Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f299eacf-9645-3c2e-bf77-214a664ccdae.roa
File:                     f299eacf-9645-3c2e-bf77-214a664ccdae.roa (raw, json)
Hash identifier:          MY0G2kEoGisMa9l5LkEJBxgVpl40kp3UhExDkqK+dYs=
Subject key identifier:   E3:1C:28:69:10:41:1F:E1:69:D5:B1:0C:7D:B4:54:EA:19:13:63:CB
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA15729878E17BAEEC50C0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f299eacf-9645-3c2e-bf77-214a664ccdae.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     18779
IP address blocks:        104.253.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:15:72:98:78:e1:7b:ae:ec:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=b363ecff-6219-410e-8a5b-35d1c302dbad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2e:89:79:97:ea:11:29:1c:55:53:e5:62:99:
                    b2:8d:dd:04:a2:e9:fd:e2:fa:ed:30:ce:23:32:f2:
                    bf:de:ae:f0:97:d6:7c:5b:ce:2f:2c:9e:bf:98:3a:
                    04:73:28:08:9c:55:b1:f2:e5:ed:bb:33:05:12:15:
                    08:09:1c:ad:e1:23:b5:2b:cb:f1:09:d3:15:5f:50:
                    db:40:2f:7a:8c:86:d9:01:d9:7e:b5:34:f5:f2:c3:
                    c9:e4:9e:48:09:f9:ef:47:48:be:6a:48:e3:da:02:
                    04:78:be:d8:11:fe:cd:15:00:77:31:a8:0a:a7:b9:
                    1c:bc:09:4e:0d:6d:63:41:37:60:4d:8a:4b:fe:35:
                    81:22:7e:63:85:88:50:bc:f7:34:ff:cf:f3:1f:e2:
                    41:fd:fc:e8:64:d4:18:38:f7:2e:63:d7:e9:01:65:
                    3f:93:90:12:38:86:b9:19:eb:f9:1e:16:a3:7e:1f:
                    ca:8a:78:62:a8:0b:d0:de:89:36:ff:bc:65:44:dd:
                    a2:b9:10:ad:e7:c8:08:11:1e:c7:35:e8:25:9f:f9:
                    c2:81:24:72:8e:1e:dc:b9:31:29:d0:93:23:79:2a:
                    62:57:0e:58:05:1e:73:3c:e7:bf:52:40:b3:e5:3e:
                    50:6d:5d:21:96:ed:3d:71:f9:1b:50:2e:87:ef:35:
                    d3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1C:28:69:10:41:1F:E1:69:D5:B1:0C:7D:B4:54:EA:19:13:63:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f299eacf-9645-3c2e-bf77-214a664ccdae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:ea:0f:35:5d:4a:39:be:c6:3f:7c:93:d8:dd:f0:b8:ad:05:
         11:ca:5a:7c:57:53:e1:51:95:f0:28:c2:e5:4e:42:1d:49:01:
         90:87:b0:f6:a3:a6:d9:29:cc:08:10:01:ac:93:a9:d7:bd:3d:
         81:96:86:b0:a7:65:42:e1:f7:9f:c6:98:74:6e:bf:b3:ab:05:
         fc:3b:41:67:4e:27:8c:73:b4:ff:93:d9:99:1c:0d:61:f2:86:
         db:cf:51:02:68:81:fa:d7:23:df:95:42:90:c5:6a:ef:98:c8:
         5e:05:e6:e6:38:cd:88:e4:2a:db:b4:55:d0:fb:43:6a:b6:a0:
         88:1c:10:f5:a4:5d:62:bc:fe:81:d5:d1:1b:c3:28:73:dd:74:
         5c:5d:36:cb:08:ed:ac:c9:c8:59:0d:57:6b:84:0b:e7:12:1e:
         98:fb:07:98:e1:40:c6:b4:0b:44:3c:7a:93:36:44:0b:73:9c:
         61:b7:18:8f:bd:c4:bf:33:c7:49:95:46:55:a1:60:c9:f1:d2:
         e5:02:4d:48:ee:14:9e:9c:e8:24:44:15:ff:6c:92:f7:7f:e0:
         0b:b6:e3:1d:3c:68:80:58:fd:15:db:8a:55:d9:80:08:8a:24:
         7e:cf:23:b6:79:63:03:67:b6:a4:a0:5e:eb:4e:f6:02:a6:bb:
         55:30:80:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:52:09 2026 by rpki-client