Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/8a2d7ff5-94ca-3761-ad0f-84be9391bf40.roa
File:                     8a2d7ff5-94ca-3761-ad0f-84be9391bf40.roa (raw, json)
Hash identifier:          cmZlTwKCteX3XmZ6DMwU9QvrmzgEUHfd8gt/mdvbIJ8=
Subject key identifier:   C7:ED:13:1B:E1:8C:2C:29:E7:A5:61:2B:D4:C6:F7:96:0D:0A:82:99
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CB545106467208B2B8F00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/8a2d7ff5-94ca-3761-ad0f-84be9391bf40.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     64267
IP address blocks:        104.253.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:b5:45:10:64:67:20:8b:2b:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=71a36cc8-ba6d-4661-8be7-391cf80163af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:be:5a:fd:67:70:da:bb:76:bf:38:30:c7:84:
                    1e:3c:6e:6e:ff:35:2e:6f:ba:06:ce:6d:c1:5e:22:
                    40:7e:ed:9a:c5:66:21:7b:45:10:a7:84:fc:ff:9c:
                    86:b8:46:60:08:03:ed:b1:6e:ce:f6:de:67:c2:c4:
                    76:a9:65:7d:81:97:8b:e1:d8:dc:7d:b9:a5:1d:93:
                    ab:bf:4a:7e:77:0b:60:18:cf:bf:39:d6:4a:61:7f:
                    37:44:e6:0b:56:bb:bb:d2:32:51:ff:23:45:93:0a:
                    5d:ba:2c:23:10:fd:d3:42:64:34:38:41:b0:ca:42:
                    a6:20:72:77:46:3b:bf:15:f5:93:2c:63:01:a8:3b:
                    22:1f:dc:56:b5:75:06:8c:e2:45:87:c6:d5:c7:04:
                    8d:ba:9e:14:ec:81:9e:b9:b1:53:8e:07:47:fe:67:
                    45:a5:c4:d8:65:04:74:01:ab:ef:07:87:47:32:bd:
                    a5:6a:4b:f6:d0:98:2d:97:5a:aa:85:2c:70:48:f3:
                    63:2e:39:f1:8a:13:f7:5a:b8:b5:ec:93:61:f4:f0:
                    df:d3:27:23:ed:33:20:18:b4:65:0c:8a:f8:2e:cf:
                    ce:c5:13:cf:a7:29:c9:10:2b:97:7c:7d:fb:3d:42:
                    aa:89:58:4c:7c:f0:73:f2:b2:b8:e3:df:d7:d0:2c:
                    6c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:ED:13:1B:E1:8C:2C:29:E7:A5:61:2B:D4:C6:F7:96:0D:0A:82:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/8a2d7ff5-94ca-3761-ad0f-84be9391bf40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:d6:e1:d1:19:e7:8b:e7:b4:2d:5c:ff:4f:67:52:24:32:66:
         97:45:64:db:36:f9:fa:33:8e:2e:a0:67:40:ae:3e:c1:e5:8c:
         78:85:52:ce:fa:3f:71:56:06:41:b1:5d:cb:81:86:a4:d5:95:
         5d:08:de:0f:f1:b3:bd:a8:80:90:0d:fe:90:48:6b:47:0b:f6:
         0c:8b:1c:93:6f:ba:91:52:96:67:eb:d7:b0:15:8c:df:ca:8a:
         da:52:96:b2:2c:bc:f9:3c:48:22:23:a8:bb:78:1f:a9:e8:f5:
         f8:b5:99:17:42:f0:38:c4:4b:e0:dc:33:f5:af:b6:d3:2d:a7:
         17:a2:90:32:f1:34:2e:9d:29:8c:7e:df:cd:60:18:a9:d0:b9:
         84:a1:ca:54:2e:52:89:c4:0a:d6:c6:22:27:2c:7d:bf:54:7e:
         d2:ca:cf:ec:25:87:43:29:60:2a:e2:6c:7d:04:7f:ad:55:5c:
         db:b7:bd:f8:d1:7c:35:74:fd:94:a2:a7:8f:74:b5:9d:a4:cd:
         81:02:a3:cc:63:f3:f5:df:96:c9:87:6e:4f:99:5a:0a:94:09:
         af:a7:42:91:a6:de:d3:4d:5c:24:4f:d6:52:49:c3:ad:8b:cd:
         01:01:ba:65:6a:3f:ec:1d:a2:63:79:ec:82:14:d9:36:40:54:
         db:70:2a:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHLVFEGRnIIsrjwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk
NzFhMzZjYzgtYmE2ZC00NjYxLThiZTctMzkxY2Y4MDE2M2FmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmL5a/Wdw2rt2vzgwx4QePG5u/zUub7oGzm3B
XiJAfu2axWYhe0UQp4T8/5yGuEZgCAPtsW7O9t5nwsR2qWV9gZeL4djcfbmlHZOr
v0p+dwtgGM+/OdZKYX83ROYLVru70jJR/yNFkwpduiwjEP3TQmQ0OEGwykKmIHJ3
Rju/FfWTLGMBqDsiH9xWtXUGjOJFh8bVxwSNup4U7IGeubFTjgdH/mdFpcTYZQR0
AavvB4dHMr2lakv20Jgtl1qqhSxwSPNjLjnxihP3Wri17JNh9PDf0ycj7TMgGLRl
DIr4Ls/OxRPPpynJECuXfH37PUKqiVhMfPBz8rK449/X0CxswwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMftExvhjCwp56VhK9TG95YNCoKZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvOGEyZDdmZjUtOTRjYS0z
NzYxLWFkMGYtODRiZTkzOTFiZjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP32MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABTW4dEZ54vntC1c/09nUiQyZpdFZNs2+fozji6gZ0CuPsHljHiFUs76
P3FWBkGxXcuBhqTVlV0I3g/xs72ogJAN/pBIa0cL9gyLHJNvupFSlmfr17AVjN/K
itpSlrIsvPk8SCIjqLt4H6no9fi1mRdC8DjES+DcM/WvttMtpxeikDLxNC6dKYx+
381gGKnQuYShylQuUonECtbGIicsfb9UftLKz+wlh0MpYCribH0Ef61VXNu3vfjR
fDV0/ZSip490tZ2kzYECo8xj8/XflsmHbk+ZWgqUCa+nQpGm3tNNXCRP1lJJw62L
zQEBumVqP+wdomN57IIU2TZAVNtwKhA=
-----END CERTIFICATE-----
Generated at Sun Sep 20 23:37:59 2026 by rpki-client