Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/aad3fb7b-2ff9-35ab-9656-d835578fbae4.roa
File:                     aad3fb7b-2ff9-35ab-9656-d835578fbae4.roa (raw, json)
Hash identifier:          Hwwuy7BaOiSmTmlAOU/MmKEe8bDZOnmAD1vModoG/Ww=
Subject key identifier:   59:4E:82:A8:33:85:BA:ED:67:E5:E8:3C:26:C0:80:1C:D5:14:7E:8D
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA12EFA777E9D98EAEAA50
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/aad3fb7b-2ff9-35ab-9656-d835578fbae4.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     9009
IP address blocks:        104.253.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:12:ef:a7:77:e9:d9:8e:ae:aa:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=a6a66f0f-a413-4345-bade-5615e75758d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:77:be:99:7e:f6:66:27:5f:54:c2:b6:6a:38:
                    11:47:b3:71:28:de:55:3a:98:e7:90:be:f8:13:60:
                    97:07:86:2e:8b:15:fa:29:81:1a:ee:d0:98:8d:80:
                    96:ed:96:9a:25:9e:ce:12:41:70:a9:86:d8:0a:60:
                    f8:09:33:62:73:8e:52:56:b0:44:dc:6b:69:95:b3:
                    3c:69:c9:99:6e:8f:2e:b5:a2:c8:fa:bb:e0:40:3f:
                    e4:dd:16:bf:a5:24:a5:0e:4e:82:4e:f4:d4:ec:ca:
                    f9:f8:94:4a:1d:ba:0e:ea:f0:25:24:4a:17:f5:d6:
                    35:3f:61:bc:29:ef:2e:52:bb:8b:87:7a:24:fd:93:
                    6b:f5:3d:f0:ba:20:32:30:10:32:a8:38:83:57:b8:
                    d4:a1:a0:66:fa:4d:d5:02:0c:ce:db:62:c4:f4:30:
                    34:5a:f7:6b:6e:a9:94:0f:70:c2:01:0d:d6:4f:4f:
                    a2:9f:69:c0:8a:e5:bd:e8:fc:4f:4e:3b:1e:55:61:
                    9f:32:87:23:3e:29:4c:fb:14:82:68:5b:69:28:77:
                    11:6e:14:50:0c:8a:8f:a0:35:6b:52:13:be:7e:0f:
                    36:c3:9a:4e:1d:e5:81:88:39:bd:ef:69:fe:a2:26:
                    f0:00:23:1a:fc:f0:7e:9d:2c:5e:d1:0a:e1:6b:91:
                    04:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4E:82:A8:33:85:BA:ED:67:E5:E8:3C:26:C0:80:1C:D5:14:7E:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/aad3fb7b-2ff9-35ab-9656-d835578fbae4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:aa:39:1f:9c:8d:c0:fb:c2:fe:61:b5:c5:d0:d0:08:fe:17:
         c8:be:e9:d8:6c:48:d0:77:8b:98:46:2d:76:cd:be:e1:42:45:
         b3:02:42:52:ea:57:1b:14:32:b5:5f:8a:30:59:62:94:cb:d9:
         42:80:90:9d:c7:fc:ac:94:67:91:bd:32:77:73:d0:af:2a:71:
         b3:6c:52:c7:1f:aa:4c:43:48:0a:72:11:f9:7a:a2:32:1a:5c:
         cc:81:64:35:6c:67:61:da:de:87:71:fe:23:11:ae:52:81:75:
         cf:8f:81:6e:68:81:22:56:f2:4c:a1:9b:88:df:fc:9d:16:8e:
         4a:63:6f:ee:d5:30:1c:f0:36:6f:f9:bd:63:39:d8:53:9d:b9:
         47:22:d8:08:c4:a7:51:5b:a5:32:d6:89:d9:2e:f8:7f:b8:82:
         9d:39:01:7c:60:34:a9:45:d2:ea:21:e0:79:e4:fb:5d:35:03:
         6b:b0:ad:af:a6:86:45:19:a6:33:18:71:44:1e:0c:75:e2:a2:
         52:62:6a:97:26:cc:e8:f3:bf:b0:ac:5c:3a:bf:e5:7a:ad:de:
         8e:09:a1:c5:3d:12:cc:73:c5:a7:03:63:a3:1f:b0:45:5c:bb:
         f7:8a:30:cc:6a:9c:40:80:d5:55:00:d0:73:d0:24:e6:27:e6:
         36:08:46:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:52:14 2026 by rpki-client