Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/c319e918-59e4-33c5-b81b-b5cd36d57a9e.roa
File:                     c319e918-59e4-33c5-b81b-b5cd36d57a9e.roa (raw, json)
Hash identifier:          P1anLe+nx2Q15tUNrei9VE7GTr0IAzqFCUboo2qpUqA=
Subject key identifier:   8E:26:D1:13:30:93:A1:87:67:75:B7:2C:42:C7:71:D1:D4:28:26:DE
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA13D2410C3C46DAB0C400
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/c319e918-59e4-33c5-b81b-b5cd36d57a9e.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     8881
IP address blocks:        104.253.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:13:d2:41:0c:3c:46:da:b0:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=d6d0e605-5847-4c19-b755-d9528ea5e5eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1a:4c:b1:5e:e7:3d:9a:31:8e:41:24:b8:ba:
                    8c:ac:07:15:cb:03:a3:09:de:52:1c:f1:d1:aa:18:
                    a8:e6:e7:c6:9b:7d:7c:47:56:e4:72:56:45:7b:62:
                    32:9d:a7:0f:9d:ce:90:e7:56:72:d2:1b:6a:e2:33:
                    56:de:1d:ee:0c:73:b8:6d:62:fc:30:92:c7:b7:50:
                    ea:fb:03:cd:b2:f4:98:f2:50:4a:3d:05:34:4c:80:
                    88:a8:d7:c3:da:86:da:8d:4c:72:e6:83:1d:fc:ff:
                    49:33:ce:e1:ea:4e:0e:05:9a:72:ad:c4:1d:65:ea:
                    6f:c1:3c:cc:7f:d2:29:9c:70:60:1c:0f:ba:f2:1a:
                    77:28:39:fc:30:49:19:af:dc:68:c4:4c:3b:3c:c3:
                    a7:7d:84:0e:45:8b:21:f5:cf:24:94:79:4a:6c:0a:
                    60:2b:32:bb:02:49:73:2b:c9:af:96:82:60:c6:46:
                    27:d1:d7:0a:d1:9d:d9:93:b0:d6:d4:6e:c3:2c:20:
                    bc:1d:69:39:0b:4a:6f:e2:ed:94:cc:2d:4d:6c:a0:
                    e6:f9:53:57:ae:f6:4d:fc:a9:37:11:f1:6d:3e:fd:
                    c5:9e:9d:d4:3b:79:84:00:17:53:cd:06:28:bf:a3:
                    55:37:17:f7:1b:fc:c9:40:6a:57:8e:6a:c5:45:d4:
                    39:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:26:D1:13:30:93:A1:87:67:75:B7:2C:42:C7:71:D1:D4:28:26:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/c319e918-59e4-33c5-b81b-b5cd36d57a9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:19:8b:e1:34:cf:2c:8d:9a:9a:01:5d:b7:50:22:e2:91:d8:
         1d:9f:d1:bf:51:6b:42:a0:4d:c1:04:3e:fc:2c:2e:9e:df:02:
         0c:ed:3f:18:53:67:18:31:69:47:c9:11:d3:61:93:59:7f:31:
         9a:12:0c:66:f4:e8:e5:af:90:64:2b:d5:2d:29:d1:ca:71:0e:
         9e:94:ec:4c:c8:35:b8:63:1f:aa:db:6a:93:a9:22:a8:b1:18:
         7e:99:0f:9c:b1:ff:13:61:5a:5d:74:b5:91:ed:70:88:6c:2a:
         25:8d:e0:62:7e:00:32:85:ce:57:a3:d0:8e:a8:90:e9:3a:08:
         b4:3a:14:cd:d7:ed:d2:38:a6:91:10:02:da:d1:da:50:c6:8b:
         8c:11:fb:30:6d:bb:aa:3b:88:37:3a:6b:da:1c:37:e0:2c:57:
         2a:b6:28:e8:9b:70:52:b6:4f:c3:8c:9c:09:30:07:64:b3:b4:
         4d:3f:8b:1d:2e:7b:e9:9d:e1:9e:80:ab:e1:c7:87:af:79:fd:
         52:c0:cb:f8:0e:c8:a2:4e:8e:b6:f8:9e:a0:54:1e:d7:1f:d5:
         2e:e3:86:6e:d3:93:73:a1:16:27:2b:d6:7b:8e:b8:d6:60:62:
         68:1a:93:0c:94:9e:74:49:b3:ce:4b:63:6c:85:e9:18:17:d5:
         1b:5a:0c:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5NuhPSQQw8RtqwxAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDYyNjIxMDAxMVoXDTI2MDkyNDIxMDAxMVowLzEtMCsGA1UEAxMk
ZDZkMGU2MDUtNTg0Ny00YzE5LWI3NTUtZDk1MjhlYTVlNWViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxpMsV7nPZoxjkEkuLqMrAcVywOjCd5SHPHR
qhio5ufGm318R1bkclZFe2IynacPnc6Q51Zy0htq4jNW3h3uDHO4bWL8MJLHt1Dq
+wPNsvSY8lBKPQU0TICIqNfD2obajUxy5oMd/P9JM87h6k4OBZpyrcQdZepvwTzM
f9IpnHBgHA+68hp3KDn8MEkZr9xoxEw7PMOnfYQORYsh9c8klHlKbApgKzK7Aklz
K8mvloJgxkYn0dcK0Z3Zk7DW1G7DLCC8HWk5C0pv4u2UzC1NbKDm+VNXrvZN/Kk3
EfFtPv3Fnp3UO3mEABdTzQYov6NVNxf3G/zJQGpXjmrFRdQ5nQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI4m0RMwk6GHZ3W3LELHcdHUKCbeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvYzMxOWU5MTgtNTllNC0z
M2M1LWI4MWItYjVjZDM2ZDU3YTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP0/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA8Zi+E0zyyNmpoBXbdQIuKR2B2f0b9Ra0KgTcEEPvwsLp7fAgztPxhT
ZxgxaUfJEdNhk1l/MZoSDGb06OWvkGQr1S0p0cpxDp6U7EzINbhjH6rbapOpIqix
GH6ZD5yx/xNhWl10tZHtcIhsKiWN4GJ+ADKFzlej0I6okOk6CLQ6FM3X7dI4ppEQ
AtrR2lDGi4wR+zBtu6o7iDc6a9ocN+AsVyq2KOibcFK2T8OMnAkwB2SztE0/ix0u
e+md4Z6Aq+HHh695/VLAy/gOyKJOjrb4nqBUHtcf1S7jhm7Tk3OhFicr1nuOuNZg
YmgakwyUnnRJs85LY2yF6RgX1RtaDB0=
-----END CERTIFICATE-----
Generated at Tue Jul 7 11:53:27 2026 by rpki-client