Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2d7795de-7eec-3d92-892e-1dd2b0460688.roa
File:                     2d7795de-7eec-3d92-892e-1dd2b0460688.roa (raw, json)
Hash identifier:          ABfOBYOmNm8utRj8TA3LyMa83sJhM0SSemSj20GrYbE=
Subject key identifier:   3F:2F:2C:4E:49:A3:79:F6:CC:DF:51:50:96:C8:BE:98:54:08:76:FE
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584F66582D9D9F0013852883BD40
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2d7795de-7eec-3d92-892e-1dd2b0460688.roa
Signing time:             Mon 05 Oct 2026 09:25:34 +0000
ROA not before:           Mon 05 Oct 2026 09:25:34 +0000
ROA not after:            Sun 03 Jan 2027 10:25:34 +0000
asID:                     135636
IP address blocks:        104.252.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:66:58:2d:9d:9f:00:13:85:28:83:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Oct  5 09:25:34 2026 GMT
            Not After : Jan  3 10:25:34 2027 GMT
        Subject: CN=d1e45d5f-22ea-410c-9e62-4bf581467cc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:84:0e:41:78:96:92:77:2f:7d:56:a5:a8:2d:
                    ba:4d:73:da:bc:06:f0:92:83:c3:39:9f:a8:49:eb:
                    64:21:ed:42:09:19:b8:db:67:d0:9d:86:a7:42:e1:
                    8c:df:cf:dc:dc:36:44:96:f6:08:f7:26:2b:c0:9c:
                    a0:ab:dd:53:d7:9b:f2:9f:77:29:48:14:33:95:5f:
                    6f:7d:f3:a1:2f:20:be:f6:0d:8e:0b:e6:4a:85:0f:
                    36:5b:96:04:b1:a4:0f:9d:16:f8:20:d5:37:7a:59:
                    e6:b3:ad:3e:2b:ed:2c:74:00:03:2e:ca:58:94:06:
                    85:7f:96:1b:32:22:11:a7:c1:f4:57:47:7c:9b:84:
                    b1:4c:75:98:69:74:a2:58:e1:8c:71:22:58:23:9a:
                    3d:93:25:c3:f9:cd:2c:75:74:61:d6:25:ff:1a:af:
                    a4:a4:ed:c5:b3:ed:ba:ed:94:a7:ec:3c:11:a0:59:
                    39:8e:34:9c:1e:6a:b3:f0:13:28:50:dd:e4:1c:0b:
                    26:b6:0a:ab:da:e6:a6:4a:1d:29:65:e2:2c:2c:b1:
                    e2:18:bb:21:4d:71:a3:17:63:ed:35:de:e7:5c:f5:
                    c4:e1:72:ab:20:66:eb:d3:15:13:ec:2b:ae:d8:07:
                    c8:71:fc:d3:4f:24:f0:d1:41:e0:e1:9c:bf:47:65:
                    cd:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2F:2C:4E:49:A3:79:F6:CC:DF:51:50:96:C8:BE:98:54:08:76:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2d7795de-7eec-3d92-892e-1dd2b0460688.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:f7:86:20:4a:b3:c1:dc:45:35:65:58:76:18:a6:3b:c7:ed:
         b9:7e:1e:69:76:55:b1:f2:c6:c9:dd:b5:a6:f1:53:05:d5:5f:
         d5:47:1d:a2:a1:aa:81:ff:41:e5:ab:c8:2b:ef:c7:f8:02:de:
         f2:a9:72:3f:d2:f7:28:e2:be:fa:4e:2f:95:8b:62:24:43:53:
         5b:24:55:6a:60:23:3a:85:53:6b:42:a1:7f:ba:02:53:6f:55:
         63:fd:5f:26:bb:69:94:02:27:7f:3d:64:1e:75:36:00:e9:f4:
         07:06:b4:fe:24:76:26:6d:10:4c:cb:dc:76:d6:ed:ef:7c:f4:
         67:d5:d5:b0:74:a1:fe:47:7f:09:6d:81:60:c3:55:ee:39:73:
         e2:e8:ad:8d:57:80:19:56:29:5f:04:38:c1:45:17:47:9c:ca:
         8c:12:c3:de:1e:85:24:8a:59:cc:05:0d:73:01:9a:5d:26:49:
         b5:b0:b1:0c:e2:fb:ec:b1:f9:09:4b:7d:36:68:a1:5d:f3:43:
         bc:b7:6c:a1:bf:a3:a3:37:e2:36:5b:6b:db:ff:d7:e5:e0:4f:
         0e:24:1a:8f:c1:13:4c:6c:01:89:0f:90:20:2d:a8:83:d0:d8:
         ad:24:87:9f:71:aa:6b:21:a1:68:15:e9:95:7a:d4:9f:78:45:
         77:fd:e9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:51:02 2026 by rpki-client