Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f0e51fa3-c2d4-3850-8c71-0999aaca4346.roa
File:                     f0e51fa3-c2d4-3850-8c71-0999aaca4346.roa (raw, json)
Hash identifier:          n4PoF9StPL0xDijgQzc45nrexBsbDfGdBh9CpWbubvE=
Subject key identifier:   04:83:EA:EA:E8:48:87:DF:2D:52:2D:AF:18:27:ED:A6:54:BC:B2:48
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CD1D3D33BD8AE5B270160
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f0e51fa3-c2d4-3850-8c71-0999aaca4346.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     398781
IP address blocks:        104.253.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:d1:d3:d3:3b:d8:ae:5b:27:01:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=bd68308e-7450-4152-b128-b1fee2413e21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:95:2d:74:02:56:87:8d:d3:0b:a5:be:9b:21:
                    78:77:82:94:46:52:c1:a1:89:59:2a:50:33:16:3c:
                    59:0e:d0:0d:5c:00:71:71:01:14:b8:19:4d:36:62:
                    05:23:4d:38:23:1f:9e:8f:bf:75:bd:fd:da:8c:f5:
                    d5:e6:15:dc:fa:61:31:5d:2e:3e:37:3d:ff:c4:b9:
                    f4:e5:8e:2e:bf:18:59:41:88:16:b3:19:f4:bb:8a:
                    3a:3e:f7:e4:ad:68:15:79:63:5f:27:02:93:e6:3b:
                    f5:e3:1b:3c:61:81:13:8d:4e:07:92:54:6e:d6:47:
                    35:3e:b9:6e:ac:c8:8d:f5:c5:f9:9f:23:da:a5:a9:
                    bf:89:2e:71:8f:98:b5:eb:22:36:46:dc:25:cc:15:
                    91:0b:07:65:e8:c4:ab:85:08:2a:86:ff:80:a9:7d:
                    78:91:29:c7:21:ef:b1:a0:9a:32:d9:6f:83:70:e9:
                    56:5b:3a:6e:c4:f2:b9:d6:1f:c6:ad:f2:05:25:35:
                    e4:eb:0a:1b:12:42:d2:40:83:87:eb:b9:16:4f:21:
                    7e:04:1b:4c:f1:06:9f:49:97:ec:f3:f1:c1:94:20:
                    aa:ad:6f:ea:d2:97:07:d3:79:42:d5:d6:3b:4f:12:
                    82:ed:08:e7:8c:27:af:8d:e1:ba:97:3f:25:06:15:
                    f9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:83:EA:EA:E8:48:87:DF:2D:52:2D:AF:18:27:ED:A6:54:BC:B2:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f0e51fa3-c2d4-3850-8c71-0999aaca4346.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:bd:29:38:a9:8e:8e:30:a0:78:f8:53:1e:d1:6a:fe:7d:a4:
         27:e7:52:bc:ee:c1:cc:32:b0:6f:b6:6c:ca:73:f9:59:1e:99:
         82:a3:fd:1e:e2:ca:d2:0d:a6:3a:4a:2f:3b:b7:d5:e5:c5:13:
         28:54:26:c9:37:7a:0f:9a:5b:4f:ab:6e:c3:9e:d7:30:0d:7d:
         e1:2c:fb:18:23:24:fe:37:9f:55:23:a1:25:36:3f:b4:41:b0:
         ae:c4:51:00:45:f1:d5:03:fd:e1:55:b4:0b:86:34:d8:dc:d0:
         95:14:a1:e2:88:2b:bc:d0:ef:44:ce:8d:99:af:44:6d:44:25:
         27:df:d4:fb:50:df:87:4e:78:dc:39:d6:62:e6:03:00:ff:ba:
         4e:4e:a7:b1:87:3f:df:25:7b:7e:21:eb:40:7e:bf:5d:aa:e0:
         06:c8:53:55:9c:be:e8:d1:08:77:a6:ac:da:66:d5:1b:74:0f:
         3c:02:6d:62:38:c9:3d:9b:89:a1:d6:0a:3e:81:1f:4d:5a:3a:
         e5:3d:ae:ee:3d:cf:6d:00:3a:e5:6d:2f:bf:96:13:3e:ac:6a:
         df:3d:6a:ec:01:00:d2:93:2a:dc:1d:0b:1e:9f:e2:d2:51:71:
         11:07:12:63:5b:98:90:1f:24:40:bc:4b:99:6b:53:f1:96:cc:
         14:38:3b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:44:50 2026 by rpki-client