Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/76a29e18-3a59-30f3-9af2-b1012f3e5498.roa
File:                     76a29e18-3a59-30f3-9af2-b1012f3e5498.roa (raw, json)
Hash identifier:          iAacFbqI7veF+dJSB1a6/Fcw//4ZEKwOX9x2faBudo8=
Subject key identifier:   B6:62:19:B2:F6:15:2F:C0:7B:46:FE:49:C7:E2:86:4A:49:B8:54:FC
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CCA0BA0F9A9BD23B8BC00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/76a29e18-3a59-30f3-9af2-b1012f3e5498.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     3356
IP address blocks:        104.253.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:ca:0b:a0:f9:a9:bd:23:b8:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=04a8bf6a-206b-4752-b30a-f86823c48eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6a:a5:f3:45:01:47:54:5a:1e:52:ce:67:eb:
                    45:4d:0c:90:ca:36:61:78:39:6d:bf:42:4a:66:c8:
                    65:80:e7:65:f2:df:e4:d2:a1:9d:98:06:2e:23:8a:
                    96:46:a5:35:69:fb:6a:2e:64:e7:aa:3b:8a:8a:b1:
                    d5:17:7e:2a:87:6a:63:ab:81:90:eb:ad:2a:9c:e3:
                    d6:83:33:9a:24:aa:e9:c0:b9:52:7a:7b:05:27:a7:
                    15:02:a4:bb:f7:3a:81:31:bf:73:81:d5:38:fb:6c:
                    3a:53:3d:ac:b4:61:07:74:aa:e6:16:0a:0a:a7:5e:
                    41:8c:7a:0c:37:3c:b9:40:39:7b:99:bd:f4:2c:fc:
                    ed:e0:4d:12:0a:70:7d:80:4c:81:18:40:f3:ef:55:
                    e9:16:cb:26:7a:4d:6a:87:e3:54:92:13:37:7f:47:
                    fe:52:67:b7:d1:24:86:eb:c0:86:23:f2:11:f3:97:
                    ab:9b:e8:3b:35:1b:5b:a8:ec:30:15:c6:49:56:da:
                    9c:c4:38:b5:37:3e:de:ef:88:3a:76:36:83:94:de:
                    64:ee:4a:5c:ea:62:ab:1f:fc:e0:c5:82:bb:38:c9:
                    fb:6e:be:3a:36:de:2f:bc:26:c8:0b:37:e7:46:55:
                    72:69:8d:b7:d9:d6:e9:44:51:36:32:7d:da:4e:9c:
                    75:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:62:19:B2:F6:15:2F:C0:7B:46:FE:49:C7:E2:86:4A:49:B8:54:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/76a29e18-3a59-30f3-9af2-b1012f3e5498.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:c6:2f:00:21:e2:e7:d5:51:5f:c5:2a:f7:a1:6c:db:95:df:
         7d:58:1c:c3:c6:de:22:9c:80:bf:22:5b:a4:fb:32:cf:fa:6d:
         26:08:71:bf:b5:2b:25:a7:74:6c:cd:c6:54:d9:89:33:ec:d6:
         31:5b:d7:f4:30:9d:d7:8b:68:bf:f8:c4:dc:85:8d:ea:e9:30:
         4f:7b:1d:a0:ea:15:f4:f3:fd:1e:3e:02:8b:a4:a0:41:b8:e3:
         b8:2e:fa:01:d6:8a:76:44:8f:b1:d4:1f:85:1c:25:00:a7:1f:
         91:f6:87:cd:d3:26:a3:be:6d:a7:35:63:a2:77:3e:f9:1c:0b:
         2f:b4:11:b9:59:cd:d9:ca:cc:4b:97:2a:0f:87:ac:bc:94:46:
         db:21:87:57:d3:13:89:f0:52:31:19:f7:6f:1f:87:c8:9a:90:
         5d:d3:79:94:79:27:a5:00:74:63:b0:a7:2f:04:08:4e:96:23:
         0f:c6:a1:37:6d:9d:11:35:63:f1:d0:e8:9e:c1:8b:43:2c:fc:
         fd:fb:1f:be:1a:9c:4f:39:df:ac:8c:61:45:ab:32:cb:20:8c:
         ab:09:63:a0:5c:a7:bc:ab:8c:40:2d:46:f3:85:75:13:18:f5:
         e6:c0:f2:3d:e0:0b:a3:cd:34:77:ae:66:52:d5:23:28:11:1e:
         23:a1:84:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:03:23 2026 by rpki-client