Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/34effbed-d9b4-3983-9260-51b6b291d88d.roa
File:                     34effbed-d9b4-3983-9260-51b6b291d88d.roa (raw, json)
Hash identifier:          jDR9bkViFa6nDyfRi4TW5+ajU251kM5fuOaqZxNfx/Q=
Subject key identifier:   0F:E4:A7:7C:C3:5B:F2:62:A0:49:E4:AF:4D:58:25:74:CD:75:89:A3
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584F6657A9C6F67E868290955EC0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/34effbed-d9b4-3983-9260-51b6b291d88d.roa
Signing time:             Mon 05 Oct 2026 09:24:32 +0000
ROA not before:           Mon 05 Oct 2026 09:24:32 +0000
ROA not after:            Sun 03 Jan 2027 10:24:32 +0000
asID:                     135636
IP address blocks:        104.252.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:66:57:a9:c6:f6:7e:86:82:90:95:5e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Oct  5 09:24:32 2026 GMT
            Not After : Jan  3 10:24:32 2027 GMT
        Subject: CN=d6458ee5-34a1-4433-b4d7-0208711c18e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3a:cd:2d:fc:ab:dd:29:6b:e2:1f:90:c4:c1:
                    6e:06:32:81:aa:7d:38:fb:5e:cc:3a:cb:da:49:00:
                    22:5b:3c:6a:61:24:2a:02:b9:a2:4c:48:26:c3:a2:
                    52:13:e4:9a:c6:08:66:81:5b:72:8c:08:41:f9:45:
                    26:f0:b4:27:bd:f6:29:bf:39:3b:16:b5:92:24:d9:
                    9e:66:7c:d6:71:f3:64:fd:dd:d6:54:d5:80:f6:22:
                    e3:6d:70:c1:2f:7b:08:3a:e4:51:e9:45:cc:0e:dd:
                    f8:32:b6:17:d9:a7:e7:89:90:96:19:5c:4d:02:61:
                    b1:6f:10:12:38:05:e4:eb:6c:c9:96:77:1e:ae:a7:
                    27:e8:63:b5:42:d3:53:78:cc:73:03:8e:4b:11:6f:
                    28:25:a6:92:41:8f:2c:48:df:e6:6c:65:7d:a2:49:
                    5b:d0:9d:18:6e:57:51:c9:9f:06:bd:02:25:e0:71:
                    5b:47:34:7e:4b:4f:d6:d9:b7:8c:ab:d1:fd:ff:e6:
                    83:c2:bf:76:05:9d:a3:55:cd:02:eb:c7:4e:33:19:
                    f7:f6:87:79:0e:45:34:72:df:4d:5a:55:38:99:83:
                    ef:34:33:c8:50:13:9e:44:fd:fd:3b:92:3a:ed:8f:
                    b8:9c:e0:07:ae:f2:50:99:cf:47:0d:c8:de:76:b1:
                    ad:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E4:A7:7C:C3:5B:F2:62:A0:49:E4:AF:4D:58:25:74:CD:75:89:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/34effbed-d9b4-3983-9260-51b6b291d88d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:b8:93:4a:14:1b:31:97:ef:c3:9c:40:7f:89:2c:eb:57:12:
         56:cd:dd:51:48:61:85:80:45:45:3c:f3:31:60:70:2d:d7:29:
         bb:56:74:0f:f4:de:47:20:07:7f:21:b2:8d:39:db:ed:70:71:
         a1:46:c1:79:72:8e:70:da:be:4d:aa:72:a6:be:55:b6:f9:03:
         af:84:64:0e:a6:0b:60:aa:82:e8:3b:3b:14:bc:81:bd:68:45:
         63:6b:41:54:bd:cb:bc:3e:a0:45:e4:0c:2d:fe:50:dc:91:3d:
         78:fc:d6:b4:ac:66:06:20:a0:08:93:95:5a:f7:25:b0:16:f6:
         57:8b:db:d8:9c:16:b3:96:c9:a8:d7:16:31:b0:28:93:7f:1b:
         f4:a7:43:a1:c5:e4:93:c6:00:6c:35:b7:bb:ab:63:38:3e:27:
         83:35:a2:2a:49:80:c6:4c:2a:d0:7e:9f:9c:00:eb:b4:c9:fb:
         b9:1f:16:27:32:30:3a:4e:b1:7c:ef:3e:29:47:5a:7b:fe:a0:
         39:bc:4e:ef:f0:b3:0d:ea:82:42:35:12:60:d0:15:6e:87:86:
         ec:cc:a4:bc:d6:98:fd:c5:2c:da:7d:d6:e7:24:23:23:14:5b:
         d9:9d:89:fd:f5:47:04:99:cc:c3:c1:6c:07:8e:41:6d:1c:0d:
         49:22:75:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:02:25 2026 by rpki-client