6c:bf:51:bf:8c:ea:c5:73:4e:
                    e2:ae:ea:18:2c:a9:82:c6:12:33:aa:6f:47:e8:9f:
                    55:cd:54:14:29:40:aa:23:ab:ea:e4:56:dc:65:c9:
                    40:6f:92:0a:3b:fa:eb:c4:69:40:89:8d:b1:e5:cf:
                    d4:ca:f7:ef:ef:10:c3:42:4e:2b:9f:2e:30:3a:10:
                    a2:c6:d9:16:6b:e3:7c:86:56:c3:d7:62:87:44:1b:
                    2a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D1:1C:17:8E:53:B2:2D:67:55:7C:81:14:F3:58:9E:34:FC:F3:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/19c5d98c-71a9-3f82-8eb1-20f951ffcfa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:4c:fd:4d:01:99:f2:47:ce:48:a9:9d:08:35:c9:bd:d1:4d:
         ee:6a:1d:c1:9b:da:7e:6f:06:c7:71:b0:04:7c:5b:3b:b7:75:
         d9:29:e9:43:b7:00:11:75:3d:28:4c:a4:7b:9e:26:a8:e4:af:
         51:9c:6c:f5:e1:83:c1:84:2b:46:cc:16:19:fc:37:3b:54:25:
         e3:56:90:fd:94:3d:c0:32:da:1c:a4:66:f2:01:3f:06:ae:5f:
         65:fc:77:37:12:47:e7:13:63:83:0f:0a:d8:2c:61:a9:56:ba:
         60:77:55:be:e4:6c:cb:2a:8b:a0:b8:1a:16:93:36:cb:60:c5:
         20:bf:ac:04:a3:c5:4e:8b:2b:e9:72:09:02:98:a3:9b:e6:fc:
         56:80:82:af:7b:99:55:44:ab:ca:f3:93:93:3f:44:58:df:41:
         7a:be:87:80:58:9f:df:70:6a:e9:cb:a9:9b:fb:b8:7d:9f:f0:
         5c:32:9f:d1:b9:8c:f6:1e:30:78:45:14:b6:62:f7:da:8a:a0:
         97:25:f8:39:b6:fe:b9:8e:52:f5:19:18:4a:0b:99:97:a7:ac:
         85:40:d2:41:ce:2a:54:9d:ce:b7:fc:31:07:3b:8a:3f:af:bf:
         44:7d:25:8c:48:06:ea:fc:5d:c6:64:43:4e:b5:20:5b:68:9c:
         ea:7d:83:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:48:55 2026 by rpki-client