Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b74027eb-952f-3516-82e0-d4a4e7fbc861.roa
File:                     b74027eb-952f-3516-82e0-d4a4e7fbc861.roa (raw, json)
Hash identifier:          KPBWKx8PIm9qbx1qzHNr4t3Wu4LzQJ/9JoabbRzEbys=
Subject key identifier:   8D:63:55:27:26:B1:B4:16:B1:F9:26:F8:0F:3C:82:30:6A:AC:B3:47
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA0C393571A1CEA9107780
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b74027eb-952f-3516-82e0-d4a4e7fbc861.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     212238
IP address blocks:        104.252.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:0c:39:35:71:a1:ce:a9:10:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=0a97f298-6cd9-49e0-8e0f-b3b6c2867fc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6a:d9:d2:1b:cd:3d:b6:36:7d:da:8e:46:db:
                    16:4f:3f:09:8a:8d:80:42:d6:11:37:d8:6b:b1:1a:
                    63:e8:f2:55:3f:dd:3f:a8:7b:f4:26:00:2c:74:1d:
                    65:16:f4:4a:62:91:72:74:cb:d7:df:c1:83:76:a5:
                    d7:ce:8d:02:51:63:f0:93:09:8b:8c:de:11:14:b7:
                    ae:59:84:15:50:e2:ab:99:99:bf:aa:fb:18:cd:69:
                    69:87:e3:8b:58:03:4f:6e:ff:42:76:1d:48:b7:c5:
                    b5:70:53:82:23:28:1e:b5:a5:ae:ab:b1:42:8e:7a:
                    1e:a0:51:f0:7f:26:ac:e6:25:d6:69:10:9d:5a:59:
                    0c:3e:d0:eb:70:d1:2e:be:35:3a:ea:32:c8:1d:23:
                    42:35:3f:6b:c7:fa:a1:f7:de:d6:56:aa:c2:b6:f5:
                    34:f1:4c:4a:cc:3f:ce:85:28:9d:79:2f:ab:62:96:
                    5d:0c:92:5f:d4:22:d5:a4:c2:77:58:9b:a3:22:ef:
                    ed:1a:6a:de:13:d1:2d:87:cb:9b:4f:25:8e:69:5a:
                    a8:d9:7c:d0:6d:a7:2f:6e:18:54:88:78:fb:39:68:
                    71:00:e3:ce:2f:57:49:a7:b5:16:09:95:93:2f:2a:
                    b0:8a:6b:6e:f7:54:45:fc:95:f7:d1:69:33:96:d0:
                    d8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:63:55:27:26:B1:B4:16:B1:F9:26:F8:0F:3C:82:30:6A:AC:B3:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b74027eb-952f-3516-82e0-d4a4e7fbc861.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:24:04:b1:8b:9e:97:5d:53:75:ae:49:ed:58:de:0c:60:8b:
         c4:0a:60:db:a7:ff:d6:7f:69:4f:04:0b:ac:6b:10:56:e4:eb:
         8b:52:6b:31:13:95:8c:8f:44:34:2f:75:8e:16:88:97:26:49:
         ac:81:49:6e:6e:3f:11:e8:41:2c:4f:4b:e5:1e:c2:be:09:46:
         d4:8e:89:9a:6d:56:3c:4b:74:76:7a:07:38:fa:bc:87:20:49:
         74:2a:a8:73:5f:46:73:20:05:9c:6d:a9:cc:7b:83:6c:95:b3:
         82:1b:1a:fa:28:41:0c:53:98:40:00:df:02:1a:52:93:a8:60:
         ac:c7:44:d0:41:f6:87:ba:f3:e7:f0:63:5d:5d:0e:7d:b8:f4:
         7b:29:d2:90:33:c5:4b:31:73:e6:52:99:92:c9:b2:fd:bf:91:
         80:0b:32:b0:30:92:1e:90:f6:d1:cc:fa:f0:60:b6:d2:05:b0:
         2f:f1:a7:62:a6:4f:9c:ab:a4:8a:78:f0:ff:59:1c:54:d8:48:
         73:a4:bc:74:01:d8:51:d3:c7:71:aa:68:0e:9e:ae:bb:51:d6:
         14:c4:2c:d7:3c:53:96:6e:11:8d:62:b9:d5:27:12:7c:cc:38:
         7f:3a:f8:cc:fd:47:ea:43:40:5f:f6:18:f0:49:ea:37:2f:a9:
         3c:54:4e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:52:11 2026 by rpki-client