Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/57ff4191-bb07-3294-b05d-856423f33d23.roa
File:                     57ff4191-bb07-3294-b05d-856423f33d23.roa (raw, json)
Hash identifier:          ElgvN0lTLikj0jXOLIJE8gk5LDgFcRI+Lhzxnnyv91s=
Subject key identifier:   84:5E:A5:42:60:19:04:0E:37:CC:2B:1D:4B:6C:76:E9:07:E5:E7:7D
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584F0509C32C3642BFF2C4B44280
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/57ff4191-bb07-3294-b05d-856423f33d23.roa
Signing time:             Mon 31 Aug 2026 12:54:10 +0000
ROA not before:           Mon 31 Aug 2026 12:54:10 +0000
ROA not after:            Sun 29 Nov 2026 13:54:10 +0000
asID:                     2497
IP address blocks:        104.252.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:05:09:c3:2c:36:42:bf:f2:c4:b4:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 31 12:54:10 2026 GMT
            Not After : Nov 29 13:54:10 2026 GMT
        Subject: CN=a144d968-1ff3-4916-83fd-f8d5c2444857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9c:b9:ad:62:2d:45:74:86:a8:3c:8b:22:7b:
                    bd:6e:bb:d0:b2:e5:05:d0:03:21:35:e2:f9:c0:ba:
                    32:83:a7:ca:49:45:40:92:4b:8f:e1:ea:87:7e:05:
                    33:25:75:49:6c:21:02:2d:1d:e8:8a:85:82:17:dc:
                    0a:e0:e6:59:56:75:51:40:41:14:8a:eb:42:4d:de:
                    fb:a0:9b:db:6a:57:23:a1:9f:a6:47:5c:16:ba:a0:
                    05:41:9e:18:bf:91:5a:c1:29:3c:60:23:84:22:58:
                    fd:c2:a2:ba:d7:0b:3e:89:17:43:6b:1f:ef:8c:83:
                    c8:25:fe:c3:38:2e:94:e9:22:48:d2:17:1b:a7:df:
                    f5:99:d1:c1:4c:ee:07:43:cf:ac:24:ca:50:a6:e1:
                    83:8c:5a:45:4c:fe:c5:d5:7e:b4:33:09:8e:e5:ca:
                    c1:e0:75:74:87:fe:61:66:ae:5d:5b:79:4a:ae:3e:
                    9e:75:3c:4e:dd:ca:e3:11:d9:7f:13:cd:e3:d0:b8:
                    aa:b3:0a:70:4d:72:5b:17:7c:3a:38:02:03:62:b3:
                    95:09:6e:42:d6:c3:21:9e:c7:18:ac:54:b5:b8:1a:
                    fd:db:19:68:17:21:bf:59:71:00:ad:af:98:12:bd:
                    d1:e4:60:06:56:a6:b4:45:77:03:f9:91:bf:03:12:
                    1f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5E:A5:42:60:19:04:0E:37:CC:2B:1D:4B:6C:76:E9:07:E5:E7:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/57ff4191-bb07-3294-b05d-856423f33d23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:22:a6:4e:9c:c7:15:f1:a5:49:3f:ce:63:dc:ab:ec:40:8b:
         fe:43:35:65:86:8c:d4:4a:d6:80:b1:90:91:55:c6:60:9b:63:
         00:d2:51:45:1b:a6:2e:18:75:8a:86:c1:85:4a:f8:11:7f:a2:
         7b:85:d9:c2:2e:96:c8:21:45:9e:96:ca:73:39:72:40:08:d4:
         df:50:7a:d1:4e:ff:57:b7:a5:7f:2c:c1:38:68:f9:11:84:95:
         65:89:b3:3c:9e:c8:1f:84:a9:72:9e:7f:3d:d6:00:39:91:ab:
         0e:4b:25:2f:6a:a2:1c:63:92:47:f7:40:50:29:4a:63:dc:5d:
         9a:a5:01:3f:94:91:70:5b:b9:39:07:f2:a3:b4:62:26:da:f7:
         09:1d:81:94:73:3d:ee:50:29:92:a2:b6:9e:2d:0a:01:4d:2e:
         d9:e7:43:2b:21:3c:00:4e:54:0e:ed:81:47:fc:be:b0:b9:b0:
         9d:26:34:fd:96:8b:38:0c:2a:e6:ff:ed:70:7d:4b:54:43:7d:
         b8:0c:8c:70:5f:56:c1:9b:0c:b0:69:67:29:4c:9d:5f:8c:e0:
         46:87:75:a0:f8:1f:53:54:50:38:78:17:aa:3a:75:09:e8:f3:
         e7:ee:51:da:87:c0:08:cf:ad:d6:f8:21:6e:e3:58:94:68:d5:
         74:4a:bc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:53:56 2026 by rpki-client