Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/93950bed-a687-3e04-a858-50c81c6a5154.roa
File:                     93950bed-a687-3e04-a858-50c81c6a5154.roa (raw, json)
Hash identifier:          XKkkbtCagAsz+169UtyfoGB1QD4imcuLAGttwM8wkRk=
Subject key identifier:   31:48:86:62:7D:5F:FC:4D:B6:BB:97:30:D8:56:78:4B:DE:8C:C2:6C
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA27D527283D70AAA21A00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/93950bed-a687-3e04-a858-50c81c6a5154.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     6939
IP address blocks:        104.253.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:27:d5:27:28:3d:70:aa:a2:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=c576774a-0a7c-4050-b7db-02ba5493f2cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:bb:47:73:25:dd:bb:a9:80:b0:9e:58:77:45:
                    20:b4:8f:13:0b:1a:cc:71:5d:e4:7c:e3:cf:9d:77:
                    57:02:f4:5a:71:0c:5e:f2:0a:1b:5e:8d:70:7c:6c:
                    be:bf:e0:8f:5f:56:dc:e5:fd:f1:ea:cb:aa:5d:50:
                    57:a2:be:62:5d:df:31:00:2c:92:0f:13:ba:5a:d9:
                    b8:7b:78:a4:6c:c9:d7:3c:4d:f7:22:1e:61:1a:1e:
                    55:91:06:66:a9:19:db:17:5c:8f:02:06:cb:f2:7a:
                    31:2d:57:52:a5:a9:6c:b6:7b:06:8d:0f:15:38:b5:
                    81:ef:08:07:cc:66:42:4f:6d:d9:b9:9b:42:08:c1:
                    eb:ae:05:66:28:e4:04:4a:dd:87:6d:f4:bf:6c:8a:
                    81:71:e3:57:28:22:3b:28:fb:7c:c9:47:67:37:1c:
                    38:dd:24:b3:72:4a:81:0f:6f:4d:3c:dd:c4:56:60:
                    92:41:c7:29:2b:91:79:37:4f:7b:ad:94:86:87:17:
                    3f:5e:c3:ec:46:ac:a0:06:4e:e5:4c:24:51:78:49:
                    46:c3:70:a7:9d:18:d6:2e:b2:f9:66:6f:ff:08:65:
                    57:65:df:b0:34:62:79:87:e9:be:97:b5:d2:be:c7:
                    6d:1a:f2:b2:1e:35:0e:22:f5:fa:0f:47:54:b1:dc:
                    0c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:48:86:62:7D:5F:FC:4D:B6:BB:97:30:D8:56:78:4B:DE:8C:C2:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/93950bed-a687-3e04-a858-50c81c6a5154.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:c1:c4:0e:1a:ff:98:35:c9:a5:f4:0b:f4:d0:a9:ea:0a:cb:
         6c:61:2f:bc:88:39:0f:de:f6:c3:e2:7e:72:fe:5a:88:2b:cd:
         1e:ef:74:6f:34:41:72:4a:8b:5d:f7:01:90:d2:17:49:9c:5f:
         c4:89:80:0e:f6:13:68:27:91:e3:b5:c3:b2:3f:e5:b8:03:78:
         27:d2:85:21:7c:65:ad:5c:ab:29:ae:bc:b8:a9:50:4b:c4:37:
         b1:4d:3d:34:d9:8f:d4:ed:4d:39:70:43:37:50:ca:51:1a:c5:
         4d:e5:4b:bd:0d:ef:ed:b3:05:e1:99:6c:fa:39:dc:c6:72:8e:
         e3:55:c3:53:10:4a:6b:8f:46:cf:e9:c8:bb:3a:97:4e:32:30:
         14:1c:ea:14:4f:82:37:96:39:41:62:97:cc:40:60:71:4f:de:
         3c:7e:bc:c0:b7:34:4c:9e:59:73:49:ee:c6:5a:62:1d:d0:2c:
         f3:d5:25:9b:4a:21:dd:8b:59:7d:3e:23:4d:97:35:1e:69:46:
         11:ab:05:f6:fd:e9:47:5f:fe:5d:fc:f0:a0:c3:1d:2b:35:b4:
         21:ac:b7:0e:1c:16:64:8b:3d:49:42:02:a3:b8:04:f1:7d:8f:
         78:32:9e:d2:97:bd:17:d0:ba:99:77:ce:e6:8b:b5:89:c2:97:
         5e:e5:d8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:55:54 2026 by rpki-client