Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/ef5926d7-784c-397a-af57-d5921dcc3255.roa
File:                     ef5926d7-784c-397a-af57-d5921dcc3255.roa (raw, json)
Hash identifier:          neEB4o4koGRkjHbRbJTPp5e7p9WndWJaK3ux/iLQD4M=
Subject key identifier:   99:FB:53:B3:BD:15:2E:7D:B6:BB:2B:31:A4:03:FB:E9:37:AC:8C:DD
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA18F0896026AAECB3AA80
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/ef5926d7-784c-397a-af57-d5921dcc3255.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     20473
IP address blocks:        104.253.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:18:f0:89:60:26:aa:ec:b3:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=32244068-b60c-4ca4-994b-b337d8221277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d9:0e:61:8b:52:90:97:26:33:e6:7d:19:da:
                    28:58:47:de:47:49:6d:00:ee:97:f9:e6:ff:64:fe:
                    da:09:b6:f5:d2:e7:39:08:5a:73:4e:2f:cc:6d:d2:
                    89:e9:8b:7b:dc:59:38:b9:57:13:69:af:c7:d2:51:
                    76:cb:9a:8a:4d:6b:23:79:59:82:92:47:cc:55:f2:
                    39:b7:89:9b:36:39:83:d3:63:89:81:0d:4f:dc:56:
                    90:65:be:ff:f6:96:a8:14:ae:92:7b:f0:c6:ee:b2:
                    a1:d5:c7:20:33:a6:bb:3b:f5:e1:e3:23:51:e3:c6:
                    53:13:98:d2:bd:1b:87:ca:90:e1:3b:5c:86:b8:70:
                    22:8b:6e:56:34:b6:4d:cb:a6:51:ff:5f:f6:92:47:
                    a4:f6:a1:88:07:2c:29:73:98:a2:c8:42:12:ad:1b:
                    62:b7:1a:83:27:df:01:2b:87:77:be:ac:a2:6d:3c:
                    ef:20:36:4e:e3:8b:e1:ca:cc:a9:ad:18:a9:e7:51:
                    6c:f2:1f:9a:27:3a:83:94:7a:2d:2d:e8:bc:23:40:
                    5c:ab:52:39:5b:d4:b8:3a:91:a7:28:c3:d2:32:f4:
                    92:32:81:19:cd:e7:e5:72:40:d0:02:4c:a3:bd:18:
                    b4:1a:a8:57:54:62:31:21:44:a3:15:5a:8e:d2:ba:
                    27:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:FB:53:B3:BD:15:2E:7D:B6:BB:2B:31:A4:03:FB:E9:37:AC:8C:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/ef5926d7-784c-397a-af57-d5921dcc3255.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:de:c1:33:40:87:ce:fd:56:f6:c2:cf:9c:e6:90:55:34:99:
         09:b0:6f:30:b5:b0:f6:2d:a7:a1:3a:29:17:a8:3b:5e:4f:43:
         f4:dd:74:40:d8:95:76:ed:de:c0:56:df:c8:e1:ac:e2:eb:f2:
         94:16:39:ce:d2:58:7c:b9:d7:17:7d:3a:19:96:84:ad:90:61:
         a0:e0:c2:28:61:10:f5:a2:72:50:26:0b:ff:1a:ec:44:87:82:
         66:38:95:c9:fd:2e:bb:fe:7e:60:80:11:1f:d7:de:f7:cd:96:
         ac:59:4f:52:8a:ae:f4:86:39:a7:3c:3b:48:70:2f:90:1b:25:
         76:ef:e4:de:b6:35:66:a0:7b:24:29:6b:b7:4b:df:b3:3c:3c:
         1e:b2:3a:b0:f1:98:ac:ab:64:60:62:6b:4b:65:59:ef:a2:20:
         7c:92:27:f4:bd:0b:2b:0a:b2:a4:4a:6e:15:07:da:59:23:72:
         40:3a:31:f2:da:24:d8:82:7f:7e:d6:4c:69:7e:b3:d2:cd:20:
         8d:55:43:c4:a8:73:d8:65:2c:df:02:1b:ef:b0:89:f3:db:d3:
         c3:71:46:df:ba:92:46:36:6e:4c:bb:72:53:69:68:33:aa:6f:
         00:4c:52:d3:55:63:c4:33:25:95:a2:6a:a1:bf:b2:aa:f8:be:
         3a:f3:5a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:54:05 2026 by rpki-client