Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f998952e-a14f-31b3-a163-e2b606870b93.roa
File:                     f998952e-a14f-31b3-a163-e2b606870b93.roa (raw, json)
Hash identifier:          h+yBGV3Mtbt/xK2yUVUCL2pE/DzoHvvh0AK+zga1Ydc=
Subject key identifier:   85:AC:38:97:F7:9F:34:FF:2D:1A:84:74:C8:43:64:5D:68:6F:A5:60
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA1806E4EACCEC7CB31800
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f998952e-a14f-31b3-a163-e2b606870b93.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     64267
IP address blocks:        104.253.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:18:06:e4:ea:cc:ec:7c:b3:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=7aff44c7-1e70-4d03-9fbe-4db033d590e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d7:02:ec:ab:f2:6d:2e:35:57:50:b4:af:34:
                    62:59:e8:f8:e1:d2:0d:6d:84:a2:20:eb:a1:36:95:
                    8a:8f:a5:c6:63:3b:a2:0d:5d:88:9d:ec:5c:23:c0:
                    29:57:96:90:d4:f8:5a:9d:1e:cb:8f:88:52:33:78:
                    d4:24:bd:74:ad:2f:09:00:62:2d:f1:db:e7:f7:46:
                    94:78:a0:93:67:36:10:0e:07:5e:ef:a8:d1:97:03:
                    44:60:28:30:61:a9:c6:51:35:1f:8b:47:cd:25:97:
                    b0:8e:30:30:d9:ed:d8:e9:d8:f1:db:c8:8c:1a:14:
                    dd:68:6a:7c:0c:37:71:1d:c9:de:c5:a0:c5:a3:44:
                    7a:72:c5:48:40:e9:dd:cc:ac:27:56:f1:45:85:f2:
                    09:9f:2a:d1:cc:48:aa:fd:43:1b:c0:b0:c4:ab:68:
                    f9:4e:1d:30:52:0a:57:87:87:93:39:4d:8d:79:6f:
                    02:4f:75:88:c4:c5:70:af:1f:96:31:1b:0e:2c:8b:
                    43:fc:25:d0:3f:f7:d6:cd:ad:34:cb:42:58:db:b5:
                    3f:9c:90:05:10:5b:8a:e9:d1:0d:76:10:19:fa:9b:
                    52:53:ac:7e:09:43:97:39:a2:d8:94:d6:93:d1:c8:
                    5b:83:d4:b8:45:98:e1:d5:06:12:32:a2:5e:67:92:
                    0c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:AC:38:97:F7:9F:34:FF:2D:1A:84:74:C8:43:64:5D:68:6F:A5:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f998952e-a14f-31b3-a163-e2b606870b93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:a9:8f:79:d5:6a:ca:3e:e6:58:04:0d:fd:ad:2b:2d:db:2b:
         04:47:20:de:62:6f:18:1f:42:57:e1:f7:ad:9b:00:5d:c8:06:
         62:6b:42:47:c6:71:b7:7f:50:78:63:cf:b8:4d:0c:b6:e1:42:
         b4:93:56:cb:96:2f:e5:02:ae:32:91:f6:1c:30:cd:43:11:63:
         55:46:c1:df:06:ed:e2:17:0e:8c:4a:69:35:5e:e5:c6:d1:16:
         d7:42:91:74:fb:c3:9e:df:70:81:54:80:a6:5f:c3:09:90:c8:
         28:f4:44:ae:81:c7:d3:17:62:6a:ef:5b:72:fe:0d:74:0a:04:
         9e:8c:3d:54:17:0a:85:e4:f7:70:14:f4:54:f6:de:f0:c6:66:
         b1:f7:c8:9f:04:17:2a:6f:41:2b:80:d6:a5:e1:65:ec:fa:b9:
         5a:cb:5c:52:85:d3:95:e9:2c:76:a4:9f:b0:39:27:8e:91:a6:
         86:e7:e0:86:e6:f2:7b:31:00:2d:f0:71:eb:0b:57:d0:8f:e6:
         45:89:7f:a3:48:d9:aa:3e:04:67:12:58:fe:e1:7b:a2:6f:26:
         b9:a8:c3:b4:0e:28:ae:98:b5:a4:e6:9f:d0:df:0a:db:bc:93:
         d0:9b:ac:65:ea:55:59:cb:b5:f9:d3:d0:00:27:aa:d9:6d:65:
         82:8c:ac:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:52:13 2026 by rpki-client