Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/dde36f0e-66ba-380e-8b75-a75d2704d027.roa
File:                     dde36f0e-66ba-380e-8b75-a75d2704d027.roa (raw, json)
Hash identifier:          PZSonfBsmY3Nywmy/eBO7KiOsp6a6R/VL6tQwBpVi5c=
Subject key identifier:   B9:62:87:7C:B1:1C:49:44:72:C6:AD:03:21:50:FB:09:65:C5:84:86
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA12C19B0252EDEDDD4A00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/dde36f0e-66ba-380e-8b75-a75d2704d027.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     9009
IP address blocks:        104.253.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:12:c1:9b:02:52:ed:ed:dd:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=aa6fc60f-0e3d-4929-8697-3c82b9724dfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0a:f8:b3:4b:e1:d8:2b:c5:cc:b5:04:94:a8:
                    f8:5b:7e:f4:82:ff:e6:92:9a:cb:cd:56:27:ad:c7:
                    46:d1:0f:cf:77:db:17:a2:78:78:5f:43:f6:26:11:
                    ab:6a:6d:c9:f1:af:18:a7:11:c0:c4:24:b8:03:0a:
                    c5:5e:b1:a2:86:6b:c9:53:9d:f2:18:b4:90:79:c2:
                    38:ca:e1:98:b9:e5:84:32:73:81:d9:40:ff:6b:a1:
                    32:54:46:fa:65:49:47:45:0b:03:74:92:77:a0:1d:
                    5b:29:54:df:b3:81:d1:b3:d4:3f:13:c2:b6:c2:2e:
                    f7:61:a1:2c:7d:e2:a2:91:d8:b4:3a:b1:72:b3:12:
                    8d:1c:8e:52:49:be:fa:9e:0a:3b:7c:c5:7e:d4:4f:
                    28:15:90:67:a3:fc:ae:c5:61:7c:3e:71:17:77:8e:
                    9c:62:5c:2c:fa:db:4c:70:24:56:d3:7c:c3:a3:23:
                    3f:fb:aa:16:dc:0f:3c:9b:ef:da:d7:20:fc:d3:0a:
                    c0:16:92:db:d7:f0:64:fd:fa:08:9c:09:e0:3b:af:
                    51:47:eb:d0:ad:99:de:36:c9:e8:7f:79:41:c0:3b:
                    fe:d7:bb:15:71:74:bf:ed:4c:81:9e:e6:18:3f:26:
                    60:2a:b9:f2:8e:95:2f:c0:bb:b0:f1:b9:4b:b6:71:
                    4e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:62:87:7C:B1:1C:49:44:72:C6:AD:03:21:50:FB:09:65:C5:84:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/dde36f0e-66ba-380e-8b75-a75d2704d027.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:9d:c1:24:f6:d4:5f:86:6c:9f:3e:04:86:2e:95:2a:52:37:
         b9:6d:b2:ba:9f:37:92:d6:3d:46:06:b7:94:25:ab:cb:1c:57:
         60:3a:59:ab:e9:1e:fd:bb:a7:85:0b:cf:0a:7a:08:d2:60:f8:
         11:07:a9:71:04:dd:fa:a0:6a:b6:48:3d:c9:5f:91:aa:99:eb:
         eb:b9:ba:97:ee:0e:fd:fc:92:3a:65:97:b8:0b:16:ae:79:4f:
         d2:ba:f4:98:40:90:b4:8c:9c:39:ed:1e:9d:b3:9a:3a:df:7f:
         f8:62:6f:08:86:84:18:d2:8c:5c:c3:dd:db:47:d3:48:9d:9b:
         97:19:67:a8:43:d0:dd:49:3c:2a:fb:3d:51:00:41:a9:f3:52:
         67:33:7c:ae:fd:87:32:e0:35:67:5c:ef:26:39:ed:9c:2f:8e:
         3f:10:13:e4:a2:b1:cd:7a:60:e9:b2:67:b9:63:61:c9:fa:96:
         ad:52:51:b2:d1:58:0f:8d:e9:0f:f7:77:ca:19:2a:44:13:39:
         2e:e9:8e:25:05:26:e2:fc:6b:66:ed:ec:a2:6d:61:72:e0:41:
         68:0e:eb:55:16:48:92:df:58:af:e9:a7:0d:be:68:cb:d8:f8:
         4a:ec:17:4e:06:10:a7:ea:da:9a:07:26:44:e6:7d:4d:72:f8:
         3b:d8:0f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:53:31 2026 by rpki-client