Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/ead1ea54-fe27-37e4-8847-22ade6213ee9.roa
File:                     ead1ea54-fe27-37e4-8847-22ade6213ee9.roa (raw, json)
Hash identifier:          i7VoS2YjzY5oVjnfR9kHgY1EAi+3DZMH9WFPhYS8cKY=
Subject key identifier:   34:FF:D9:58:0E:7A:6E:FE:B6:38:B8:3F:90:07:39:EE:9C:47:7C:EA
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA0F7135B6A7C1E13FF900
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/ead1ea54-fe27-37e4-8847-22ade6213ee9.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     18779
IP address blocks:        104.252.186.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:0f:71:35:b6:a7:c1:e1:3f:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=2d5f90ba-6686-4f32-9150-1189df95402f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a3:11:ef:a9:7b:71:64:90:c1:d3:31:c6:8c:
                    34:11:b6:14:e5:70:45:e5:2f:04:09:69:c5:91:20:
                    e3:39:15:59:cb:3d:cb:65:1a:f6:71:c0:68:d5:8b:
                    9f:73:c8:bd:5b:c1:0a:57:f1:29:9e:f7:3a:55:47:
                    e6:87:cb:a9:c7:42:fc:30:54:db:3e:7a:3d:ee:5d:
                    f9:3f:52:50:90:b5:63:63:c8:bc:81:63:03:5c:9d:
                    17:7b:75:66:c1:b8:2c:68:cd:df:6a:3b:71:61:6d:
                    fd:68:76:71:db:ce:0a:7d:f5:3c:54:07:a1:2d:a8:
                    43:c7:f1:55:00:65:67:64:33:97:62:37:0f:d6:0c:
                    dd:b6:9c:4d:98:e8:17:e5:9c:90:e9:7a:54:1c:23:
                    f6:25:41:3b:25:ed:77:dc:72:37:f9:e9:8a:0c:ec:
                    b3:e0:71:10:07:60:cd:48:e1:95:d3:67:bc:28:56:
                    8d:4e:7d:55:40:e7:ee:42:51:64:0b:f5:4a:37:f1:
                    ea:c4:51:82:cf:59:af:4c:59:83:9b:dc:a9:89:92:
                    26:20:fc:78:52:ad:63:f2:02:37:4a:ec:fa:3e:8e:
                    f3:e1:6b:33:94:c1:22:a2:75:da:31:78:65:6a:1f:
                    8b:f8:ec:a5:20:4d:ae:da:73:e2:1f:7d:47:55:50:
                    c4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FF:D9:58:0E:7A:6E:FE:B6:38:B8:3F:90:07:39:EE:9C:47:7C:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/ead1ea54-fe27-37e4-8847-22ade6213ee9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.186.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:82:e6:84:ec:59:75:e9:b9:56:d4:11:80:de:dc:68:aa:6b:
         50:ed:05:ab:28:09:a0:a6:39:9a:ff:f1:c0:4f:5b:89:24:96:
         71:38:2f:e1:68:f2:57:ed:98:13:eb:3c:d6:a3:02:4a:c0:7f:
         b6:69:60:78:10:d8:39:02:a3:ea:e7:40:99:75:7e:78:32:29:
         1d:91:10:cf:4b:d1:c9:c0:a7:b2:53:c1:56:24:bb:85:d3:fe:
         94:6e:6e:5f:1b:99:fe:e4:83:ef:b1:84:16:e4:11:0f:48:f2:
         85:6e:da:d2:37:5c:50:74:46:dd:27:8d:cd:8d:42:74:45:9a:
         90:0d:3f:da:5a:25:c2:4f:2a:5c:1a:c7:3e:a7:c2:c0:e2:9f:
         c2:5e:71:05:15:db:00:cd:ce:74:75:06:fd:54:86:ac:4b:4b:
         8f:e2:1c:25:a2:f2:c6:b9:88:cf:09:31:5d:5f:2c:c3:a7:b9:
         d2:60:ea:77:40:54:14:b7:d3:70:c0:05:a3:9d:a8:39:50:b3:
         75:bf:4d:40:a0:6c:b8:c5:fd:0f:39:48:57:11:a7:19:88:b9:
         5f:97:9c:9b:3b:f6:b7:6d:fa:35:9e:49:ac:44:1a:69:6e:12:
         c2:3d:db:49:1e:bf:12:56:11:ce:17:dc:f2:0e:60:5a:28:20:
         47:08:1b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:55:46 2026 by rpki-client