Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/bb2679ed-bcb5-3944-ae7b-2e2706ebc802.roa
File:                     bb2679ed-bcb5-3944-ae7b-2e2706ebc802.roa (raw, json)
Hash identifier:          NvaDEPjWpsLA451C9mHk9ukpT46YowPBm4HsCgAQLU0=
Subject key identifier:   BB:5E:96:92:78:35:80:A7:94:66:98:46:6A:91:96:D1:55:DA:FA:55
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA0D9173DADD6D84F5D480
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/bb2679ed-bcb5-3944-ae7b-2e2706ebc802.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     18779
IP address blocks:        104.252.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:0d:91:73:da:dd:6d:84:f5:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=20c1b14d-6f15-4697-88f7-517a859069d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7c:a8:e4:28:f5:8d:52:55:4a:01:b8:52:a4:
                    a2:52:3e:f0:2d:b3:e8:dd:25:72:ff:87:eb:3e:0f:
                    74:55:ac:fb:3c:5c:20:77:7f:6a:1e:24:b5:93:bf:
                    10:d4:85:3d:62:90:9a:ce:80:85:93:13:c8:12:9e:
                    73:84:ca:5f:b4:e3:b1:3c:9c:58:6b:85:4f:2d:43:
                    12:98:6e:2d:cb:52:0b:ee:36:d3:89:ad:56:d6:7e:
                    b0:b7:96:c9:7f:af:3b:ff:21:61:62:a1:cc:d8:0e:
                    93:25:30:c8:f0:bf:90:4b:f6:a2:40:57:18:ec:ae:
                    47:7e:81:a5:48:07:c0:78:e8:19:7a:f3:2f:0e:38:
                    3a:e9:e7:26:a4:46:3b:dc:87:f8:dd:cb:37:ec:e2:
                    54:e3:05:47:0c:03:f2:a7:6f:fa:f3:0a:20:1b:6f:
                    56:41:ae:9d:e8:81:84:c3:58:a9:77:ba:e8:51:42:
                    4b:d4:45:1e:8a:a5:ea:5b:21:6d:59:42:cc:c9:b5:
                    0e:ab:b2:cd:56:5e:22:7e:e3:d4:b4:cc:7f:74:e5:
                    11:e6:e7:ca:d3:b2:aa:f5:52:b7:cd:94:e1:66:71:
                    98:7a:bd:d0:8b:94:08:04:6f:52:52:09:03:9a:7b:
                    14:b0:59:7e:d2:16:c8:62:f8:e6:87:2a:f2:24:69:
                    fd:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:5E:96:92:78:35:80:A7:94:66:98:46:6A:91:96:D1:55:DA:FA:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/bb2679ed-bcb5-3944-ae7b-2e2706ebc802.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:8f:c5:d9:2d:e4:9a:43:8f:27:ac:44:0b:4e:3e:02:4f:ac:
         9e:6f:25:4d:89:55:59:48:56:23:79:c1:b1:21:b6:d2:fe:05:
         73:97:a8:0a:c3:ea:cc:b9:68:5d:5c:c6:96:91:f3:8d:23:19:
         35:83:bd:8a:a0:66:0c:3a:61:7a:74:f0:b7:a0:05:18:8d:6c:
         6a:4a:77:02:89:7d:69:02:cb:47:7e:85:a7:59:16:e3:f4:25:
         e9:7f:d9:11:04:58:64:ad:1e:60:e7:00:5d:ac:e6:3d:6b:2d:
         90:34:28:46:aa:1d:68:ae:58:5d:96:c0:6d:a6:bb:4a:f1:d2:
         f3:04:f5:46:5b:f5:94:57:92:d4:07:2d:59:0d:da:e2:0d:f1:
         d9:6b:58:1c:19:f4:7e:6a:14:af:b6:96:d0:63:81:0e:f5:aa:
         43:71:2c:d4:29:3b:c6:17:46:b2:96:ef:95:ae:4c:e4:26:c3:
         c1:2e:56:fc:e8:33:a2:9a:8b:44:8b:63:54:fc:e9:35:92:95:
         3e:87:03:ad:51:d7:6d:9e:ec:11:7e:5e:ed:54:86:43:9b:84:
         f8:51:23:75:b5:41:45:50:5a:ce:d5:7f:ab:61:5c:fd:c7:53:
         42:a1:6e:8b:14:cd:6a:7a:05:4a:96:57:d3:5b:84:a5:dd:ff:
         41:39:f5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:51:56 2026 by rpki-client