Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/9e39691a-696e-33d8-82b0-46d665cca74e.roa
File:                     9e39691a-696e-33d8-82b0-46d665cca74e.roa (raw, json)
Hash identifier:          QCoVV1DtT6FpAUx0cJLc6keSeQQIvphTEEhjiq3Nr7g=
Subject key identifier:   35:36:A7:C3:51:42:0E:92:28:84:96:C6:CE:15:53:42:9C:05:EE:3B
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EA791455E991EA54CB9AFF940
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/9e39691a-696e-33d8-82b0-46d665cca74e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12741
IP address blocks:        104.253.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:45:5e:99:1e:a5:4c:b9:af:f9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8e2dc1f0-6a90-4ba4-a6bc-6c3ce3f11bc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a8:48:56:9a:e7:74:ea:7f:a7:69:02:00:da:
                    9f:17:ac:a3:fb:e0:a1:bc:9f:00:90:46:ff:fb:68:
                    1b:fe:3a:d8:39:05:bc:5d:fe:f5:b6:34:4d:11:d5:
                    32:58:9c:12:96:7d:4d:09:9f:8f:d3:54:c0:17:78:
                    7c:96:cc:e6:26:3b:42:9d:23:bc:75:01:11:71:37:
                    68:4d:01:a8:9c:2b:de:81:bb:2c:fd:cc:29:ef:0d:
                    86:68:14:1b:3f:9c:ba:eb:b0:68:5b:f6:19:b2:46:
                    d2:18:18:7e:c1:f6:0d:e2:80:97:d1:e4:26:92:86:
                    2e:c4:97:38:c0:91:ae:c4:70:0b:a4:d3:dc:ae:12:
                    32:d3:17:04:f0:55:d5:a8:72:3d:21:68:39:3f:d4:
                    fc:8b:2c:e4:78:a9:ee:25:f5:40:26:46:50:2d:84:
                    b7:ee:a0:19:a2:a4:21:72:0f:84:bb:4d:9d:d4:fe:
                    3f:de:65:69:f6:19:ba:ef:34:82:f1:af:6c:d3:fa:
                    a5:c8:30:9a:7e:54:46:60:a5:9d:36:b1:ba:61:63:
                    e9:0e:b9:94:fa:84:9f:80:82:6d:04:d5:91:31:68:
                    04:7d:bf:d3:40:ef:05:16:26:88:19:f3:b1:69:22:
                    b4:f2:ad:c7:05:90:e4:92:bc:62:42:6b:ef:ce:76:
                    cd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:36:A7:C3:51:42:0E:92:28:84:96:C6:CE:15:53:42:9C:05:EE:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/9e39691a-696e-33d8-82b0-46d665cca74e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:e6:9b:28:9d:bc:f2:61:14:55:08:b1:3a:6c:b9:5d:38:89:
         96:e9:cc:3a:fc:af:39:37:04:60:62:a6:84:a1:17:92:a0:08:
         93:b0:6c:ad:f8:c0:8f:a4:a7:c3:71:f6:2d:b9:46:e0:f8:b8:
         30:1d:70:77:ab:12:ff:25:e7:e4:15:63:31:2e:bc:e2:5e:c8:
         ca:aa:b8:ec:b3:84:56:c1:23:72:78:8f:21:ca:7e:dc:2f:d8:
         93:a1:ba:f1:ea:67:81:6c:0b:34:b7:b4:e1:46:3e:05:59:b9:
         6a:d9:e9:ab:f4:38:c9:b7:a7:6e:36:95:6b:9b:4a:d8:a9:4c:
         60:83:81:90:d7:d0:ed:51:95:58:d8:5f:2f:98:7e:d2:a3:b4:
         53:71:8b:9b:be:96:53:dd:18:62:9b:61:6d:03:36:5e:75:00:
         96:20:0e:bc:4a:57:c4:c5:e1:ef:0b:97:0f:75:0b:b9:82:2b:
         8e:fe:2f:f9:e3:d0:0d:68:6f:9a:a8:a9:e7:f9:a8:be:a9:c7:
         46:77:b9:fc:f6:74:df:87:27:ce:4d:02:52:88:d8:27:ea:25:
         51:86:99:46:00:a3:b6:f7:44:e2:37:b0:91:32:b0:a8:d3:e8:
         4a:e5:25:b1:a4:ed:a1:7a:1b:00:fd:b3:5f:a7:b6:20:93:8b:
         db:c2:fa:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:14:52 2026 by rpki-client