Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/4d9494c7-79c3-38a5-ae7c-f878fe80bb2a.roa
File:                     4d9494c7-79c3-38a5-ae7c-f878fe80bb2a.roa (raw, json)
Hash identifier:          qqTcyf0vAMwiubfDbm4TVSbyKlpRooq7zDmvvTs/taU=
Subject key identifier:   95:B3:4C:B8:76:52:AC:1B:09:7D:86:F6:E9:22:54:8E:F7:B7:DB:76
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CECCE3B8C639ADEBD5D80
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/4d9494c7-79c3-38a5-ae7c-f878fe80bb2a.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     262287
IP address blocks:        104.252.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:ec:ce:3b:8c:63:9a:de:bd:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=015554b2-afa5-4123-bde8-dd059563ba3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c0:6a:92:fc:fe:ac:31:41:30:19:01:a1:0c:
                    f0:71:00:6f:38:f3:c3:83:2d:84:65:a9:06:49:02:
                    75:1b:0a:60:7e:98:a8:34:60:5a:07:86:bd:51:d0:
                    fb:69:13:d0:f4:f3:59:ff:47:fa:9c:55:70:10:38:
                    bc:c4:53:5e:c1:59:e4:cd:be:17:a3:fb:b9:39:e1:
                    b2:5a:95:17:78:6b:1e:cc:fc:ac:a1:04:b9:2b:2d:
                    24:63:1a:8c:d9:bf:fd:b2:5a:b2:2a:f9:27:d6:eb:
                    23:45:73:09:b8:a6:f3:49:eb:4d:cf:48:af:45:37:
                    b1:36:33:70:c9:f4:69:29:17:c4:76:37:bf:98:c9:
                    6f:8a:a5:c9:cb:a7:09:bf:c2:38:f5:e4:03:3b:f3:
                    8b:cc:ed:77:d8:3d:31:3d:43:1b:3d:fe:c5:22:88:
                    9a:6a:05:cd:d1:de:4e:55:a7:d4:98:81:b8:18:08:
                    b8:72:37:b4:aa:f4:63:3a:d2:dc:64:26:6f:cb:01:
                    24:c4:24:d5:9b:bd:b1:c0:cc:0d:76:5f:ed:a0:83:
                    db:e2:80:ae:55:93:ad:60:8d:c9:1b:31:80:bc:3e:
                    27:86:61:16:59:c1:6c:7b:e0:11:45:67:af:12:db:
                    b4:06:36:e9:57:6b:fe:14:27:a6:4e:88:c9:5f:3c:
                    a6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B3:4C:B8:76:52:AC:1B:09:7D:86:F6:E9:22:54:8E:F7:B7:DB:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/4d9494c7-79c3-38a5-ae7c-f878fe80bb2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:73:2e:97:73:b2:95:e4:1e:71:ef:eb:fb:1d:7a:e7:8f:c6:
         2a:86:00:4b:5a:bc:5b:2c:3f:fd:39:76:ba:c1:ae:7b:52:f4:
         39:00:d1:44:95:70:21:75:58:b1:94:0b:9b:70:d7:93:21:ef:
         1e:81:77:c2:f7:fc:76:1d:1c:23:aa:0f:c5:f0:f1:92:d5:14:
         1e:dc:2e:8b:68:c0:5f:c9:c2:a4:29:30:90:b4:2c:14:56:62:
         f7:ea:7f:33:cf:aa:ab:4d:68:8e:9f:c8:65:98:91:fe:29:ac:
         35:47:f2:cf:08:72:36:15:7a:cc:e9:e0:4c:f7:27:5e:cb:49:
         2c:c2:9c:1a:aa:ab:88:7a:dc:54:51:01:10:1e:b4:74:33:74:
         5a:64:42:05:cf:27:04:6a:1e:68:6e:0b:6a:56:e3:bc:17:67:
         51:84:91:56:6b:de:96:d2:76:78:09:6c:25:3e:3d:8f:de:14:
         20:d3:37:7e:4f:e6:c4:6e:af:f4:d3:71:40:71:64:aa:e3:3a:
         e7:56:f2:d7:21:53:de:78:3a:0c:02:e0:2c:83:55:57:1e:7b:
         51:43:31:78:14:7f:d7:2a:93:89:d7:49:98:d8:22:c7:ca:e9:
         18:d3:55:67:57:eb:af:39:ed:b0:34:fb:62:84:f2:66:ab:c9:
         2b:99:a3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:40:31 2026 by rpki-client