Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/45f9f2c7-7e7a-3d28-ab9f-b3b36194e862.roa
File:                     45f9f2c7-7e7a-3d28-ab9f-b3b36194e862.roa (raw, json)
Hash identifier:          YYASfMOYC71xjZNSE6vQv+IPN+VDtAaHfCHKfp8l9XA=
Subject key identifier:   C8:3D:62:C2:D3:3E:45:BB:97:45:45:E1:A5:8A:4C:60:08:0B:04:60
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584F99030A95D6893F072502EE30
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/45f9f2c7-7e7a-3d28-ab9f-b3b36194e862.roa
Signing time:             Fri 23 Oct 2026 13:00:12 +0000
ROA not before:           Fri 23 Oct 2026 13:00:12 +0000
ROA not after:            Thu 21 Jan 2027 14:00:12 +0000
asID:                     212238
IP address blocks:        104.252.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:99:03:0a:95:d6:89:3f:07:25:02:ee:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Oct 23 13:00:12 2026 GMT
            Not After : Jan 21 14:00:12 2027 GMT
        Subject: CN=2619485c-6c20-46db-bdb3-ceae4af1ffba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2b:64:79:39:cd:cc:ca:fe:e7:93:f8:35:8b:
                    84:cb:e0:b9:9b:12:fb:00:59:49:8a:df:fa:af:8d:
                    46:59:07:e8:39:5e:c8:da:7f:26:bb:ee:85:35:58:
                    e7:74:30:db:53:5d:94:50:6c:fa:f8:e8:d8:68:6e:
                    25:5e:29:8c:c0:92:3b:b8:cf:d8:f7:23:98:f8:29:
                    2f:b0:9d:75:af:45:57:6f:17:f7:39:c6:78:d8:89:
                    0b:96:24:55:da:e9:4b:01:23:63:40:84:a5:4d:97:
                    cb:16:be:d1:29:bd:67:f1:2a:1b:f6:4c:d6:a1:99:
                    16:e7:eb:70:32:5d:92:09:a2:b9:3f:ee:bf:b7:e1:
                    02:dd:d9:bb:72:89:0e:68:49:75:54:b2:9c:54:45:
                    85:a3:56:11:e8:28:65:01:39:d2:c8:13:1a:11:a9:
                    56:7c:02:0e:1b:a4:84:ae:3a:1a:de:04:90:f6:0c:
                    b3:12:a4:7a:6c:36:1e:eb:5a:c4:b6:b3:d9:69:cd:
                    44:52:10:f2:6a:81:6d:80:d2:65:cc:c8:da:4d:1b:
                    d8:65:6a:e8:b3:f4:55:dd:e5:37:86:2d:81:c3:c1:
                    30:4e:45:69:3f:08:77:59:9b:59:33:3b:a3:81:9e:
                    a4:a7:af:e3:65:5d:8e:93:ca:dd:16:de:bb:ef:70:
                    e9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3D:62:C2:D3:3E:45:BB:97:45:45:E1:A5:8A:4C:60:08:0B:04:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/45f9f2c7-7e7a-3d28-ab9f-b3b36194e862.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:66:ca:a1:3c:b4:5d:4c:17:7f:15:56:b3:69:f8:3b:2d:b2:
         f5:9d:c7:69:1d:72:81:53:ba:8b:21:7c:cc:e0:12:e1:7f:5c:
         9c:91:72:bf:d1:23:0e:89:3f:9b:11:7a:b7:1c:34:98:51:b1:
         dd:c9:27:5e:b5:5c:18:f6:ad:e6:9c:d0:a9:73:85:ae:36:98:
         5e:6a:b7:c8:fd:a3:e7:54:a7:de:9f:0d:16:30:82:9d:82:67:
         f2:42:09:7d:4b:9c:09:40:ca:f7:5a:d8:0d:63:70:2f:5d:d5:
         de:05:eb:8a:5d:1e:77:8a:39:c6:0e:12:62:b1:6a:40:66:9a:
         5b:83:ff:0f:4f:b1:8d:6f:60:ff:41:38:fc:38:73:9b:18:62:
         60:7f:66:4e:57:f1:c4:8e:6b:da:6a:5b:58:ad:4c:5d:6a:c4:
         08:37:6d:e1:8a:a0:d9:04:aa:8c:0c:86:aa:22:65:82:c6:5d:
         d4:5a:47:a8:dc:06:30:eb:2b:af:ce:15:2f:ee:59:4e:86:bc:
         2c:52:c4:f4:b4:3e:88:d0:87:eb:c7:0e:8d:3e:94:d5:ac:91:
         06:e8:a7:b8:40:c7:96:98:e3:94:51:5e:7e:19:74:f2:88:2e:
         a3:2b:4b:23:33:14:81:2a:43:a2:43:f0:bb:28:7d:50:82:94:
         6f:39:6d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 06:49:55 2026 by rpki-client