Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/ab46c7d7-acad-3c20-845c-fe13d6fe7f60.roa
File:                     ab46c7d7-acad-3c20-845c-fe13d6fe7f60.roa (raw, json)
Hash identifier:          yfk4+ARWVvbhzqRUzcxsMNRF5g+//0rxCPsjQFC0A38=
Subject key identifier:   68:74:E2:C1:FE:10:76:63:D9:B0:0B:FD:85:BF:E4:DB:A5:B3:AF:DB
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584F51D2C44307DEBCC644FCB4C0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/ab46c7d7-acad-3c20-845c-fe13d6fe7f60.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     3561
IP address blocks:        104.252.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:c4:43:07:de:bc:c6:44:fc:b4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=be693730-2743-491d-8895-cd213a497929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7f:c0:f1:a8:04:d3:06:23:89:e2:8a:51:9b:
                    c3:2e:7f:8f:f1:4d:4c:ed:37:2f:a3:19:5d:ba:9b:
                    27:12:5e:3c:b2:ec:e5:09:21:05:b7:69:1e:72:d7:
                    f2:f6:18:85:bd:ea:e7:82:99:02:21:e2:d6:95:43:
                    50:8f:5b:fa:2a:d0:b2:b3:12:a1:6b:5d:66:70:e6:
                    8e:95:b6:8c:4d:a4:74:0f:4a:7a:81:27:25:4d:b4:
                    e5:88:6e:47:3b:8e:3b:a5:d6:ea:45:b6:37:e5:4a:
                    01:db:4a:18:46:6f:ba:31:ec:cb:76:57:92:47:4a:
                    fb:a8:42:c9:02:81:03:80:e5:9e:d3:3a:e2:d8:59:
                    bb:cd:6b:c2:a3:32:b6:46:1a:19:b4:92:4c:4f:7f:
                    a6:06:a9:ef:f5:45:88:1c:e1:fd:aa:62:8b:bc:13:
                    c7:0d:a3:da:94:97:1a:63:52:00:10:e5:bb:3f:43:
                    4e:ce:7f:d1:75:62:be:03:d0:ad:3b:46:ee:0a:22:
                    37:87:09:e0:b7:93:15:6e:e5:79:a7:da:29:c2:b7:
                    2c:4d:1c:d4:d6:38:46:12:b2:61:15:89:b3:72:cf:
                    37:d9:84:79:05:c5:c9:06:5d:4a:40:f8:f8:5d:55:
                    14:85:f5:ab:0b:17:f3:84:8e:4c:7f:79:cc:34:a1:
                    cb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:74:E2:C1:FE:10:76:63:D9:B0:0B:FD:85:BF:E4:DB:A5:B3:AF:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/ab46c7d7-acad-3c20-845c-fe13d6fe7f60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:e7:42:70:a6:96:15:37:7b:bf:ef:8c:44:b0:b6:76:93:71:
         36:2d:98:b4:95:e6:58:b2:dc:1e:b7:68:8b:89:7a:00:14:78:
         cd:38:c7:20:2c:41:c1:cc:ca:8e:c5:de:6f:65:68:cf:d1:97:
         47:55:bd:ee:37:08:b3:15:79:7e:7b:44:83:e3:fb:14:f6:78:
         be:58:e6:76:75:c3:0c:09:6c:7b:dd:03:53:ee:11:1a:11:a5:
         dc:82:d3:8f:3d:8b:9d:dc:10:96:2c:dd:ac:9b:42:1d:73:a3:
         a7:c0:70:3f:84:06:44:13:2c:2a:7c:6f:10:93:83:9f:b0:43:
         fd:4c:b8:1e:14:56:0c:d9:4e:9f:32:3d:da:8c:ba:09:23:5c:
         b3:00:c3:66:3e:58:7c:08:4f:41:ac:a6:30:83:38:39:42:0b:
         86:0c:f1:16:ba:e9:54:f8:0d:6f:21:ec:16:15:32:5d:77:20:
         62:af:b7:01:ec:12:98:d8:eb:bf:2b:75:7a:d6:99:e0:c7:05:
         e9:3c:3a:cf:ab:76:25:a1:1b:2a:c5:6d:e4:33:38:d5:d9:a1:
         02:a6:8c:1e:00:03:70:23:3b:d7:7e:c2:3b:a4:b9:18:6d:a9:
         6a:d9:41:18:3e:df:07:08:d5:bc:04:ad:1f:94:52:0e:37:9f:
         1b:66:bd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 16:09:31 2026 by rpki-client