Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/41d2f484-7627-341d-9f39-6748cd8d6746.roa
File:                     41d2f484-7627-341d-9f39-6748cd8d6746.roa (raw, json)
Hash identifier:          1zdfwrRAAxDE2bfOuVtm/c+m9V8nXgqtRFa691tToWg=
Subject key identifier:   71:46:60:DD:E3:DC:A0:BA:CB:3F:A7:43:9D:32:F5:B3:40:61:B0:18
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E5B4782B9486565F3C3DEB080
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/41d2f484-7627-341d-9f39-6748cd8d6746.roa
Signing time:             Wed 01 Jul 2026 17:31:09 +0000
ROA not before:           Wed 01 Jul 2026 17:31:09 +0000
ROA not after:            Tue 29 Sep 2026 17:31:09 +0000
asID:                     18779
IP address blocks:        104.252.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:47:82:b9:48:65:65:f3:c3:de:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jul  1 17:31:09 2026 GMT
            Not After : Sep 29 17:31:09 2026 GMT
        Subject: CN=9435d233-4380-47ff-b91d-9e9567eea41b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:70:d4:91:86:4f:fb:54:44:3a:cc:35:9e:65:
                    a3:48:21:24:6c:f2:a7:14:3c:37:2f:15:8d:84:90:
                    85:ed:73:e6:0f:39:a5:8d:8a:a1:ae:f8:c3:e1:77:
                    2d:dd:5e:17:47:12:7b:c2:5f:ac:af:bd:5b:7d:67:
                    58:a3:a5:58:13:62:0b:f4:48:8a:c4:4b:ee:cb:5c:
                    79:5e:69:68:10:91:ca:24:5c:76:93:be:fe:ee:c2:
                    c8:6a:92:40:36:ad:73:0a:df:3d:fe:4e:86:fb:3f:
                    fb:60:00:23:25:c9:e5:c3:db:a5:51:27:d5:c0:9e:
                    d1:47:9a:d3:27:a1:e9:20:14:56:12:a1:09:94:03:
                    e7:38:56:44:75:00:97:fb:15:4a:76:b0:b5:f5:c6:
                    49:c5:ae:c3:2f:12:db:19:d2:dc:f0:56:19:46:c8:
                    fc:ae:19:ce:16:96:fa:25:21:e8:ff:3f:34:cc:17:
                    55:1a:67:53:10:c2:51:52:c6:ca:06:bd:fa:a9:d0:
                    40:ff:25:4a:40:82:dd:c6:b9:e5:47:aa:bf:ff:f8:
                    24:cb:7b:54:58:48:b1:42:76:7f:e4:10:53:b4:fd:
                    e1:7c:b1:eb:62:61:ba:63:d8:69:99:0d:be:ad:4a:
                    32:71:c6:82:2b:15:43:49:de:56:60:a4:f1:6a:44:
                    bf:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:46:60:DD:E3:DC:A0:BA:CB:3F:A7:43:9D:32:F5:B3:40:61:B0:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/41d2f484-7627-341d-9f39-6748cd8d6746.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:46:0e:67:bc:87:22:1b:01:0d:26:5e:af:d8:d5:9b:2d:5b:
         b3:b8:1a:13:2d:3d:48:88:45:cf:a1:bb:a4:51:42:26:2b:99:
         71:63:88:fb:77:cb:33:fa:32:38:2e:6e:26:2d:5d:1c:d1:57:
         7b:d0:2f:e6:e0:77:61:80:67:9f:ee:7c:8a:c1:a6:98:f5:58:
         70:ae:46:e4:c1:80:e1:d9:21:1b:3f:0c:c8:8b:e4:89:a8:e7:
         9f:87:65:03:bf:f1:9c:8c:f9:dc:ec:3f:03:40:f7:76:e6:84:
         8d:4a:fa:c5:b4:1e:0b:5e:03:1e:b3:77:da:92:b0:48:5d:f4:
         3f:fd:8b:2b:d3:6a:3d:ef:ec:b6:6d:74:c9:82:ce:cf:9d:89:
         67:69:1e:3d:69:72:47:e3:c7:2d:56:dd:89:a1:a5:67:94:1d:
         8e:bc:d7:a3:5b:45:52:33:51:78:30:8f:ff:1e:d7:53:c9:d3:
         c6:13:1e:b3:6d:f0:8c:9f:cb:8e:ed:8a:b8:f2:60:72:c5:d2:
         7e:cc:78:33:51:db:97:fc:f9:b3:2a:6b:19:5f:3b:46:9c:61:
         44:b2:76:f3:47:fd:79:70:e5:4d:c4:97:8e:0a:6e:1e:47:c8:
         4f:ec:96:8c:7f:6f:23:98:b6:93:12:1a:9c:f4:81:92:a1:03:
         e2:92:df:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:50:02 2026 by rpki-client