Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d86c80bf-c789-38f2-99b2-a2330a50ee3a.roa
File:                     d86c80bf-c789-38f2-99b2-a2330a50ee3a.roa (raw, json)
Hash identifier:          LDXcpUV+tbscKOMeF3PK6zHCSJ0wyvNyUbQDoY+ESGM=
Subject key identifier:   80:75:0B:3C:FB:CD:52:27:F2:41:F8:C3:97:DE:E3:CA:62:83:90:D5
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA11EE290054E0501DA1C0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d86c80bf-c789-38f2-99b2-a2330a50ee3a.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     396356
IP address blocks:        104.252.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:11:ee:29:00:54:e0:50:1d:a1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=1b8d6c51-d991-494e-9759-dfce72d3ca06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:05:d2:99:cf:1c:7c:b8:3c:3f:fd:fb:d6:6f:
                    dd:7b:2b:a8:66:83:ce:76:f4:f9:be:93:43:c1:1a:
                    4a:31:42:e3:68:8e:8f:a0:a0:10:8c:09:9f:82:9d:
                    95:47:dc:12:6d:93:07:2c:20:59:eb:d0:5f:29:1c:
                    29:db:77:db:22:0d:be:12:1a:69:fe:ad:30:8d:25:
                    6b:3c:d3:8d:9b:3b:bd:0a:76:74:a5:8e:4c:e2:0c:
                    2d:4a:09:45:c2:fd:72:31:75:6e:49:3d:cd:08:9c:
                    7c:61:a2:cc:29:29:ab:f1:75:04:aa:4f:96:50:4b:
                    f8:98:51:aa:c7:b7:64:9c:e1:7b:1a:a5:94:30:5e:
                    79:20:64:09:ff:e0:80:25:ca:5a:50:49:54:c9:ec:
                    83:b8:0a:6a:ab:d9:3b:15:a9:16:0c:57:dd:3f:a8:
                    ea:d5:ba:0f:e4:19:00:19:d6:dc:2d:36:ec:20:88:
                    78:fb:58:9a:10:ba:6b:50:34:9c:3b:29:fd:f7:7f:
                    da:ec:60:49:6b:50:8a:3a:ba:8d:eb:75:77:84:fc:
                    4b:48:91:90:d5:48:f4:56:f7:68:e4:56:5d:eb:1f:
                    e9:d7:aa:41:bd:39:3e:3a:e0:10:3e:96:c1:e5:a2:
                    34:a0:fe:bb:62:22:62:97:f7:12:68:6c:a2:b6:65:
                    55:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:75:0B:3C:FB:CD:52:27:F2:41:F8:C3:97:DE:E3:CA:62:83:90:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d86c80bf-c789-38f2-99b2-a2330a50ee3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:47:f2:d1:90:de:cf:ee:ae:77:96:c8:e4:62:aa:82:aa:97:
         6c:ae:f7:6e:50:3a:9b:e3:b8:68:3f:7b:73:3a:d6:82:63:7a:
         0c:03:f7:ef:0a:71:fc:f8:68:27:0e:08:a7:99:b0:d5:f0:46:
         e8:a0:02:b1:4d:c8:67:fb:c6:27:35:1b:a9:6b:3d:3b:31:37:
         0a:23:14:bc:7e:c1:52:73:8a:57:5a:49:a9:ab:f0:8d:e1:a0:
         b8:4e:ae:8d:f8:c6:c5:9c:2e:44:8e:5e:9e:e3:a7:bf:f9:db:
         55:e3:58:dd:e0:21:16:3c:ca:77:27:14:ea:c5:47:37:ac:78:
         11:42:c2:80:54:45:04:e3:63:63:d9:c7:66:ef:d9:67:e9:18:
         7c:e1:62:ae:61:6c:e1:b6:95:04:c5:ba:47:50:99:27:82:a9:
         c4:38:d8:ea:96:81:15:2f:d5:13:6b:3a:bb:7a:87:53:b2:be:
         3a:b2:1b:7a:bc:7f:fa:f9:fb:42:cd:2f:ac:43:07:8c:71:fe:
         49:c3:16:17:a5:29:ac:b8:68:39:8b:27:39:55:a6:f7:25:b7:
         90:b8:5b:04:9d:92:b3:12:42:e3:1b:5d:ce:c1:6d:3e:89:d2:
         d1:09:64:48:4f:fa:50:a5:fd:1b:ec:f4:e1:38:89:50:19:6b:
         70:0a:80:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:55:44 2026 by rpki-client