Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d44120ba-151c-32e9-b0a0-455e5094054c.roa
File:                     d44120ba-151c-32e9-b0a0-455e5094054c.roa (raw, json)
Hash identifier:          aBnoHnrvDi+Rl0Yb+j98OOHBbpFRfAPN+y2eMZ4OULo=
Subject key identifier:   E0:CB:FF:36:B1:12:D1:1C:EC:05:55:3E:30:59:0B:95:2B:6C:CB:D9
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA10B3C835B92123C8DD80
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d44120ba-151c-32e9-b0a0-455e5094054c.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     396356
IP address blocks:        104.252.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:10:b3:c8:35:b9:21:23:c8:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=6cf9c800-264d-4c1e-a3c5-6277b3fb30f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:84:f7:1e:c3:bf:a2:6a:95:5e:58:4c:a4:62:
                    4b:93:2a:79:83:99:e9:50:e7:b2:b2:f0:70:1f:2a:
                    9c:3a:c2:de:4e:2b:aa:bd:75:fb:ec:be:e3:08:91:
                    bd:83:58:ca:7f:c5:21:39:26:5e:29:ac:43:91:b8:
                    8e:d0:2b:73:16:52:23:d7:7d:d0:03:8a:5f:cb:f4:
                    f3:5c:cb:c8:14:f9:54:42:49:85:3c:ff:bf:1f:3d:
                    94:7a:8c:74:e5:87:41:19:c6:2b:a0:06:c6:38:96:
                    23:cc:71:05:ec:43:60:36:60:8f:c3:44:d3:e1:34:
                    8b:2b:5d:f3:ed:0a:7e:ce:0f:4f:2e:43:ff:c9:a0:
                    80:44:64:8b:c9:68:c5:8a:eb:df:6d:20:7d:3f:c8:
                    f5:f9:80:2f:fe:85:c7:9a:5c:ae:41:13:2f:7a:88:
                    b6:0f:d7:43:6c:63:26:3f:3f:17:9b:1f:89:e1:74:
                    1d:b0:1e:41:20:b1:f8:14:b0:0d:30:f8:83:ee:52:
                    79:e5:06:05:0f:f2:bd:d4:9f:5a:b1:d1:2e:ff:e3:
                    82:73:66:88:63:a1:bb:7c:8b:54:aa:67:ce:43:2d:
                    7f:7f:82:1a:e2:58:d8:39:77:bf:d7:c5:d3:4e:74:
                    ef:f1:74:2d:1b:8c:66:68:30:34:41:80:45:ff:a0:
                    22:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:CB:FF:36:B1:12:D1:1C:EC:05:55:3E:30:59:0B:95:2B:6C:CB:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d44120ba-151c-32e9-b0a0-455e5094054c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:30:6a:1b:b7:06:fc:83:95:28:b0:0a:ab:76:88:5b:2c:7a:
         cb:fa:a2:f6:78:6f:20:20:86:9b:73:fa:f4:b3:d5:01:12:fc:
         91:02:50:26:74:8a:bf:05:78:a4:14:df:00:5a:cd:92:0d:40:
         b8:85:47:dd:75:f9:e0:c3:31:27:08:9b:aa:7b:20:cd:45:64:
         e6:a7:fe:02:58:4d:59:65:5e:ba:65:2c:8c:3f:dc:d2:06:ce:
         08:ec:d3:2c:44:c9:55:88:6a:96:9f:1f:06:f8:40:c0:63:5c:
         34:d8:ec:ce:dc:0e:b2:1d:17:80:21:30:3f:30:1d:0c:b5:d7:
         8f:8c:de:59:24:ef:00:31:76:a3:c6:78:cf:4f:8a:7b:14:4e:
         a0:cd:4c:d1:04:af:e6:2c:58:34:e1:16:11:e0:34:dc:96:7c:
         78:66:f3:87:ed:86:f5:b9:31:6b:e5:9f:68:fa:95:43:37:96:
         56:2e:e3:33:46:63:a3:c1:14:90:47:11:0f:37:6f:dd:83:5c:
         be:dc:81:ff:7c:d2:4a:8b:bb:d7:79:49:6f:dc:a6:57:5d:31:
         d6:31:2d:0a:8a:a2:6f:e0:c6:f5:79:8d:0e:52:5c:50:73:ac:
         f7:86:be:80:12:54:ea:d4:b1:62:d6:5c:f1:24:39:33:62:59:
         20:97:61:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:55:34 2026 by rpki-client