Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a92c2e7a-20aa-3b3f-912d-e15109e5639f.roa
File:                     a92c2e7a-20aa-3b3f-912d-e15109e5639f.roa (raw, json)
Hash identifier:          UMwKaJkW8A98hMseqZqQ4IZjVzaDEkBTIDPSvvc+1wU=
Subject key identifier:   77:87:4A:A8:DB:14:0B:27:00:72:C0:D1:6E:82:36:39:C5:75:75:93
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584DE9396C8F273ADB27CBDFCA90
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a92c2e7a-20aa-3b3f-912d-e15109e5639f.roa
Signing time:             Thu 21 May 2026 21:00:37 +0000
ROA not before:           Thu 21 May 2026 21:00:37 +0000
ROA not after:            Wed 19 Aug 2026 21:00:37 +0000
asID:                     212238
IP address blocks:        104.253.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:39:6c:8f:27:3a:db:27:cb:df:ca:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: May 21 21:00:37 2026 GMT
            Not After : Aug 19 21:00:37 2026 GMT
        Subject: CN=bc9cf90a-4359-4998-972d-ada623cd8d2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d6:4a:2b:e1:2f:f0:4a:1b:ee:96:f3:5a:bc:
                    46:89:1a:77:34:82:82:f6:b7:a1:b9:3e:fd:da:87:
                    95:81:85:b3:c9:48:e0:81:ad:bf:0b:a9:ef:52:14:
                    b1:aa:7a:4b:aa:79:ac:34:fd:d3:58:13:b9:af:e6:
                    df:b0:00:18:0b:90:bf:00:74:c1:be:8a:89:b7:ac:
                    0c:b9:95:97:92:65:f4:85:cc:a1:23:ff:98:e1:81:
                    07:d7:93:31:f5:ec:84:97:2d:8a:8e:21:4e:ad:fe:
                    22:d3:e8:6b:63:5e:dd:35:01:27:72:58:16:46:96:
                    c2:4e:c7:5c:ca:a2:55:1f:1f:a5:97:64:70:40:e5:
                    10:51:ed:cb:21:ad:63:eb:54:9c:62:0d:be:17:ce:
                    f3:8c:6e:53:5a:66:5b:d3:29:de:0a:38:99:ef:4a:
                    e8:a7:1f:08:d8:b8:63:d7:d7:3a:a6:5e:dd:e5:cd:
                    39:90:83:b1:1c:a6:5d:20:03:1e:79:c5:2e:e5:d2:
                    1e:e6:ec:90:c8:5a:09:c0:a6:48:9b:d1:b4:bf:6e:
                    9b:2d:97:11:2e:41:cc:36:de:4c:be:8f:b9:ca:e2:
                    5f:34:80:f8:98:3d:bd:fe:af:2c:50:f4:d6:4e:34:
                    16:35:fd:d0:52:f1:88:2f:9d:c6:d0:89:ec:8e:6c:
                    b9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:87:4A:A8:DB:14:0B:27:00:72:C0:D1:6E:82:36:39:C5:75:75:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a92c2e7a-20aa-3b3f-912d-e15109e5639f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:b9:12:87:0d:a8:b4:b6:80:82:40:13:32:df:2a:f4:58:ce:
         35:ff:be:73:c1:5b:a2:8b:0d:c2:f6:4b:6c:45:62:fd:53:ff:
         9b:cf:ab:77:78:a3:f0:d2:4d:50:ed:b6:bf:c2:cb:ef:8e:37:
         c9:7b:76:85:42:31:22:fe:33:e2:94:8c:f7:02:ea:63:45:9d:
         78:16:8a:81:ba:9a:51:0b:3d:91:99:5b:ad:24:ed:e7:e6:20:
         59:a6:32:fa:c8:75:79:7a:5b:08:78:84:33:dc:76:1f:5b:99:
         71:7b:f6:74:30:60:d9:ad:15:41:e2:9d:dc:9c:64:f2:cd:38:
         00:7e:66:94:52:56:37:3f:cc:cb:04:a2:ad:bf:0b:b8:52:88:
         8f:25:48:c7:9d:76:d7:98:c3:13:4c:70:e5:cd:a2:ce:67:f6:
         28:cb:d5:f8:9f:18:24:8b:c9:f1:ef:7d:13:b8:f8:7b:cb:81:
         84:f4:a3:f0:c3:2e:31:d8:a6:23:9c:5d:15:6e:a1:2b:1a:3d:
         33:18:b0:af:a6:4f:01:15:4c:89:5f:e2:26:60:7e:fc:f1:36:
         ac:b8:fe:8f:bc:43:0d:22:7e:57:94:1f:b3:4c:81:93:04:b3:
         40:79:8f:00:90:ae:a8:06:1d:b8:51:ad:03:bb:65:6c:2a:db:
         c0:16:79:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 04:25:57 2026 by rpki-client