Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2b7d292a-1e83-342f-b3ad-46ba532af34e.roa
File:                     2b7d292a-1e83-342f-b3ad-46ba532af34e.roa (raw, json)
Hash identifier:          Rb3/GLWT3xsk978C5omaCCfzXNFTAdNICKYpa98l6RY=
Subject key identifier:   3D:5A:2A:E6:47:9A:28:ED:01:DE:8A:1C:F5:3C:11:4B:B9:BE:8A:71
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA176B4B0E087739C5CFC0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2b7d292a-1e83-342f-b3ad-46ba532af34e.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     212238
IP address blocks:        104.253.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:17:6b:4b:0e:08:77:39:c5:cf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=ba4a6022-570a-482b-bc60-2be68e5ecad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:70:a3:91:8a:f0:07:ee:2b:97:4d:38:41:64:
                    d7:a0:64:17:17:58:ea:75:ee:8d:ae:f1:9c:73:2b:
                    44:ba:aa:53:4a:6e:88:1c:ef:19:8b:1c:e0:aa:df:
                    27:c8:82:73:42:f4:a5:04:b3:01:cb:25:be:3a:69:
                    35:d0:91:9b:06:00:b0:68:7c:ce:3e:c5:81:3b:7a:
                    40:b4:ab:78:c1:8b:64:07:62:3b:77:16:b7:fc:04:
                    b6:24:24:c4:f0:57:88:38:58:91:61:b2:ad:bc:31:
                    c8:b9:10:de:22:5b:f5:ff:6d:a0:6e:8d:3a:97:c9:
                    0a:50:7e:53:7c:1b:f3:ee:a3:a4:9a:c6:cb:e0:c1:
                    f1:48:79:43:87:b9:5f:d4:2c:50:ff:39:4b:52:f1:
                    6f:66:fc:93:8b:5b:cf:ae:ec:47:34:f8:a3:5b:6e:
                    a6:c3:2c:26:27:d4:64:da:77:41:fe:0e:75:1f:fb:
                    d3:31:66:e6:75:26:66:cc:c6:eb:d5:1f:1e:7b:b3:
                    a7:b1:44:52:27:4c:4e:1c:33:ec:a5:4c:be:e7:d7:
                    94:5a:92:e1:10:6e:1c:47:33:f2:b7:08:d7:a4:c0:
                    03:78:b4:a3:5c:5b:8f:3f:97:6a:0b:f4:aa:25:76:
                    22:9e:e8:16:16:ea:2f:27:14:cf:2f:28:16:56:5b:
                    32:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:5A:2A:E6:47:9A:28:ED:01:DE:8A:1C:F5:3C:11:4B:B9:BE:8A:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2b7d292a-1e83-342f-b3ad-46ba532af34e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:61:bd:33:1e:d9:0f:c7:cc:8d:69:28:03:28:14:01:17:70:
         97:d2:f1:54:bb:46:6d:a3:0f:68:3a:51:fa:dc:a9:4a:91:9d:
         2f:39:9e:4d:00:72:01:d5:b6:41:ec:16:89:f0:c7:ef:d7:23:
         5f:e4:c7:ab:b0:79:16:a5:8f:22:18:87:eb:9d:7e:6e:bc:be:
         31:b1:f5:e3:f3:18:41:9a:46:5b:dd:81:47:c1:cf:6f:a9:6b:
         57:0c:aa:c6:71:43:90:fd:32:69:ab:9b:00:eb:58:85:6b:29:
         70:fd:ef:42:d3:94:10:d9:60:de:0b:5e:9a:7d:16:70:6e:59:
         81:4a:a3:87:3e:0f:aa:4f:01:43:41:d2:53:94:7d:69:62:a3:
         6c:ed:27:40:3f:18:df:46:8c:10:bb:b9:de:68:a6:73:10:b5:
         57:86:67:eb:c8:e8:c2:c5:4e:48:13:17:d8:1a:70:83:fc:7a:
         22:97:cb:de:ce:78:5d:04:d3:b9:67:9d:4e:ad:b9:f9:d6:8b:
         2a:2f:8b:b8:79:ed:8c:30:8e:47:16:4c:47:45:4d:85:51:7b:
         df:02:76:46:a0:11:49:89:5a:c9:d1:07:1a:09:64:bc:d5:ab:
         02:1e:ad:fd:6c:1c:05:ef:a4:5c:44:ee:26:35:e7:a3:53:47:
         e3:52:f4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:53:28 2026 by rpki-client