Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/90e9e46f-04ff-3c00-94ad-e4d96dc5cb7a.roa
File:                     90e9e46f-04ff-3c00-94ad-e4d96dc5cb7a.roa (raw, json)
Hash identifier:          2tuSbLcBJU/J9WpJ6PFGg2E2pmlQeOvySdDfbvF5lts=
Subject key identifier:   2F:5B:DF:6B:C0:DD:FD:DF:7D:9F:C4:7A:52:1E:5D:98:C1:34:CF:3A
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA1021EFEC2556C12BDB00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/90e9e46f-04ff-3c00-94ad-e4d96dc5cb7a.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     212238
IP address blocks:        104.252.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:10:21:ef:ec:25:56:c1:2b:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=b5fc067c-0cb6-463c-86d5-09b2d447e299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ff:88:10:9a:aa:45:1e:ba:2f:5a:f5:d7:4f:
                    83:7d:9f:1a:25:47:cb:bc:b1:85:74:3a:9e:8b:91:
                    3a:0e:aa:f3:48:f3:2d:15:1f:82:28:fc:ef:08:fa:
                    b9:30:fb:d7:29:1d:58:a5:6b:88:b0:c2:15:b7:c3:
                    db:e2:03:e6:bf:69:e4:fc:a6:35:c9:22:e7:2e:54:
                    4d:d6:43:b8:2a:43:e6:b2:4c:ac:2e:23:08:67:90:
                    a9:05:0f:90:e2:c3:64:ed:60:09:71:62:d0:6c:3c:
                    01:62:4d:a3:79:ac:a7:ce:63:7c:93:fa:ea:17:2c:
                    b7:c5:f6:2a:d1:28:c0:38:55:a7:81:af:55:28:14:
                    c5:3f:51:85:04:41:ba:1b:12:b0:63:f2:1d:38:94:
                    56:fa:98:93:ba:0d:7f:e7:1f:6f:44:ac:79:7d:fc:
                    25:c2:ac:20:7a:c4:cf:ec:fd:9d:ef:11:e4:73:d1:
                    dd:ec:39:7c:e4:15:dd:96:43:d2:8f:08:66:36:14:
                    40:92:2d:14:8a:7f:cd:f7:da:9b:d8:46:25:f6:ac:
                    57:0a:ae:17:0d:8e:9b:dd:60:68:f8:8f:e3:05:db:
                    83:6e:31:0f:06:30:90:3b:d6:9e:1a:cc:04:c1:81:
                    a1:f2:41:ed:f0:26:11:4b:c0:3d:c1:14:c8:4b:fe:
                    f7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:5B:DF:6B:C0:DD:FD:DF:7D:9F:C4:7A:52:1E:5D:98:C1:34:CF:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/90e9e46f-04ff-3c00-94ad-e4d96dc5cb7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:1b:ab:1d:58:44:ff:42:8b:b4:af:76:b5:d7:af:91:9e:db:
         29:bd:c8:dd:e6:40:3e:b5:3b:7a:a9:c5:71:0a:f5:03:37:85:
         b0:d5:97:4a:bf:da:4a:90:74:35:6d:19:f3:3d:e6:ba:0a:7a:
         5d:69:b1:fe:21:86:59:f3:7b:bb:98:a3:97:74:08:26:bd:2c:
         2d:d1:6a:08:e1:f8:7f:24:8d:cc:b9:3d:1c:af:7e:12:e7:5b:
         b8:ef:dd:51:5b:21:c9:97:2a:4e:66:de:72:0d:c1:29:75:fd:
         c8:f6:14:b0:c9:22:4a:00:4a:99:53:df:b5:73:fa:df:f5:5a:
         6b:25:d6:41:59:29:76:27:17:35:37:df:85:8e:0f:85:37:57:
         fc:66:cc:c0:cd:e6:82:63:0f:3c:1c:04:4d:a0:16:09:51:6d:
         34:3a:d7:aa:60:40:c2:83:1a:ba:33:4f:bc:a6:5f:28:48:8c:
         8a:39:8a:a8:77:2e:e1:ff:70:c3:97:38:71:9b:90:27:3f:19:
         74:0a:5b:65:26:b5:5e:99:bd:35:e4:54:3e:b1:f0:d2:02:46:
         19:2a:35:33:8e:b8:e0:4e:2a:0f:22:cd:71:95:97:b5:06:95:
         67:3c:1a:35:e4:89:8b:f7:f6:f8:a2:03:95:61:cd:66:e5:70:
         99:e4:34:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:51:28 2026 by rpki-client