Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/37be9d3c-deb2-33de-8d15-9e88d9109a4a.roa
File:                     37be9d3c-deb2-33de-8d15-9e88d9109a4a.roa (raw, json)
Hash identifier:          paMYZ7h138NbzDKjEGQL1qrL0Iif3Sa0sJGbmTG10i8=
Subject key identifier:   62:F7:5F:CF:EE:06:B8:51:B8:4F:2E:AA:F3:D9:0B:84:79:DC:33:EB
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584F92088BF3E43A9E506D3CA900
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/37be9d3c-deb2-33de-8d15-9e88d9109a4a.roa
Signing time:             Wed 21 Oct 2026 01:00:12 +0000
ROA not before:           Wed 21 Oct 2026 01:00:12 +0000
ROA not after:            Tue 19 Jan 2027 02:00:12 +0000
asID:                     396356
IP address blocks:        104.252.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:92:08:8b:f3:e4:3a:9e:50:6d:3c:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Oct 21 01:00:12 2026 GMT
            Not After : Jan 19 02:00:12 2027 GMT
        Subject: CN=b58f77da-a495-4724-aab2-8107e8b4f005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e8:e6:40:48:be:11:ab:cb:1f:8c:7c:68:3a:
                    3d:30:8a:77:f9:47:48:a1:df:82:a2:2b:4a:f1:0e:
                    62:0e:48:e5:8d:99:e5:c1:1d:a2:5b:c8:fa:71:17:
                    c7:b2:28:ed:4d:66:3c:0e:08:3a:13:92:69:fa:69:
                    2b:3f:b2:1c:69:fa:6a:0c:b6:1c:10:5b:18:70:4b:
                    89:8b:3d:8b:e9:ca:19:1d:55:65:b5:76:d6:07:be:
                    76:82:b4:74:43:48:46:44:37:2d:7c:ce:1c:53:11:
                    ed:86:98:77:02:3a:10:99:43:05:0e:43:8b:04:63:
                    e2:f0:88:1d:c3:47:49:36:49:60:28:07:67:a5:71:
                    47:bf:92:e0:74:fa:4b:3f:5b:f5:69:dc:5d:9c:a4:
                    c0:f1:2e:0b:12:15:10:c5:08:26:23:12:96:78:40:
                    d3:d7:99:ad:0f:a5:2f:86:58:e1:a3:7b:53:15:74:
                    15:68:8e:38:86:af:64:b5:18:31:4c:d8:7b:56:04:
                    92:16:a7:5e:db:04:76:88:f5:55:89:32:8c:ad:db:
                    a0:04:65:a3:15:92:4e:0d:66:64:4f:2b:55:9a:cc:
                    fd:9d:5e:68:77:d8:11:dc:12:b8:27:80:0e:d7:3d:
                    5e:5e:c1:77:52:00:15:2c:18:c3:34:3c:65:89:2d:
                    08:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F7:5F:CF:EE:06:B8:51:B8:4F:2E:AA:F3:D9:0B:84:79:DC:33:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/37be9d3c-deb2-33de-8d15-9e88d9109a4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:f5:bb:dd:0e:2b:60:dc:f6:a1:0c:b7:23:f5:f3:10:04:3d:
         ab:8a:c4:b5:4d:23:b7:51:a6:24:6b:60:3c:89:e0:37:4e:32:
         e6:c2:08:c8:18:40:ce:b0:38:b9:03:9b:05:1e:eb:ea:78:3b:
         b2:5e:09:e6:13:67:6c:02:94:ac:82:f7:3c:20:a1:b8:2d:48:
         c6:3a:20:67:05:fc:5d:5d:cf:31:30:03:f6:10:f2:ca:71:fc:
         84:3a:9a:3a:26:f8:d9:b6:ec:84:b4:34:f0:60:6d:ce:0f:48:
         76:ff:4f:37:fb:ff:bd:a9:60:f7:8f:89:ef:79:9c:80:3f:39:
         08:4a:2b:36:79:e9:77:8b:33:1d:64:9b:e4:d0:20:c4:3f:7c:
         59:2b:a5:ca:70:c1:30:5c:33:72:1a:bb:e6:28:72:d0:46:e1:
         38:94:08:a8:4b:b5:5c:da:14:be:97:49:6e:f5:cd:f8:e3:fc:
         29:92:8f:a0:53:5b:09:77:4a:7c:b1:29:2c:d2:ac:0e:a9:c2:
         03:81:17:09:d6:fc:bb:b5:56:6e:fa:13:af:28:ae:fd:23:ce:
         4a:62:d0:36:f2:0c:31:fe:9f:47:42:9e:a6:81:02:29:67:0b:
         3c:a0:2a:6f:e7:6c:c5:0d:69:ac:ee:d5:20:0c:90:f7:cb:62:
         35:16:ea:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+SCIvz5DqeUG08qQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MTAyMTAxMDAxMloXDTI3MDExOTAyMDAxMlowLzEtMCsGA1UEAxMk
YjU4Zjc3ZGEtYTQ5NS00NzI0LWFhYjItODEwN2U4YjRmMDA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+jmQEi+EavLH4x8aDo9MIp3+UdIod+CoitK
8Q5iDkjljZnlwR2iW8j6cRfHsijtTWY8Dgg6E5Jp+mkrP7IcafpqDLYcEFsYcEuJ
iz2L6coZHVVltXbWB752grR0Q0hGRDctfM4cUxHthph3AjoQmUMFDkOLBGPi8Igd
w0dJNklgKAdnpXFHv5LgdPpLP1v1adxdnKTA8S4LEhUQxQgmIxKWeEDT15mtD6Uv
hljho3tTFXQVaI44hq9ktRgxTNh7VgSSFqde2wR2iPVViTKMrdugBGWjFZJODWZk
TytVmsz9nV5od9gR3BK4J4AO1z1eXsF3UgAVLBjDNDxliS0IzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGL3X8/uBrhRuE8uqvPZC4R53DPrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvMzdiZTlkM2MtZGViMi0z
M2RlLThkMTUtOWU4OGQ5MTA5YTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPywMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD71u90OK2Dc9qEMtyP18xAEPauKxLVNI7dRpiRrYDyJ4DdOMubCCMgY
QM6wOLkDmwUe6+p4O7JeCeYTZ2wClKyC9zwgobgtSMY6IGcF/F1dzzEwA/YQ8spx
/IQ6mjom+Nm27IS0NPBgbc4PSHb/Tzf7/72pYPePie95nIA/OQhKKzZ56XeLMx1k
m+TQIMQ/fFkrpcpwwTBcM3Iau+YoctBG4TiUCKhLtVzaFL6XSW71zfjj/CmSj6BT
Wwl3SnyxKSzSrA6pwgOBFwnW/Lu1Vm76E68orv0jzkpi0DbyDDH+n0dCnqaBAiln
CzygKm/nbMUNaazu1SAMkPfLYjUW6us=
-----END CERTIFICATE-----
Generated at Thu Nov 5 09:29:37 2026 by rpki-client