Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/c9f59bc8-1e88-3d94-ac3e-1e7e4781392f.roa
File:                     c9f59bc8-1e88-3d94-ac3e-1e7e4781392f.roa (raw, json)
Hash identifier:          0y84IWyctpWh2cScdtDhLjNAwB3jBkN3NOcwja4hdEU=
Subject key identifier:   C8:70:21:07:A7:0D:64:53:FD:B9:7B:04:22:50:C0:50:6E:A5:E4:0E
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA11AD267D85C8BCADBE00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/c9f59bc8-1e88-3d94-ac3e-1e7e4781392f.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     396356
IP address blocks:        104.252.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:11:ad:26:7d:85:c8:bc:ad:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=b26b606d-bb91-4fef-8980-3d439450fac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5f:6c:85:13:08:a4:28:e9:19:c3:66:94:13:
                    d1:8d:e5:a7:29:14:61:6c:dd:c9:a4:97:f5:b9:37:
                    e9:d3:7f:9c:82:44:4d:f7:eb:64:a3:7d:a3:96:56:
                    b0:9d:3e:e8:1d:01:d5:09:fd:4a:55:22:a0:06:39:
                    78:71:dc:bf:64:a8:c8:0f:61:bd:89:03:2c:af:33:
                    dc:97:d7:90:5a:ff:7d:e6:c7:f1:45:74:72:bf:28:
                    80:06:42:b6:75:12:a1:59:13:1e:82:cd:77:c5:3a:
                    6e:28:6e:26:3a:1e:c2:53:d7:e7:5a:3c:03:43:da:
                    97:71:bb:53:72:c8:92:6f:e4:ca:3f:a5:39:63:7f:
                    a6:41:d1:82:34:60:c3:19:73:56:8b:58:24:53:1a:
                    bd:b1:5d:c7:df:c9:84:81:3d:d5:5c:95:bc:41:19:
                    b8:b2:e9:ab:a8:71:f5:61:3d:3c:dc:a3:d9:93:f5:
                    f8:98:60:b8:ad:5f:0e:56:cd:d1:67:b6:3f:73:df:
                    62:6d:90:ee:22:a4:bf:d8:a7:b5:b5:2e:6e:82:f5:
                    ad:c7:f9:00:45:a1:50:73:ba:79:34:77:78:47:ea:
                    6e:29:68:c1:fd:65:03:23:99:e6:52:6c:06:0a:b3:
                    6e:7b:99:4b:e0:37:6b:49:49:19:69:90:38:a1:b7:
                    b2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:70:21:07:A7:0D:64:53:FD:B9:7B:04:22:50:C0:50:6E:A5:E4:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/c9f59bc8-1e88-3d94-ac3e-1e7e4781392f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:38:2c:7c:41:b4:12:cb:32:2f:a5:0c:1a:08:ba:c1:42:2d:
         e6:5f:74:63:c7:1c:dd:5f:d3:fa:d8:5e:bb:65:19:26:1b:b6:
         31:ae:ca:34:9c:af:f6:9f:05:96:51:b2:5b:83:fe:23:87:62:
         92:83:1a:9c:ff:96:94:56:a8:3b:f3:d0:18:dd:9f:bf:dd:f5:
         9a:cf:b5:46:32:3f:73:91:13:ab:b8:42:9d:14:b9:a2:a1:a9:
         d8:0b:32:19:e7:29:2a:90:7c:57:f0:33:e7:ed:f8:c7:90:fb:
         b2:24:4a:c4:0e:70:01:4d:97:e2:a7:6b:ec:7d:a4:bd:45:9a:
         54:bb:95:75:f2:ef:4e:6f:16:f6:de:d7:a7:de:c7:c6:da:e0:
         a7:6c:52:06:8b:92:02:4f:8f:d0:23:44:68:7b:b0:a7:c2:e9:
         ad:c2:ae:70:87:4c:9d:82:8a:bc:55:99:ba:b4:21:6e:4e:30:
         72:c6:13:4d:ae:ee:06:fc:bb:8f:74:9e:f3:8f:16:d7:5d:3c:
         83:47:42:2a:0d:88:25:0e:41:c8:fa:8c:b8:bb:92:e1:bb:fd:
         73:6a:d7:08:e6:ca:4b:7d:11:17:88:5a:98:29:d5:0a:59:48:
         b3:68:99:2b:ee:84:af:67:61:80:84:b9:37:ed:2d:e1:33:ea:
         ad:a4:fe:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5NuhGtJn2FyLytvgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDYyNjIxMDAxMVoXDTI2MDkyNDIxMDAxMVowLzEtMCsGA1UEAxMk
YjI2YjYwNmQtYmI5MS00ZmVmLTg5ODAtM2Q0Mzk0NTBmYWMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqF9shRMIpCjpGcNmlBPRjeWnKRRhbN3JpJf1
uTfp03+cgkRN9+tko32jllawnT7oHQHVCf1KVSKgBjl4cdy/ZKjID2G9iQMsrzPc
l9eQWv995sfxRXRyvyiABkK2dRKhWRMegs13xTpuKG4mOh7CU9fnWjwDQ9qXcbtT
csiSb+TKP6U5Y3+mQdGCNGDDGXNWi1gkUxq9sV3H38mEgT3VXJW8QRm4sumrqHH1
YT083KPZk/X4mGC4rV8OVs3RZ7Y/c99ibZDuIqS/2Ke1tS5ugvWtx/kARaFQc7p5
NHd4R+puKWjB/WUDI5nmUmwGCrNue5lL4DdrSUkZaZA4obeypQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMhwIQenDWRT/bl7BCJQwFBupeQOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvYzlmNTliYzgtMWU4OC0z
ZDk0LWFjM2UtMWU3ZTQ3ODEzOTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPz3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHA4LHxBtBLLMi+lDBoIusFCLeZfdGPHHN1f0/rYXrtlGSYbtjGuyjSc
r/afBZZRsluD/iOHYpKDGpz/lpRWqDvz0Bjdn7/d9ZrPtUYyP3ORE6u4Qp0UuaKh
qdgLMhnnKSqQfFfwM+ft+MeQ+7IkSsQOcAFNl+Kna+x9pL1FmlS7lXXy705vFvbe
16fex8ba4KdsUgaLkgJPj9AjRGh7sKfC6a3CrnCHTJ2CirxVmbq0IW5OMHLGE02u
7gb8u490nvOPFtddPINHQioNiCUOQcj6jLi7kuG7/XNq1wjmykt9EReIWpgp1QpZ
SLNomSvuhK9nYYCEuTftLeEz6q2k/go=
-----END CERTIFICATE-----
Generated at Tue Jul 7 11:53:31 2026 by rpki-client