Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/40325e41-d450-30ad-97bd-8d3e7d0567da.roa
File:                     40325e41-d450-30ad-97bd-8d3e7d0567da.roa (raw, json)
Hash identifier:          CCfy4lcK8o6zi4gWUa/9ozR4cex8RmjM968GuWsKCPg=
Subject key identifier:   EC:D8:65:06:AE:D9:0A:A9:AD:37:0C:22:73:70:90:CF:57:44:5C:CB
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA16FE522D596A4CCAC000
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/40325e41-d450-30ad-97bd-8d3e7d0567da.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     212238
IP address blocks:        104.253.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:16:fe:52:2d:59:6a:4c:ca:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=c0b4ace6-b421-48c3-8bab-c87b00d6daa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d6:a8:b3:68:25:96:36:c6:4b:e7:99:27:2e:
                    24:51:73:88:30:3a:db:91:32:e4:db:fc:18:2c:4b:
                    40:2a:2b:17:2e:38:67:a2:72:10:e1:dc:00:a9:6d:
                    71:fa:58:70:66:6b:d7:7d:42:af:84:ff:6f:8d:f5:
                    cd:77:d2:2b:9f:a2:ce:25:a3:28:6b:01:9e:98:dd:
                    02:f7:cd:67:c8:6a:ef:33:98:31:13:e1:cc:02:4f:
                    10:d6:84:45:f1:38:d4:1f:18:fe:b3:59:31:ae:45:
                    0b:f4:29:40:6e:7e:d6:68:0b:b4:0f:8e:45:0f:df:
                    e2:64:d6:42:ed:af:ac:92:32:c1:42:c3:88:d0:55:
                    cd:8a:fb:6d:ca:7a:4a:05:c9:34:7a:07:70:86:1a:
                    d3:68:45:af:3c:c2:f3:af:64:8a:4c:63:ab:b1:65:
                    39:56:8b:cb:4b:9e:ef:1f:6b:77:b5:90:0a:9b:f2:
                    74:f3:c3:e1:cd:46:b8:73:35:dd:59:ce:37:94:4b:
                    08:c0:99:41:88:7d:89:f0:94:ef:25:df:c8:58:8e:
                    ae:53:5c:de:ab:ca:21:3f:4c:a5:05:2f:ce:58:0d:
                    08:5e:18:71:6c:0a:43:ee:da:5a:d4:ba:39:c6:d2:
                    3f:5a:8a:55:45:d4:9f:9f:dd:6c:8c:73:b9:a7:f5:
                    ab:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D8:65:06:AE:D9:0A:A9:AD:37:0C:22:73:70:90:CF:57:44:5C:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/40325e41-d450-30ad-97bd-8d3e7d0567da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:5c:d8:03:a6:03:04:6e:5f:33:eb:4c:9d:96:b2:e7:d9:c7:
         d8:c9:50:bf:e2:c3:b3:66:9f:8c:32:17:b2:f7:7a:5a:9d:82:
         8d:a3:01:99:68:f1:d7:88:21:ef:17:d9:07:27:47:2d:c6:4e:
         c2:c6:f8:ef:95:25:bb:21:1b:88:47:47:5f:91:37:47:7e:7c:
         33:1f:ed:c8:27:c4:2c:a0:a5:c9:aa:72:f1:9a:38:df:f1:ae:
         83:7a:8f:59:8e:b1:7d:ff:31:4b:b2:a7:f7:6f:30:f5:9b:e5:
         ef:f3:98:bb:1e:28:67:da:b7:56:8d:51:45:45:83:aa:ca:09:
         e8:7c:52:25:00:9a:13:e2:e2:ed:b3:54:aa:b3:2a:9c:c1:11:
         72:7c:65:c6:f4:94:cf:48:7b:7a:0f:af:96:8e:39:17:f9:00:
         18:6e:61:18:42:0b:14:6b:bb:c4:4d:4a:2c:7b:03:d0:33:ca:
         77:51:28:0a:cc:44:49:c5:32:4c:02:c7:de:fc:24:53:93:12:
         ee:06:7a:32:86:5c:4d:8f:7e:9e:aa:ff:e4:29:38:42:e5:a3:
         ac:9c:1a:ee:78:37:07:13:d2:ee:85:71:b2:c4:1b:1c:7a:9b:
         e9:98:e8:c9:cc:38:2b:0d:5e:29:2e:84:a7:1b:86:e9:df:0f:
         37:7c:9d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:53:28 2026 by rpki-client