Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a042afea-291d-36bf-ba5e-527b192c1dbe.roa
File:                     a042afea-291d-36bf-ba5e-527b192c1dbe.roa (raw, json)
Hash identifier:          1G+iU57YpGRml+0W9KyhO/8zzUViueiZ7HhE8UripmU=
Subject key identifier:   BD:32:CA:58:3C:7A:39:57:00:CE:9C:46:26:01:F9:E9:F9:F4:01:7E
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CF1E569DFD440A6CE3E00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a042afea-291d-36bf-ba5e-527b192c1dbe.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     398781
IP address blocks:        104.252.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:f1:e5:69:df:d4:40:a6:ce:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=cb5083b4-e462-4b15-81a1-db3b426523b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:22:07:21:d1:82:81:fd:d6:20:1a:54:a2:70:
                    9d:8e:15:b7:eb:18:9a:45:10:38:fd:77:29:4c:99:
                    33:d3:11:7c:a3:53:0e:6b:df:0b:a5:74:cf:ea:84:
                    5c:fc:15:80:b5:0d:57:ad:c5:71:8a:fd:3f:b2:81:
                    53:66:f0:da:55:91:db:17:75:df:ad:3e:15:58:1f:
                    f2:81:bb:7e:79:d6:5e:23:33:6e:54:d0:3d:79:d5:
                    4a:30:b4:13:05:9d:58:c7:e2:5b:62:be:21:12:7e:
                    c7:a7:7e:1b:cf:87:3b:66:fe:9f:cb:b4:88:f5:84:
                    c0:bb:b3:bd:27:5b:d6:97:3c:ae:88:dd:dd:12:dd:
                    bb:8c:19:7d:16:1d:16:df:08:72:6f:97:18:60:bd:
                    0e:27:5e:9c:a1:41:cd:97:61:16:d9:2f:c7:09:45:
                    e9:13:75:e5:9d:79:25:7e:2b:ea:a2:f2:8e:78:59:
                    eb:33:42:ca:5a:df:73:f0:34:0f:0f:4e:c1:da:a0:
                    5c:55:38:7d:38:da:9a:11:56:25:45:46:a7:b9:40:
                    9d:95:7b:96:2e:2c:11:03:1e:7b:a9:37:eb:d1:60:
                    bc:fd:96:40:99:06:26:18:0f:83:f7:60:64:a9:1d:
                    24:cf:cb:d4:c2:5a:94:fb:85:39:ff:1d:ea:c2:37:
                    0c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:32:CA:58:3C:7A:39:57:00:CE:9C:46:26:01:F9:E9:F9:F4:01:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a042afea-291d-36bf-ba5e-527b192c1dbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:9a:f0:81:50:a2:a2:85:32:15:78:aa:d6:7e:9f:d0:94:e9:
         ee:49:7d:a3:79:be:9f:2b:f4:94:7e:d6:4a:bc:1c:73:4f:01:
         9a:ca:f1:88:af:af:b5:19:8f:94:28:08:e7:73:29:34:8a:6a:
         02:a0:20:86:2c:69:c2:00:00:64:f3:c0:61:63:dc:f1:21:4f:
         88:f1:44:5f:af:51:f6:ef:db:5e:b5:20:69:f3:8b:51:95:18:
         b0:a4:42:08:68:57:e6:19:39:a2:d6:b1:27:bc:63:28:c0:64:
         9a:11:68:f6:d6:2a:2f:9f:dd:dd:18:72:3f:60:3a:3e:4d:7c:
         7e:f1:b7:36:5d:42:5b:fa:20:08:06:a4:04:27:4d:98:85:5f:
         b9:04:85:4d:ba:a1:6c:db:32:56:c4:c7:79:5d:8f:3e:1b:e0:
         6e:7f:3b:bc:10:62:68:f5:27:23:02:70:47:2d:ec:c9:fc:ad:
         ce:fc:2c:3e:bb:08:6f:b6:1e:e3:23:28:a7:76:74:c4:c6:88:
         8f:7d:39:15:fa:75:60:34:a6:97:60:3c:f6:ff:82:22:8d:2f:
         ef:eb:ed:68:45:c3:89:ab:f0:49:42:cc:9e:0d:18:18:91:2e:
         15:24:44:1e:90:2f:2d:d4:fc:1c:53:ae:28:da:9a:e8:d3:4c:
         aa:e5:d5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:15:58 2026 by rpki-client