Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2ad7b1ad-11c9-3c4b-9a11-4056b1590d6c.roa
File:                     2ad7b1ad-11c9-3c4b-9a11-4056b1590d6c.roa (raw, json)
Hash identifier:          c+3sPYc0EIwFSUdGRStfe60UtTsqgJF6JpOg191cNgY=
Subject key identifier:   1C:A0:A7:FC:FD:41:E8:9C:6C:35:2B:3E:E1:27:4D:10:98:73:31:1C
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA1972A2959430DDD5D440
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2ad7b1ad-11c9-3c4b-9a11-4056b1590d6c.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     9009
IP address blocks:        104.253.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:19:72:a2:95:94:30:dd:d5:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=58e3dd87-192a-46c9-a4a7-f475001e5199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3a:dd:cf:34:db:4f:51:9a:c0:27:a3:71:64:
                    f5:d4:91:a0:c7:69:2f:f3:ea:e6:0b:f2:a9:42:e2:
                    78:dd:a4:25:f2:7c:31:3e:63:16:ef:39:42:f0:60:
                    9d:8c:ed:1d:29:f1:c2:be:d4:e0:d7:57:e4:db:cf:
                    c5:a4:a2:f0:80:07:3d:67:96:0a:89:00:08:68:c0:
                    91:83:40:16:ab:0f:3a:eb:29:69:6c:7a:c1:6b:cb:
                    8f:2e:13:a6:38:33:0b:49:8b:af:8f:42:44:08:07:
                    fe:c5:91:79:5b:91:b2:bf:c1:76:55:d9:45:45:9f:
                    47:75:ea:cd:08:b7:95:9c:32:09:11:55:e6:d7:07:
                    06:6c:3b:46:0c:43:46:3e:7e:56:b1:27:4f:8b:ac:
                    18:28:3e:7f:67:a8:15:b1:b2:72:76:45:0c:48:14:
                    ea:1c:7c:3e:31:94:b8:48:03:e0:33:69:3d:00:2d:
                    30:50:0c:6e:e0:bb:3c:c3:50:b8:9b:2b:fa:4c:c1:
                    cd:4b:b7:91:08:5b:59:21:93:44:ef:07:e1:47:b7:
                    88:f5:51:a4:26:48:16:a7:0f:ae:6d:13:01:71:18:
                    21:76:17:9e:6f:11:f8:3c:50:a3:dd:52:82:b7:45:
                    4a:f2:eb:83:77:3a:91:de:bb:fc:65:45:24:9c:4f:
                    2b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A0:A7:FC:FD:41:E8:9C:6C:35:2B:3E:E1:27:4D:10:98:73:31:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2ad7b1ad-11c9-3c4b-9a11-4056b1590d6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:30:ae:2e:03:5c:84:7f:e7:a2:c4:25:5b:14:d5:aa:2f:d6:
         7e:69:cf:e5:c5:c5:af:79:75:d6:95:b5:76:4f:29:a0:85:7a:
         85:78:ef:fa:e0:2b:5a:6c:95:ac:7a:d9:5c:d7:d0:2c:35:ac:
         7b:e1:da:6a:e3:d5:83:b9:9f:d4:2d:a1:38:09:af:86:a2:cb:
         9e:4c:4f:f2:8a:29:cf:b9:f9:c5:3e:77:28:84:f1:25:47:7c:
         da:3d:4d:b4:30:e0:89:aa:c1:0d:d5:83:fc:5f:ea:04:06:b6:
         8e:35:92:78:fc:c1:fd:c4:45:a2:bb:6e:b6:fb:30:67:48:42:
         a9:fe:2a:aa:37:e1:4c:e5:e8:37:98:7f:78:12:87:c9:93:34:
         fc:03:fa:96:01:dc:f7:c7:0e:cb:20:c3:27:53:ae:06:6e:bb:
         da:93:40:e3:72:d7:10:ae:af:ff:f8:97:1a:cb:58:c7:a9:18:
         ba:0d:12:bf:d8:01:45:91:9b:91:16:43:ca:60:1f:29:20:fa:
         47:34:97:b8:26:14:a1:2a:de:0f:1e:31:45:9d:e1:9f:43:44:
         90:05:ef:7c:c0:5f:b7:37:20:23:23:d5:7b:bc:6e:82:54:0e:
         eb:69:76:ef:c2:99:43:45:46:f0:6e:7e:5f:7b:dc:ae:25:3d:
         5d:70:15:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:55:44 2026 by rpki-client