Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/86b6a500-5a6b-308f-93e2-266a9bfb5491.roa
File:                     86b6a500-5a6b-308f-93e2-266a9bfb5491.roa (raw, json)
Hash identifier:          RgsJpJ+DsyPi8krAuuvf49ZuulRv1erzRGBDBSNOi7M=
Subject key identifier:   BD:F8:D6:D9:5F:CF:EE:80:80:12:94:C9:0E:82:CC:9D:67:22:BC:74
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA0A444AC53335C495A8A0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/86b6a500-5a6b-308f-93e2-266a9bfb5491.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     398781
IP address blocks:        104.252.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:0a:44:4a:c5:33:35:c4:95:a8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=affaa6b4-21ca-4a46-b7e7-c3d2b528d4f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7c:58:c5:a2:d8:f6:31:67:51:e2:a2:6f:c6:
                    7f:c6:07:56:01:b0:76:c0:72:5d:12:12:f8:95:13:
                    6d:45:7d:33:88:e5:20:49:bd:d8:7c:78:c8:86:5e:
                    f4:96:16:15:ba:01:62:dd:79:14:1b:48:05:32:aa:
                    1a:a4:f7:74:58:e0:41:de:b8:e6:80:54:ce:49:73:
                    a1:06:83:d7:95:54:be:22:68:a3:85:7e:be:67:a0:
                    ad:e7:5d:01:cf:86:dd:42:f5:34:7d:18:73:09:b5:
                    35:13:27:fe:2b:15:ab:f8:21:95:a0:0a:b5:9f:c2:
                    f9:5c:73:35:fa:7e:46:fd:07:28:2c:b5:d8:a3:17:
                    81:75:5d:b3:08:56:df:fc:5e:e2:19:fa:25:2d:e6:
                    47:25:75:8c:78:f1:8b:ca:80:03:4c:8d:71:fa:76:
                    74:b2:54:74:9f:8f:d8:1c:f1:16:3b:07:a8:9d:89:
                    0a:94:63:3b:44:c7:a7:2a:c2:55:19:f4:ba:0d:a1:
                    19:3c:e2:b3:cc:15:75:bc:63:29:8e:5b:e3:2f:f6:
                    6b:90:8f:c0:f9:b2:2b:2b:81:62:b5:f7:a1:78:a8:
                    a1:06:34:26:00:0a:84:d1:0d:f1:9c:aa:32:ca:ce:
                    70:6a:fa:fe:df:9e:4d:97:c5:6e:bc:05:d3:d5:63:
                    c4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F8:D6:D9:5F:CF:EE:80:80:12:94:C9:0E:82:CC:9D:67:22:BC:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/86b6a500-5a6b-308f-93e2-266a9bfb5491.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:f0:9b:bd:bc:b8:0d:0f:8c:90:73:da:69:e6:74:c4:5e:7b:
         b1:eb:65:9d:ca:13:3b:21:56:20:af:a8:b4:bc:10:60:b3:e2:
         95:43:45:5a:c1:40:c7:8f:d6:10:a0:45:aa:b6:c3:7d:e6:bc:
         97:29:53:71:60:dd:dc:98:f7:94:8b:36:ba:b7:7b:d6:fd:31:
         7b:89:c8:56:ef:14:89:40:eb:0a:f3:73:0c:e9:19:00:5e:71:
         9c:a9:34:51:5f:80:f6:34:fa:0c:1d:b5:8d:80:35:69:8b:81:
         69:52:0e:53:09:70:60:17:f3:bd:85:06:a5:32:b2:79:c5:d9:
         db:4e:0d:cb:68:a1:63:90:19:46:02:49:1b:41:ca:e0:82:36:
         e9:48:f4:fa:fa:d7:a0:c1:b3:ca:ed:24:ed:65:4a:00:05:2a:
         e3:73:f0:de:4d:e2:61:29:25:74:a5:d0:66:fb:0f:65:38:6d:
         42:b2:43:fd:1e:ed:ae:9a:9b:46:14:ea:c2:c5:b9:9c:74:39:
         3b:67:96:93:ef:d5:0b:8b:72:c9:6e:94:88:87:94:0a:bb:cc:
         8f:1d:d7:b0:be:09:85:87:5a:49:b1:c3:90:80:74:de:8d:e7:
         fc:f6:2e:07:63:97:80:21:f5:01:b6:71:69:d0:f9:f9:6a:cf:
         6a:dc:a5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:54:07 2026 by rpki-client