Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d58dee13-ca69-3b67-9b10-ba6a3da87aa0.roa
File:                     d58dee13-ca69-3b67-9b10-ba6a3da87aa0.roa (raw, json)
Hash identifier:          RGS2yhHeCPGaWciskuA9T4QFqPp00gwX/Vyas1aMH3A=
Subject key identifier:   D5:B9:9D:87:CA:92:1E:AE:B8:14:55:34:11:3C:A6:32:47:A5:CD:01
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA183357B8D9636D58BC00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d58dee13-ca69-3b67-9b10-ba6a3da87aa0.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     18779
IP address blocks:        104.253.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:18:33:57:b8:d9:63:6d:58:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=b32fcef5-c9be-45f8-9353-6e5c6ed17a74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:69:3d:b1:fa:c8:e8:82:dc:7e:86:07:28:e8:
                    cf:50:6c:80:98:a0:80:f9:48:6a:f7:69:65:c7:19:
                    94:7c:8d:f1:ff:1d:a9:72:4e:2a:87:bd:6a:00:ea:
                    9f:95:dc:76:2d:97:8b:9c:30:45:b9:ef:16:0e:4e:
                    a5:e2:0c:85:c3:07:c1:08:9e:d6:ce:c9:f9:03:35:
                    5e:b7:2d:ce:4d:60:e4:2c:71:54:8e:89:7d:62:fe:
                    6c:69:31:c6:9d:22:d6:ab:df:55:76:63:ef:6c:d3:
                    06:b4:c6:2a:75:e5:59:9c:6c:6a:18:b4:63:9d:a6:
                    f8:66:d8:cb:8b:22:bb:57:a5:fc:78:6b:b9:6f:01:
                    79:02:05:61:72:2b:9b:f6:fa:fb:dc:e1:e4:ba:c8:
                    a2:72:f5:84:b7:c1:96:7a:be:fe:1e:51:a6:90:77:
                    05:77:ca:ab:70:53:72:07:66:2f:c9:c6:08:7e:fd:
                    0f:a9:1c:82:75:4c:12:c6:65:56:c2:67:27:8f:2e:
                    f4:f0:ed:a5:42:fe:c0:90:5c:b7:c1:91:66:61:66:
                    b6:2e:86:83:99:23:e4:fb:f5:11:d9:44:53:55:97:
                    e4:37:49:58:7f:92:ca:d0:9c:1f:3e:18:c6:6d:7c:
                    47:90:20:79:79:a7:27:38:b0:96:03:cc:a3:1e:92:
                    58:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B9:9D:87:CA:92:1E:AE:B8:14:55:34:11:3C:A6:32:47:A5:CD:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d58dee13-ca69-3b67-9b10-ba6a3da87aa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:10:90:71:ff:4a:4a:03:a8:c2:77:3a:d1:7f:67:6d:d4:c2:
         73:bf:27:cb:94:bb:57:62:64:1a:24:56:59:8c:40:7c:f6:50:
         b1:59:47:9c:ed:e2:95:48:e0:65:78:55:32:cf:bf:55:b7:1c:
         6e:ea:ab:e6:86:cf:9a:1a:fe:d3:fd:df:1f:47:5a:41:35:15:
         7c:5c:67:96:ac:bb:cf:da:e1:96:e3:ba:6f:6a:ba:7f:dc:1e:
         49:ca:ef:8e:0f:ac:f7:24:39:29:8c:65:67:f0:44:0e:0f:3d:
         82:19:b8:9a:11:38:06:9d:38:be:96:20:7c:bb:8d:82:5e:4a:
         a7:4b:66:64:e7:16:e2:78:ff:51:17:2e:da:3a:5a:8e:b7:20:
         be:b1:30:ba:80:dd:c3:86:b7:0f:ae:e1:09:3a:d1:ff:7a:dc:
         d1:1c:19:59:22:b5:48:0b:91:cd:46:64:3b:d7:4f:e2:ca:1e:
         12:74:f4:0d:67:c7:c7:21:01:15:b6:ce:7c:75:6c:f7:a3:84:
         dc:98:ee:b4:90:e9:98:18:7c:e1:2f:6a:03:e7:0e:9e:f8:6a:
         00:7b:fd:2e:83:3f:99:8c:77:1e:c9:b4:7c:4e:46:64:4b:0c:
         c3:30:7f:b1:a0:96:50:75:a6:aa:4b:a7:94:d2:b4:6e:93:6a:
         7b:ea:68:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:52:14 2026 by rpki-client