Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/119af21a-db2e-38f6-84f9-4fdfd4fdfc47.roa
File:                     119af21a-db2e-38f6-84f9-4fdfd4fdfc47.roa (raw, json)
Hash identifier:          J3SSEFZOpkQC0sMeJShjS7i+utijFBIrGW3F/dRJ0SY=
Subject key identifier:   E7:E3:FC:3F:DD:73:B7:58:A6:7E:A9:3B:08:C2:DF:E3:3C:E6:D2:51
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584F92085E970179C9B9B2275380
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/119af21a-db2e-38f6-84f9-4fdfd4fdfc47.roa
Signing time:             Wed 21 Oct 2026 01:00:12 +0000
ROA not before:           Wed 21 Oct 2026 01:00:12 +0000
ROA not after:            Tue 19 Jan 2027 02:00:12 +0000
asID:                     212238
IP address blocks:        104.252.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:92:08:5e:97:01:79:c9:b9:b2:27:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Oct 21 01:00:12 2026 GMT
            Not After : Jan 19 02:00:12 2027 GMT
        Subject: CN=f8132d62-f88e-404f-b361-f98925cd617c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:20:92:af:ce:d9:6f:ad:d4:3f:18:5e:9d:68:
                    f8:e7:ca:c9:97:6a:b4:04:9a:6c:d8:f1:53:5c:ac:
                    21:9a:68:bf:e9:f2:08:aa:c3:68:ee:b0:19:6c:51:
                    a6:d3:a6:0b:7d:d6:70:68:78:04:a0:89:ac:dd:34:
                    08:64:4b:1b:5c:bc:f4:67:5f:fc:81:5b:4e:39:31:
                    91:65:bd:d1:6b:2a:68:5e:36:46:8d:20:74:ed:c0:
                    6d:04:9d:7a:77:66:6a:4f:87:8e:7e:86:74:5f:80:
                    46:ec:f7:72:56:1c:6a:af:02:fc:b8:1d:fc:6d:b2:
                    ba:45:64:25:3d:0a:64:3f:15:2c:9b:97:a2:fc:3c:
                    e1:9e:ef:f4:6a:b9:f5:51:9e:f4:7a:aa:84:f2:94:
                    38:bf:89:1c:5f:fa:9c:81:7d:8f:26:a9:7b:19:ae:
                    bf:c8:f5:86:1c:8d:ed:f9:9d:c4:e2:d7:63:53:d2:
                    d2:2b:87:ae:db:60:a3:da:2c:6d:b0:e3:54:ff:41:
                    d9:3e:97:d7:69:13:83:f1:d3:46:32:2c:c9:99:06:
                    25:c1:be:6e:ca:da:c7:e6:1f:59:a1:f7:6d:ea:92:
                    5e:d6:f8:fc:79:d6:2a:29:f4:fd:d1:1f:14:c9:1d:
                    c5:34:d7:ed:43:30:13:02:9f:f2:c2:31:94:cb:39:
                    ff:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E3:FC:3F:DD:73:B7:58:A6:7E:A9:3B:08:C2:DF:E3:3C:E6:D2:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/119af21a-db2e-38f6-84f9-4fdfd4fdfc47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:d1:54:c5:12:3e:d6:03:98:b5:90:be:07:d8:81:82:ec:67:
         28:ab:b4:05:ee:3a:a8:94:34:8a:88:9a:c5:4a:af:ce:88:f0:
         97:98:f5:7f:d7:d6:9a:21:df:1b:18:45:17:51:3c:7a:5a:d8:
         d3:77:0f:c3:36:ea:5c:55:59:4f:44:c2:db:4d:e6:13:25:04:
         9e:e2:db:c9:a9:08:a8:e6:86:d6:36:26:11:27:c5:91:3f:ac:
         22:8f:b5:b0:31:a3:7e:56:88:f1:64:1e:73:b6:7b:76:f9:18:
         58:9f:2a:11:2b:d7:92:50:bc:b2:e0:2d:98:9b:c6:3e:70:4b:
         18:3e:cc:d5:33:2c:b8:49:75:80:14:f2:95:1c:47:24:70:5a:
         ea:ce:4b:e3:ea:ff:ae:83:05:79:3d:26:d6:70:18:64:1d:b8:
         43:ba:ef:cb:60:f4:84:78:93:2c:f6:8a:4b:65:98:e5:68:60:
         80:47:bb:ae:5e:0f:89:5f:44:ea:de:fe:72:a0:77:13:7a:ca:
         ae:eb:58:6b:29:cf:c1:d5:6f:6e:8c:79:85:33:81:7d:76:ca:
         ea:ed:29:58:90:bc:04:7e:d0:2b:dc:01:53:c8:58:01:f6:20:
         61:77:f9:51:a4:92:b9:02:31:84:ce:ee:e0:24:8a:3c:0e:bf:
         fe:2f:d7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:08:44 2026 by rpki-client