Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a6d2baf2-6ba6-3fad-a1fb-dea16e96f51d.roa
File:                     a6d2baf2-6ba6-3fad-a1fb-dea16e96f51d.roa (raw, json)
Hash identifier:          PfDaH37LDOHrmFRicwzhwS9A658DUeocWsKs3HoUsMI=
Subject key identifier:   16:9D:6C:C9:DB:89:F5:29:64:95:61:FF:A6:DA:47:18:12:0B:83:A6
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584DE9396C69C73136F1B1952280
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a6d2baf2-6ba6-3fad-a1fb-dea16e96f51d.roa
Signing time:             Thu 21 May 2026 21:00:37 +0000
ROA not before:           Thu 21 May 2026 21:00:37 +0000
ROA not after:            Wed 19 Aug 2026 21:00:37 +0000
asID:                     212238
IP address blocks:        104.253.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:39:6c:69:c7:31:36:f1:b1:95:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: May 21 21:00:37 2026 GMT
            Not After : Aug 19 21:00:37 2026 GMT
        Subject: CN=02810b4e-2d1b-4275-910b-48fb0e9b1986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6b:e1:8a:e4:a9:cc:51:91:13:21:1b:04:08:
                    4f:db:f0:eb:e5:29:57:d7:b1:d6:aa:ac:8e:20:1c:
                    6e:af:b8:f4:f7:90:8f:66:36:48:8f:8f:b3:5c:c3:
                    24:85:f6:e8:a2:6b:12:5e:7c:7f:44:04:9a:dc:1d:
                    ac:22:49:ce:9f:1c:cf:10:89:db:0e:51:7f:4c:e1:
                    4c:37:ca:62:f4:47:ae:b3:e6:ac:59:11:dc:43:06:
                    41:6b:97:f8:e1:e8:cf:44:cb:fa:ab:83:29:be:86:
                    df:4d:b9:e6:14:58:69:cc:2a:9f:c5:20:a9:f5:66:
                    8b:47:cf:6a:54:02:6d:40:ba:35:c7:e3:27:be:e1:
                    60:a9:48:1a:7f:54:7e:92:04:63:6c:f7:94:7c:86:
                    54:c6:26:f2:e2:ae:f5:5d:9b:d8:fb:5d:75:8d:c8:
                    4a:b3:2c:9f:6d:8d:29:dd:d6:cc:90:29:4f:e8:07:
                    e8:ff:16:3e:2b:e4:08:91:2a:f3:be:d6:7c:b3:0b:
                    ce:59:55:6f:86:21:24:b0:40:74:ae:2a:31:78:a1:
                    d0:f4:a6:38:3d:bd:01:11:4a:66:38:8b:11:ca:7a:
                    50:31:fc:56:24:5c:90:41:4e:26:a1:1a:c1:fc:56:
                    46:8c:7f:30:44:ec:77:f8:00:5d:8b:03:da:39:af:
                    13:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:9D:6C:C9:DB:89:F5:29:64:95:61:FF:A6:DA:47:18:12:0B:83:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a6d2baf2-6ba6-3fad-a1fb-dea16e96f51d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:15:df:b6:40:67:90:da:64:6d:c1:9c:89:0e:c8:4f:18:b3:
         e4:3e:ea:54:9f:f2:63:d0:8f:08:e1:88:69:3f:a0:7f:c4:44:
         cb:4f:ed:56:bb:16:b8:cb:12:d2:60:d4:ac:24:ec:32:7f:18:
         50:b7:72:52:fa:eb:20:72:a7:e2:af:a0:07:d4:68:8e:a7:a1:
         3c:59:24:d5:db:3e:be:e7:60:75:2a:04:50:c6:00:b2:1f:07:
         54:14:35:68:c3:8c:c8:d5:65:ad:a3:76:7f:c9:59:d3:f4:ba:
         b4:69:f8:1c:48:ce:24:38:d1:d8:64:00:e2:41:e6:44:30:ff:
         e5:1a:c2:4e:96:33:6c:dd:1a:ee:0e:63:f4:f9:f8:f8:ee:ee:
         f3:ed:71:4a:f2:79:fd:aa:bc:57:ff:a0:41:47:14:e9:e1:68:
         6e:b9:9a:22:91:82:b2:3c:8b:01:fc:48:dd:03:10:08:b8:e3:
         69:9d:e3:00:46:66:6f:b1:14:c4:2b:ca:2d:5f:74:3c:27:3b:
         6a:87:30:82:9d:84:e2:35:bd:e2:ff:36:74:2d:2b:31:4c:34:
         4d:e4:68:89:c3:ff:e2:09:0d:30:66:93:78:cf:63:02:97:c0:
         86:86:6e:a3:ae:db:b0:95:86:b1:d3:f4:56:27:7f:ba:10:89:
         79:5f:e2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 04:25:56 2026 by rpki-client