Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d2c72623-c1c9-3828-817c-1c0b0bcfc439.roa
File:                     d2c72623-c1c9-3828-817c-1c0b0bcfc439.roa (raw, json)
Hash identifier:          rf/8+ynPI35pZkRjZOpJbVxYqpzBAek7dz5R7KXARME=
Subject key identifier:   5D:A1:0C:B3:CC:C0:38:44:0E:C4:2A:7F:92:FA:3A:40:CB:ED:7C:49
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA0D84FC9AE7F5E6222300
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d2c72623-c1c9-3828-817c-1c0b0bcfc439.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     56971
IP address blocks:        104.252.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:0d:84:fc:9a:e7:f5:e6:22:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=918c2898-99c9-4077-81fe-decb109f8b5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e5:8a:bd:80:74:c3:8f:d2:16:96:83:45:d5:
                    8d:89:46:e6:90:dd:77:36:bd:1c:6b:84:dd:59:92:
                    d6:5a:ae:75:a0:a3:0f:7a:55:24:d4:78:4f:03:fc:
                    d4:ef:cb:d4:fd:78:7b:ad:d2:8f:ef:ee:49:a1:09:
                    09:37:58:23:aa:99:92:a7:ba:cc:ba:86:78:09:e4:
                    f2:0d:b5:8e:c8:79:23:cd:4d:72:83:8e:d9:50:d9:
                    1c:1b:b3:9d:f5:e5:2b:94:50:ff:8e:b4:46:4b:51:
                    1f:7e:ee:de:a5:d3:5f:55:db:dd:16:62:b0:50:d0:
                    fd:33:07:ee:c6:31:e5:4d:01:09:f4:06:42:c0:02:
                    e4:f1:73:42:ee:cd:12:85:56:33:f0:a5:12:d8:66:
                    4d:4b:9f:c5:c7:97:e7:f1:a9:28:17:74:19:a6:0b:
                    2b:2c:55:e9:28:20:cc:8d:e4:c1:f3:f1:a9:b5:99:
                    c2:65:27:36:ec:ee:d6:5f:a2:59:a3:a2:8c:c2:5b:
                    ab:15:83:30:40:00:70:1b:d5:98:f9:f9:db:e0:12:
                    b2:99:7a:09:a2:f9:87:e5:19:6c:0a:97:86:b5:47:
                    36:c3:11:ad:97:a4:3a:cd:ca:26:da:f6:ae:85:a8:
                    0d:05:c9:3a:33:90:a6:6e:9f:17:3a:83:de:23:c8:
                    4f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A1:0C:B3:CC:C0:38:44:0E:C4:2A:7F:92:FA:3A:40:CB:ED:7C:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d2c72623-c1c9-3828-817c-1c0b0bcfc439.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:4a:1c:72:54:9f:ea:9a:63:d1:42:68:62:f6:db:68:f9:c0:
         38:05:36:fe:83:e0:6b:95:8c:7a:bf:84:aa:11:fe:53:bf:4c:
         4a:9d:4a:e7:b0:60:1c:e0:c6:a1:19:c0:86:88:d2:bf:06:bd:
         97:e1:f3:5c:eb:28:d4:44:38:5c:2a:8b:35:41:9f:be:5e:eb:
         72:0c:44:32:f5:bf:49:93:b6:92:37:3f:7c:14:ad:14:1d:6c:
         4e:42:6d:69:1a:6e:61:f1:7b:bd:61:9b:91:63:8a:69:f2:8e:
         c5:f9:f0:46:88:f5:7a:fa:e1:75:d9:d0:6b:bc:b6:41:c2:ec:
         73:70:4d:a4:b4:3c:10:14:7d:e6:30:12:e8:7e:3a:29:ff:2d:
         18:80:bd:e2:66:e2:02:4d:d1:57:23:d5:e4:38:ab:61:ee:b0:
         aa:57:2d:23:b0:94:27:52:ee:c6:c2:79:04:a2:55:86:9e:60:
         d0:f0:56:34:b0:aa:e1:3b:97:e1:54:ad:f1:38:a6:d0:41:1d:
         2c:c7:e0:86:97:bf:f7:3c:64:8f:55:1b:9b:e5:c2:3e:3c:31:
         3f:91:c6:6a:c3:fb:a9:18:b4:68:4e:30:5f:8f:98:4a:d0:b7:
         d8:97:7a:29:ea:af:7e:0f:6f:ef:54:16:d8:2b:11:fc:74:14:
         d2:e0:cd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:55:34 2026 by rpki-client