Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/4b69c68d-4536-3eb3-8d1a-d23d48b68f0b.roa
File:                     4b69c68d-4536-3eb3-8d1a-d23d48b68f0b.roa (raw, json)
Hash identifier:          7hZNh0y+UB1ebq9GC1c5xXmJ6goPhQBitxfL1RKakXs=
Subject key identifier:   F0:CF:31:0A:CD:F3:26:E7:BC:5F:36:54:F9:3E:DA:2E:87:12:92:6C
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584F49742C5654A63C502822E580
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/4b69c68d-4536-3eb3-8d1a-d23d48b68f0b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     212238
IP address blocks:        104.252.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:2c:56:54:a6:3c:50:28:22:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e5a0a076-84a0-4506-ab8d-07c03b3dcd2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:13:8e:63:94:ff:58:0e:66:e0:b2:e2:0f:11:
                    45:65:e6:b6:33:06:9f:e8:83:0f:04:37:a5:a1:45:
                    78:02:07:03:06:03:53:82:2f:25:28:6c:b4:3c:6d:
                    88:f9:6d:de:dc:6a:a3:99:d1:9c:ea:2c:53:fe:05:
                    4c:eb:f5:de:b0:06:f0:46:21:a1:df:c2:1c:3e:1e:
                    6a:a5:29:70:52:db:35:1a:e5:6a:7c:7b:60:e0:da:
                    97:64:4b:f4:87:11:79:a2:57:de:5c:33:32:da:68:
                    66:8c:0d:65:84:1f:9f:bc:d4:b5:8c:5c:9a:22:eb:
                    53:0c:2a:1b:b0:43:02:31:2d:97:76:77:cc:3b:98:
                    42:66:45:a2:8b:27:86:b5:82:b7:e9:16:28:bc:a7:
                    fa:f0:38:36:d6:f5:69:70:e2:ff:3f:45:29:2d:c1:
                    2f:e9:96:08:a0:d3:78:0c:a8:84:db:89:37:7f:bf:
                    2b:70:98:e9:f2:cf:1b:d9:0f:2b:2f:b5:14:75:c4:
                    0f:1b:f7:69:93:6e:ba:ee:2b:be:87:7b:34:33:d2:
                    d7:63:d1:40:cd:5e:65:0a:87:64:d6:0e:d9:7f:7c:
                    0e:68:aa:60:75:2c:c7:0b:82:38:57:93:29:bd:9a:
                    91:c4:10:f2:b4:f1:c3:1d:d7:d3:ab:29:29:fd:e6:
                    70:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CF:31:0A:CD:F3:26:E7:BC:5F:36:54:F9:3E:DA:2E:87:12:92:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/4b69c68d-4536-3eb3-8d1a-d23d48b68f0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:0f:57:1e:9f:07:40:1b:97:31:43:5a:45:6a:82:05:cd:79:
         e2:70:0c:8e:0e:fb:44:a4:06:f9:b8:c4:4c:5b:09:99:66:ae:
         c0:f7:6e:2c:0e:9c:15:28:77:f7:4e:5d:83:a3:6d:4c:46:b1:
         d8:d0:59:ae:8f:d2:31:3b:9f:56:04:97:60:12:4a:ed:be:17:
         89:8c:f9:4c:ef:21:41:61:40:3b:4b:fe:b4:8a:7a:89:7c:d4:
         f7:93:80:83:38:3b:6d:01:04:3a:ef:6b:7a:e4:29:70:b0:ab:
         5a:8a:be:0a:2d:cc:df:4e:a7:71:13:ab:b4:67:2d:4d:fa:5c:
         7b:64:1f:10:81:65:c4:2c:e3:e2:b5:2f:5d:3a:95:c0:94:0f:
         b3:72:97:73:98:df:da:b3:6e:b5:08:eb:74:b0:3b:77:2c:e8:
         58:42:af:a6:df:1c:e6:c9:12:fe:db:40:7a:0f:da:53:9c:1c:
         50:b4:fc:58:6c:15:67:9a:db:8a:9b:bd:2d:d9:1f:e4:f7:ab:
         eb:d0:b0:6f:ba:a5:fa:ec:02:4f:81:84:18:84:67:70:da:63:
         dc:b0:da:ab:84:4f:0b:c3:43:f7:33:df:92:de:e9:44:21:58:
         36:b4:b5:29:93:ca:02:4e:ce:ac:9b:59:ad:27:3e:7f:08:4b:
         cd:4e:7f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 11:21:45 2026 by rpki-client