Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2ba5595c-646c-3cba-91ed-117730312b8a.roa
File:                     2ba5595c-646c-3cba-91ed-117730312b8a.roa (raw, json)
Hash identifier:          CuT6+YeLgOKTF8IEGvIBuH6vK6GszM09HpwerwCMqZA=
Subject key identifier:   BC:64:D8:8A:95:C9:8C:CE:E4:A4:BE:54:7C:58:F8:68:66:20:C1:11
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA16F37DA8801214554F00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2ba5595c-646c-3cba-91ed-117730312b8a.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     398781
IP address blocks:        104.253.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:16:f3:7d:a8:80:12:14:55:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=97dacf37-69a9-4379-a688-9685a8f75300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ff:e1:de:3d:ef:5d:fe:94:8f:c8:bd:ac:74:
                    17:e2:e2:53:d0:e1:c8:eb:e5:4d:e7:94:78:4b:d5:
                    f1:e0:98:23:23:06:13:e0:68:77:ef:38:95:40:2d:
                    ab:a1:6e:61:e6:97:06:33:74:cc:2a:d8:6e:02:8a:
                    7e:a6:26:d0:a6:f1:bc:ba:2d:8f:ef:59:a0:56:47:
                    67:7f:01:da:08:56:2d:a7:4f:8e:75:7a:4f:63:f0:
                    27:69:d2:51:69:95:75:4f:dd:95:36:61:6a:d6:70:
                    f6:15:41:25:25:ee:39:cc:0d:74:ea:20:9d:8c:6b:
                    a6:3d:69:90:51:a4:f0:99:6c:93:4c:03:20:e7:e0:
                    0c:28:70:f7:db:fd:cb:f7:12:07:96:92:6c:f6:a0:
                    6d:43:c3:a5:58:a9:87:8a:85:f8:59:b8:a6:71:62:
                    3e:fb:5e:67:8b:cf:02:34:33:1f:1f:7b:9b:45:c9:
                    39:c2:eb:53:de:4e:33:2e:bc:68:e2:86:34:2a:6e:
                    ea:37:1a:b3:3c:95:49:50:ee:bb:cb:c5:b9:2e:e9:
                    ad:ab:8a:ca:d0:c8:3e:8d:4e:97:4f:c6:74:24:13:
                    13:ec:c1:57:e3:f0:a6:39:22:53:f2:e4:59:de:a2:
                    a8:2d:14:b8:1b:94:bf:54:ce:c3:04:b0:aa:6e:29:
                    15:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:64:D8:8A:95:C9:8C:CE:E4:A4:BE:54:7C:58:F8:68:66:20:C1:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2ba5595c-646c-3cba-91ed-117730312b8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:90:cf:c3:7b:33:f1:50:0e:74:eb:28:e8:d2:de:bb:36:4c:
         5a:2c:eb:72:b9:a4:23:b7:d1:01:93:85:00:d4:eb:97:66:b3:
         06:c6:93:8f:01:9d:59:43:db:3d:2d:de:a8:1e:c0:13:9b:c5:
         df:10:81:1e:5b:4c:fa:30:5f:9a:9d:6c:09:b2:d7:a9:01:c9:
         e5:5e:ca:7c:9f:30:a5:e1:18:69:5b:30:aa:c7:f0:0e:05:99:
         9e:f6:63:80:f9:99:07:68:fb:c7:d5:82:78:ce:39:c2:cf:ca:
         fe:7d:5e:d9:4f:b9:39:be:49:d4:7d:e6:57:3b:25:98:2f:d7:
         01:df:15:4c:45:c1:48:d1:0c:c3:9e:5f:54:8b:92:bd:d6:e9:
         ad:fa:3d:c1:f0:ba:05:fc:54:b9:ff:f9:5c:cd:d2:17:d3:77:
         a9:f2:38:2f:c3:e5:ed:78:d9:b5:a5:20:00:08:32:a2:02:a9:
         a9:3a:28:a0:98:29:e7:70:d7:e4:1c:f9:89:de:91:cc:cb:fc:
         cc:2b:0a:4e:d7:78:4a:aa:32:ba:89:65:64:64:9f:15:0a:cd:
         44:69:27:16:ad:4c:86:ec:2e:e7:5d:bf:cf:72:83:e2:53:3d:
         aa:0e:e7:3d:82:48:31:d7:73:d9:0f:bd:84:c2:d4:5f:b1:26:
         bd:2d:25:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5NuhbzfaiAEhRVTwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDYyNjIxMDAxMVoXDTI2MDkyNDIxMDAxMVowLzEtMCsGA1UEAxMk
OTdkYWNmMzctNjlhOS00Mzc5LWE2ODgtOTY4NWE4Zjc1MzAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxv/h3j3vXf6Uj8i9rHQX4uJT0OHI6+VN55R4
S9Xx4JgjIwYT4Gh37ziVQC2roW5h5pcGM3TMKthuAop+pibQpvG8ui2P71mgVkdn
fwHaCFYtp0+OdXpPY/AnadJRaZV1T92VNmFq1nD2FUElJe45zA106iCdjGumPWmQ
UaTwmWyTTAMg5+AMKHD32/3L9xIHlpJs9qBtQ8OlWKmHioX4WbimcWI++15ni88C
NDMfH3ubRck5wutT3k4zLrxo4oY0Km7qNxqzPJVJUO67y8W5Lumtq4rK0Mg+jU6X
T8Z0JBMT7MFX4/CmOSJT8uRZ3qKoLRS4G5S/VM7DBLCqbikVuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLxk2IqVyYzO5KS+VHxY+GhmIMERMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvMmJhNTU5NWMtNjQ2Yy0z
Y2JhLTkxZWQtMTE3NzMwMzEyYjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP2YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEuQz8N7M/FQDnTrKOjS3rs2TFos63K5pCO30QGThQDU65dmswbGk48B
nVlD2z0t3qgewBObxd8QgR5bTPowX5qdbAmy16kByeVeynyfMKXhGGlbMKrH8A4F
mZ72Y4D5mQdo+8fVgnjOOcLPyv59XtlPuTm+SdR95lc7JZgv1wHfFUxFwUjRDMOe
X1SLkr3W6a36PcHwugX8VLn/+VzN0hfTd6nyOC/D5e142bWlIAAIMqICqak6KKCY
Kedw1+Qc+YnekczL/MwrCk7XeEqqMrqJZWRknxUKzURpJxatTIbsLuddv89yg+JT
PaoO5z2CSDHXc9kPvYTC1F+xJr0tJYo=
-----END CERTIFICATE-----
Generated at Tue Jul 7 11:54:30 2026 by rpki-client