Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/1fb79451-e57d-35dc-9e13-cf12df213728.roa
File:                     1fb79451-e57d-35dc-9e13-cf12df213728.roa (raw, json)
Hash identifier:          kikf9ewxheHBEDB6Y405uTku8wjTd787rmw1N4Ih0ng=
Subject key identifier:   69:73:84:E7:77:43:B0:45:A2:25:E0:ED:39:6F:E1:70:7F:53:07:1D
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584DFE05659D6D5AE96773883680
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/1fb79451-e57d-35dc-9e13-cf12df213728.roa
Signing time:             Fri 29 May 2026 07:47:46 +0000
ROA not before:           Fri 29 May 2026 07:47:46 +0000
ROA not after:            Thu 27 Aug 2026 07:47:46 +0000
asID:                     153706
IP address blocks:        104.253.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fe:05:65:9d:6d:5a:e9:67:73:88:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: May 29 07:47:46 2026 GMT
            Not After : Aug 27 07:47:46 2026 GMT
        Subject: CN=2da80686-d1ca-4160-b104-2f74ea5e7ff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:47:49:b7:53:df:96:2f:91:b8:b4:d4:6e:5a:
                    5f:fc:c4:5a:c1:52:db:10:45:55:d9:af:4f:44:29:
                    66:da:ea:41:f3:15:94:50:91:a8:25:b2:d0:80:b5:
                    79:13:cc:89:89:a7:15:9d:39:75:0a:85:6c:72:64:
                    b1:09:eb:ff:7e:f6:a3:e7:32:db:41:fc:33:a1:3a:
                    03:33:28:ce:c9:38:d0:40:1c:38:74:c1:b6:9a:a8:
                    9a:2c:c7:5e:68:f2:88:6a:7c:c6:ad:bc:58:e2:ba:
                    d9:54:2f:62:7c:90:48:e7:18:9d:fa:eb:12:a1:35:
                    a9:dd:19:9a:f2:ca:83:3a:97:5b:e5:71:1f:aa:8e:
                    35:b4:4f:3c:6e:24:f3:41:8a:50:b3:61:69:a3:41:
                    8a:11:97:00:f5:60:cf:af:99:0f:1a:d0:b8:ff:d4:
                    cc:4f:c8:04:4d:56:45:b8:f6:2a:03:d6:38:1d:66:
                    c9:b5:ad:0f:21:e0:40:bb:c2:e3:e6:7e:70:b9:e9:
                    6f:16:bd:2f:19:7a:58:8d:88:8e:65:65:50:c9:37:
                    be:6f:f6:2a:ae:d5:02:42:f7:90:d2:85:5b:db:26:
                    31:e8:60:cc:50:61:ce:cb:73:23:0e:ea:b6:8e:82:
                    2e:29:b8:7e:3c:89:1c:23:8b:92:6c:eb:7a:48:86:
                    ff:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:73:84:E7:77:43:B0:45:A2:25:E0:ED:39:6F:E1:70:7F:53:07:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/1fb79451-e57d-35dc-9e13-cf12df213728.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:e9:7f:9f:0c:b4:7b:5b:25:cd:68:e5:bf:49:25:e1:5c:0b:
         d3:dd:67:99:53:f4:ac:59:b0:9b:a6:42:2f:82:74:77:47:77:
         93:0a:9d:9a:35:c2:9e:74:c1:9c:55:9c:32:ab:08:83:dc:e0:
         89:03:d6:8b:95:fc:cd:b5:ef:d0:1a:15:2a:6e:59:9e:b5:28:
         1c:1e:26:8f:ab:eb:62:f1:eb:af:64:10:bb:74:36:2e:01:3f:
         9d:18:d4:3c:14:eb:2c:c1:aa:b1:c3:d1:2f:7f:67:13:e7:29:
         bb:90:ad:ad:2f:a7:39:13:b8:c1:34:af:56:02:9a:0d:cf:6e:
         c2:2a:8b:d2:50:a6:dc:53:3b:13:2a:03:e5:6b:33:d1:53:1d:
         af:52:aa:2a:51:25:ed:db:83:70:3f:dd:e0:6c:fe:e2:90:d9:
         10:18:ac:6a:30:e9:30:b4:4d:12:18:69:a0:86:38:83:53:d3:
         1d:77:d8:37:7b:d7:c3:29:5e:5d:11:cd:6f:42:47:97:a0:06:
         c6:a5:66:c9:9c:cf:d3:50:32:de:7d:77:99:4c:44:69:cc:20:
         cf:ee:57:91:3a:00:19:84:b2:2c:15:a2:59:a4:94:3c:f3:88:
         40:d1:53:87:e9:d4:63:0b:48:96:21:d1:31:49:70:ec:4d:7d:
         f0:4a:87:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:41:31 2026 by rpki-client