Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/3ce8b7d5-a8a9-3bde-a7a6-70caaa806321.roa
File:                     3ce8b7d5-a8a9-3bde-a7a6-70caaa806321.roa (raw, json)
Hash identifier:          dEewyzofi9+xbqaIi47kIx7Jx+Ojlrxqyk2TQh2dIoo=
Subject key identifier:   6F:44:41:A8:DB:F1:67:42:30:6C:38:57:57:A8:8F:FA:B5:DB:58:1F
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA1A29DED76E9584848A00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/3ce8b7d5-a8a9-3bde-a7a6-70caaa806321.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     9009
IP address blocks:        104.253.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:1a:29:de:d7:6e:95:84:84:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=3f125ac1-c3f6-45cb-9e0c-dd22f7914c7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7d:b5:76:ab:42:45:55:97:43:62:e4:31:04:
                    bb:da:7a:20:0d:47:0d:6a:20:f6:b7:9f:30:ca:86:
                    58:4b:0f:2c:89:0b:3d:b4:a4:d3:a9:f5:10:0e:7d:
                    04:06:39:e3:88:0a:b2:a3:50:2e:4e:41:32:2e:d7:
                    79:74:2c:3c:5b:55:9e:b9:60:9f:10:c8:7e:d2:d4:
                    72:8e:10:73:44:28:32:50:0b:ac:a4:40:ca:61:de:
                    98:ad:b5:1f:77:d4:c5:ff:ab:31:ab:02:e0:d9:ba:
                    ae:08:4f:47:87:cb:a9:84:9f:15:2c:9a:c9:a7:3c:
                    46:a1:1c:3a:06:e0:ba:21:49:c8:f4:91:d7:32:09:
                    18:1c:29:05:74:89:b3:ce:c2:37:46:de:8f:1f:e6:
                    5f:65:22:a2:74:16:58:ea:a8:fd:4a:5a:5e:0d:c0:
                    ad:7c:04:d4:20:0f:e3:5f:9d:7c:78:c9:2b:d1:28:
                    63:55:95:0b:67:28:93:98:38:42:c3:72:ec:8a:44:
                    2a:fe:e3:65:39:8a:23:dc:c5:b8:b0:ca:f1:54:c1:
                    b3:c4:70:2d:9a:3a:c7:2d:cd:4a:3c:dd:e7:bc:4b:
                    9e:f1:32:a9:c9:a0:c3:1b:1c:67:15:3f:77:0a:25:
                    4e:03:e2:87:7a:db:53:65:e1:d8:d3:85:0a:f7:48:
                    db:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:44:41:A8:DB:F1:67:42:30:6C:38:57:57:A8:8F:FA:B5:DB:58:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/3ce8b7d5-a8a9-3bde-a7a6-70caaa806321.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:19:14:1e:f8:ad:a9:74:74:66:9e:ae:16:69:cd:64:f2:71:
         8a:ca:05:d6:9a:d5:2a:cb:c1:bd:f5:83:47:b4:ad:71:58:68:
         c1:7e:95:44:c5:6e:91:a2:ec:23:e3:78:2d:eb:1d:a2:cf:a3:
         0f:d1:ae:25:86:27:72:8c:35:96:80:f3:31:58:70:ff:82:d8:
         cb:1a:be:cf:73:a4:08:f3:7c:12:4d:ac:28:5e:d0:2e:d7:98:
         b5:4d:f2:6f:07:75:e9:aa:45:03:9b:8a:0c:2c:13:6c:ca:86:
         bc:10:dd:b1:6b:6b:3a:43:9d:5d:8f:4f:6b:f4:a3:4e:77:d8:
         1b:9d:a3:70:66:1e:ef:92:bc:b8:fd:17:c5:d9:aa:fa:ee:2c:
         aa:ad:53:7c:0e:b5:da:70:60:ec:18:bc:62:70:53:4e:54:04:
         bb:c5:c6:60:f7:8a:1a:9c:4e:24:fb:23:fe:de:7e:67:01:d0:
         03:5a:24:8a:af:3c:a0:26:98:83:4a:08:31:5c:f8:75:6d:ca:
         79:8e:ff:86:94:68:f4:3e:0f:b3:c9:06:a4:8e:2f:9a:3c:7b:
         11:cf:a5:95:1e:cd:39:56:99:a3:dc:c9:55:9a:20:a4:ba:44:
         57:7a:80:53:80:73:4e:1a:86:cf:87:29:55:af:04:56:91:70:
         fb:49:ee:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:51:41 2026 by rpki-client