Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/399d5b58-3314-3fc9-abdc-01ab8d135ab8.roa
File:                     399d5b58-3314-3fc9-abdc-01ab8d135ab8.roa (raw, json)
Hash identifier:          91IdRz6KLDInoaii+1bt8bYUr2eajTVUaB/amlj01ZA=
Subject key identifier:   48:2F:12:FB:AD:7B:F6:E3:E4:2A:CF:BE:F5:4A:B2:D7:98:C9:C0:04
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA10708C8CD4B02FFD0300
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/399d5b58-3314-3fc9-abdc-01ab8d135ab8.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     396356
IP address blocks:        104.252.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:10:70:8c:8c:d4:b0:2f:fd:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=5524074c-55ad-4e14-bf51-2275186f68f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6b:a3:dd:e4:0d:f3:71:84:41:18:12:19:da:
                    f7:55:bf:87:0c:88:94:9b:09:2c:c7:a6:c5:4b:a9:
                    e6:aa:64:b3:63:7e:42:a6:e0:0e:0c:b0:a8:c2:b7:
                    57:82:e8:31:6b:9e:b4:9d:04:81:3a:8d:57:5d:c4:
                    65:72:91:f8:b9:7c:b8:bc:e4:c4:9f:fb:86:9a:0c:
                    ff:72:d6:1e:95:57:08:c9:7c:d1:ef:86:5d:38:c7:
                    42:79:5a:7a:4e:0f:98:8c:a5:1d:6e:4e:ed:a8:c6:
                    0f:62:ab:0b:0a:a1:83:f4:2b:4e:9d:8f:7c:4f:18:
                    b1:0a:8e:b7:f3:06:c5:4b:4e:5d:6b:61:16:0e:87:
                    2d:63:eb:0d:74:8b:6a:97:44:ac:b6:2d:be:71:02:
                    0f:09:d9:1f:c1:f2:8f:cb:92:ec:76:98:89:9e:df:
                    b6:20:de:0e:8f:33:18:05:e5:76:67:e1:b0:2d:5e:
                    6b:bc:99:9c:d5:ed:d2:71:39:98:de:b5:22:0a:2c:
                    6c:18:1e:d3:1b:f8:30:d3:8e:6d:3f:d3:0a:39:2b:
                    5a:aa:c5:bc:07:0a:46:4b:ec:65:c2:a7:fb:62:89:
                    f3:35:fb:79:c7:ca:c9:77:19:cb:e0:a8:c4:02:b6:
                    23:7e:b2:ae:1d:59:e8:86:34:7c:d3:67:9c:bb:18:
                    bc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:2F:12:FB:AD:7B:F6:E3:E4:2A:CF:BE:F5:4A:B2:D7:98:C9:C0:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/399d5b58-3314-3fc9-abdc-01ab8d135ab8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:9f:16:92:51:a4:9b:15:88:31:39:bb:05:f0:64:49:5d:ba:
         8e:8d:e1:47:8a:47:44:50:cc:5d:e7:d0:8f:ff:61:f8:77:41:
         1e:53:f5:b2:17:c3:7d:37:09:16:3a:60:d8:d4:3d:3a:24:6b:
         dd:fc:a7:30:86:d1:84:e4:e3:14:c6:6a:36:d8:55:af:50:43:
         8d:fe:fe:11:b2:e3:46:88:eb:da:aa:e6:38:56:1c:e9:c2:09:
         1e:9e:26:7b:f7:98:1b:ce:9a:0f:87:32:bb:dd:24:d4:06:54:
         a4:98:b8:7c:3b:47:90:3b:52:79:6b:df:2a:09:b7:bc:c2:a7:
         17:a4:06:df:f5:68:ca:f4:3c:a5:41:7a:4b:48:8e:58:31:e3:
         cc:7d:59:ca:8c:55:c0:d7:03:c7:5f:94:26:e5:10:68:77:02:
         b4:f4:55:e3:21:e8:32:70:4a:2a:71:39:5b:56:53:cf:65:23:
         30:ee:49:63:ca:10:ca:11:f7:f1:87:0e:db:52:ae:50:0d:eb:
         4c:c9:02:a5:d7:8b:66:e9:11:f2:67:b2:26:e1:ca:04:18:8a:
         ba:6c:76:e8:8c:19:d3:51:b3:9b:6a:ca:47:9e:26:87:12:44:
         b3:2c:e9:59:bd:72:ff:61:87:ed:fb:f3:3b:e1:89:93:e8:5a:
         99:49:41:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:54:08 2026 by rpki-client