Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/3b8f88b9-ea2b-3d58-a637-f986fbd87955.roa
File:                     3b8f88b9-ea2b-3d58-a637-f986fbd87955.roa (raw, json)
Hash identifier:          MHh7Mky0g2j+WkayJQ+qvA5W3QT05/yGmuDZLRLaozo=
Subject key identifier:   8A:2B:AB:9A:E1:68:19:96:B0:3F:4D:81:EF:E5:EE:B5:1C:EF:93:12
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CD2DC667CDDA4CD0C2280
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/3b8f88b9-ea2b-3d58-a637-f986fbd87955.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     200239
IP address blocks:        104.252.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:d2:dc:66:7c:dd:a4:cd:0c:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=2e57c79d-847e-492f-9b97-ce49e48f523b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:03:d5:29:49:01:3f:2b:b0:38:c1:61:80:74:
                    71:63:50:b3:32:9b:af:4d:3c:89:2b:51:75:cb:d1:
                    8c:f7:4b:39:34:9f:d0:d2:f8:c6:cf:e9:21:e0:74:
                    af:fc:78:d1:b2:0f:45:07:69:aa:f0:97:64:c2:d1:
                    ab:1e:96:61:17:c0:19:fd:21:fa:ea:bc:83:7d:a5:
                    4a:8f:e0:a0:20:67:be:fb:98:9a:8c:ec:85:98:0c:
                    6a:a3:de:d7:f9:43:cc:c1:18:fd:1a:9b:0e:89:28:
                    f2:93:87:54:fc:0e:93:35:f6:08:46:88:b1:4e:81:
                    58:ae:be:58:85:6e:5a:71:87:db:68:84:a5:69:40:
                    31:d2:80:dc:d1:35:76:1d:ff:e6:85:18:88:1a:80:
                    e8:02:33:05:30:70:24:35:99:1d:6a:48:57:56:77:
                    f2:50:03:68:0b:b1:a8:18:76:68:bb:80:04:73:66:
                    c3:26:58:ee:e3:42:92:1b:f8:56:19:50:9b:bd:2b:
                    a6:82:cc:f3:0d:fa:6d:18:0e:26:d7:2d:fb:3c:7c:
                    31:8b:87:a1:68:0d:62:cd:72:35:91:73:d5:0e:e2:
                    bb:bd:86:d0:8c:85:9f:4e:6b:34:21:c7:c1:a7:c0:
                    f2:73:41:bf:40:24:78:fe:61:7b:e8:0d:e4:5b:1a:
                    d0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2B:AB:9A:E1:68:19:96:B0:3F:4D:81:EF:E5:EE:B5:1C:EF:93:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/3b8f88b9-ea2b-3d58-a637-f986fbd87955.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:d4:21:5a:1e:8a:c0:ff:2e:7e:30:a6:3e:3b:31:63:c2:c5:
         cf:04:d5:70:b0:cd:5d:4a:e4:1f:30:dd:fa:a6:0c:5c:1d:18:
         25:7a:99:e6:15:1a:23:03:6c:b6:1d:03:22:42:10:ff:67:d3:
         d4:83:0c:58:0c:ad:94:57:41:b2:84:b1:e5:f1:43:bf:d2:81:
         2f:31:20:ab:67:64:a0:93:97:f2:a8:18:6e:db:54:be:bb:99:
         d7:4a:e6:40:10:84:f2:61:c4:9a:47:f1:9b:19:eb:b9:43:37:
         4d:8a:87:f8:ae:48:f6:39:ba:43:d4:01:73:f5:a3:05:96:45:
         bc:99:3f:8d:3e:16:96:1c:74:8a:fc:dd:b2:51:51:4d:df:44:
         8a:22:91:37:88:67:6f:bb:20:84:75:d2:7f:64:a9:2b:20:79:
         c8:74:6b:8d:81:6e:3c:4a:9f:60:ee:34:94:85:92:0b:2b:87:
         f1:da:7d:93:bb:83:d9:16:34:d2:96:dc:c4:98:ba:64:81:67:
         6f:c7:cc:f1:4e:b3:1c:35:2f:0b:b2:81:1f:a1:c6:4a:16:f6:
         4b:a0:1f:81:b2:8f:ed:9a:48:c8:64:bf:c6:48:d3:52:67:c6:
         df:b6:86:c8:d3:ca:57:87:aa:90:6d:36:38:39:0f:79:18:73:
         5d:1b:0a:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHNLcZnzdpM0MIoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk
MmU1N2M3OWQtODQ3ZS00OTJmLTliOTctY2U0OWU0OGY1MjNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgPVKUkBPyuwOMFhgHRxY1CzMpuvTTyJK1F1
y9GM90s5NJ/Q0vjGz+kh4HSv/HjRsg9FB2mq8JdkwtGrHpZhF8AZ/SH66ryDfaVK
j+CgIGe++5iajOyFmAxqo97X+UPMwRj9GpsOiSjyk4dU/A6TNfYIRoixToFYrr5Y
hW5acYfbaISlaUAx0oDc0TV2Hf/mhRiIGoDoAjMFMHAkNZkdakhXVnfyUANoC7Go
GHZou4AEc2bDJlju40KSG/hWGVCbvSumgszzDfptGA4m1y37PHwxi4ehaA1izXI1
kXPVDuK7vYbQjIWfTms0IcfBp8Dyc0G/QCR4/mF76A3kWxrQyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIorq5rhaBmWsD9Nge/l7rUc75MSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvM2I4Zjg4YjktZWEyYi0z
ZDU4LWE2MzctZjk4NmZiZDg3OTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPyHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGrUIVoeisD/Ln4wpj47MWPCxc8E1XCwzV1K5B8w3fqmDFwdGCV6meYV
GiMDbLYdAyJCEP9n09SDDFgMrZRXQbKEseXxQ7/SgS8xIKtnZKCTl/KoGG7bVL67
mddK5kAQhPJhxJpH8ZsZ67lDN02Kh/iuSPY5ukPUAXP1owWWRbyZP40+FpYcdIr8
3bJRUU3fRIoikTeIZ2+7IIR10n9kqSsgech0a42BbjxKn2DuNJSFkgsrh/HafZO7
g9kWNNKW3MSYumSBZ2/HzPFOsxw1LwuygR+hxkoW9kugH4Gyj+2aSMhkv8ZI01Jn
xt+2hsjTyleHqpBtNjg5D3kYc10bCjo=
-----END CERTIFICATE-----
Generated at Tue Sep 22 11:38:28 2026 by rpki-client