Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/556fdf1f-541d-3af1-a08c-75b67a9cd6ff.roa
File:                     556fdf1f-541d-3af1-a08c-75b67a9cd6ff.roa (raw, json)
Hash identifier:          H3VZUo/Cz392DqKIpP1uJ7zRFrAe5fm/HoHbOZM+Fo0=
Subject key identifier:   38:D3:CD:CD:9C:FC:59:C7:74:E7:42:68:4E:4D:8A:18:48:D5:ED:9C
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EA799F0D4BB13B01F58822880
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/556fdf1f-541d-3af1-a08c-75b67a9cd6ff.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     153706
IP address blocks:        104.253.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:f0:d4:bb:13:b0:1f:58:82:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6dc27695-7e36-4735-b413-75d113afe38e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a3:32:6b:9f:e1:cc:e9:d8:bb:c0:10:a3:06:
                    dc:87:2e:0a:12:56:78:20:2b:fd:6c:25:14:2b:b7:
                    e3:94:7e:23:c7:4d:a3:fb:1d:05:ab:26:dc:9f:30:
                    74:1f:94:50:be:98:59:e3:28:15:f5:de:6c:f6:60:
                    22:54:30:6d:b3:36:2d:36:b6:5c:6f:c8:51:9b:c4:
                    82:5a:ff:61:2a:44:93:86:de:ff:4a:04:4d:c1:d1:
                    cb:dc:b6:5a:c6:d9:e5:b6:df:64:3d:11:ce:31:9a:
                    42:1d:7b:3e:88:b4:b8:34:d7:d3:13:d9:bc:80:24:
                    62:d1:03:e4:b2:56:5d:6e:bb:15:16:a8:c6:69:0e:
                    60:7d:5a:f6:67:b4:53:1b:9a:fd:a4:25:a7:07:55:
                    8c:cb:f5:49:4b:6d:b5:a5:16:09:83:d3:b3:78:63:
                    0d:87:c1:68:a8:8b:18:94:9e:c1:ea:56:b4:51:be:
                    82:dd:34:62:b9:2f:b0:db:c3:40:82:2c:86:5f:52:
                    c3:e8:11:b4:74:91:44:46:5f:cd:7d:cf:02:92:e7:
                    e8:3d:a3:ac:46:a3:c1:e2:0f:db:a6:f7:d3:78:68:
                    e5:d2:10:89:9c:2a:c2:87:7d:11:ee:e0:ca:18:d4:
                    4d:62:92:8a:5e:9e:84:29:f9:88:fd:5f:1b:9a:79:
                    42:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D3:CD:CD:9C:FC:59:C7:74:E7:42:68:4E:4D:8A:18:48:D5:ED:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/556fdf1f-541d-3af1-a08c-75b67a9cd6ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:e6:2c:e7:20:c2:0c:08:22:a3:8e:39:48:a8:b4:5d:c0:73:
         10:c5:12:71:0d:21:57:f3:17:b3:99:83:8b:36:38:e1:22:b6:
         03:72:a1:72:03:ec:db:53:fe:ae:68:bc:b8:1f:cc:e8:fe:f5:
         5c:59:3f:c0:40:da:8b:ea:ef:45:0a:16:2d:a9:c3:f9:28:a5:
         a1:22:d5:d3:d8:0d:b3:2a:ee:84:05:d4:fa:55:27:72:f8:e7:
         ab:c1:51:e5:1d:8e:2e:bf:8a:96:a2:68:ba:7e:f0:bd:04:b8:
         2f:52:5b:7b:bd:cd:58:a4:71:24:59:8d:28:1b:ab:e5:83:52:
         8f:66:3d:1f:d9:e0:61:01:19:02:bd:17:b9:ef:8f:11:33:60:
         b7:85:76:37:42:32:2c:c7:e2:31:81:63:e6:9e:bb:77:1c:31:
         58:96:c2:fa:82:f5:4d:e7:20:91:3a:73:75:1b:02:e5:30:0b:
         27:16:6a:74:0b:60:c8:96:6e:3c:63:4e:de:44:1f:2a:32:78:
         df:78:7a:98:89:6c:bc:26:fb:c9:b5:ac:51:1c:4f:69:cd:16:
         af:0a:84:96:3a:77:a5:b8:d6:e2:aa:24:50:4f:af:7c:64:bf:
         74:9e:b0:3e:51:d7:13:64:1e:dd:9c:ff:2f:31:f3:73:be:77:
         f9:fb:2d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:07:46 2026 by rpki-client