Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/1b517325-201a-3907-a17f-da43b7238d5e.roa
File:                     1b517325-201a-3907-a17f-da43b7238d5e.roa (raw, json)
Hash identifier:          2/ewVt9wPCtVjH9cFu/P6zUGTB/2xSiWzRgNVMk14IU=
Subject key identifier:   A9:89:65:E6:A7:7F:4B:C8:63:42:D2:C8:50:62:D8:61:C4:43:97:86
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA09DEEAEC4776C03C9270
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/1b517325-201a-3907-a17f-da43b7238d5e.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     63018
IP address blocks:        104.252.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:09:de:ea:ec:47:76:c0:3c:92:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=bbf1372a-4970-4d0f-8996-401cd81ca6f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6e:a6:3d:b6:e6:20:67:21:82:b8:01:b2:03:
                    54:bf:34:34:44:9f:7a:d0:ed:62:ec:56:54:61:b2:
                    f8:6f:c4:83:1d:97:77:95:f6:39:64:e8:01:96:78:
                    ba:33:76:27:b0:07:77:27:1d:14:70:db:04:43:8f:
                    a9:92:9c:30:5c:10:d5:9a:f0:cd:a7:43:50:09:e1:
                    65:3e:be:f4:51:05:35:6a:43:9c:25:70:06:f0:11:
                    1c:a2:4a:be:9d:61:9e:1e:97:9c:83:21:cb:bf:1b:
                    49:22:a9:09:b3:b3:59:61:9e:ee:e7:9d:b4:e3:c7:
                    5a:c1:b9:61:64:3b:10:d6:fd:72:9f:8c:de:19:90:
                    d1:09:dc:04:64:8d:97:7a:d7:65:a8:c9:1f:38:fb:
                    1d:03:e1:f3:ef:43:3d:53:84:4d:4a:2c:44:1b:d3:
                    6f:04:0e:7c:44:57:a3:5b:81:73:96:45:fb:27:43:
                    6b:e1:6b:51:ab:72:d4:e0:f9:62:5a:d2:2c:c6:48:
                    75:8c:6c:5a:fd:26:63:84:b2:20:34:79:4b:93:1d:
                    79:1c:ea:af:e6:86:75:20:bf:14:6a:c2:64:02:8a:
                    5f:e9:9e:97:dd:e8:45:ab:70:29:00:79:89:ec:bc:
                    83:00:4b:a6:aa:00:11:09:f8:4a:61:9b:63:81:39:
                    a4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:89:65:E6:A7:7F:4B:C8:63:42:D2:C8:50:62:D8:61:C4:43:97:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/1b517325-201a-3907-a17f-da43b7238d5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:e8:6a:6c:61:05:dc:aa:6c:f8:96:e1:50:26:07:f2:72:8c:
         a9:36:3a:85:c9:2e:20:ee:2f:f5:2a:fe:7b:0a:fb:61:95:ec:
         7d:7f:cc:cb:4d:82:0c:a2:f3:2d:75:bb:30:36:ca:cd:d5:ed:
         71:72:a9:98:e0:af:2e:62:52:07:c5:23:e3:ea:f4:9e:2f:98:
         a6:df:1f:e0:2d:fd:6a:6f:a3:94:4b:5a:1e:0a:0a:db:90:4d:
         69:74:91:f3:68:98:3f:42:f1:17:d5:59:04:4a:44:df:f8:4f:
         ed:62:c6:e4:f6:1a:10:ac:be:1c:01:d1:14:58:13:83:fd:a9:
         56:db:fd:ff:2f:dd:32:19:d6:b0:63:69:c9:a5:9d:53:86:fe:
         f7:39:61:f0:ba:a1:76:50:1d:c1:0c:f6:80:1d:72:fd:fa:5a:
         46:12:fc:e2:d9:f3:38:3b:09:4f:fb:5f:b9:5b:aa:3b:a2:53:
         67:ac:a3:90:73:a0:29:14:97:a7:0d:5c:d9:99:1d:95:c5:f6:
         ba:64:f4:19:69:5a:b9:c6:11:85:de:a4:c7:7f:fb:50:67:2d:
         ae:b3:52:1e:25:42:14:62:04:b1:d0:aa:50:f2:40:ec:f3:c7:
         69:0b:7d:b0:12:b5:bd:e5:95:22:28:6c:a2:23:39:83:90:dc:
         b8:7a:39:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:54:49 2026 by rpki-client