Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b0d0df67-10c7-36d3-b0eb-e6fd5e40a1fe.roa
File:                     b0d0df67-10c7-36d3-b0eb-e6fd5e40a1fe.roa (raw, json)
Hash identifier:          aFcU9DdCDNzwhd/ScSDSZa6UF307980VANbjYKJu8mw=
Subject key identifier:   AE:77:47:CF:74:1C:70:63:68:93:42:BA:38:60:9D:EE:E7:9E:4B:36
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CE562B259454107E14200
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b0d0df67-10c7-36d3-b0eb-e6fd5e40a1fe.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     212238
IP address blocks:        104.252.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:e5:62:b2:59:45:41:07:e1:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=6ceddb45-4b22-4057-a66d-0acedb3fce8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:cf:91:61:d7:40:a9:76:fc:70:dd:3b:8e:66:
                    e1:0d:5d:e4:11:1d:62:12:a4:f7:8a:e7:b1:60:38:
                    ac:17:20:dd:ec:ea:0b:17:ad:e0:5e:47:08:db:a1:
                    9c:6d:83:14:c1:f6:7a:77:40:8a:40:08:40:8c:c2:
                    2b:77:a2:dd:7b:4c:79:d0:b3:52:af:ce:23:8d:ea:
                    ee:22:7b:51:75:dd:2f:94:b8:66:29:43:b9:db:18:
                    5d:71:69:8a:8d:5e:92:4f:9d:40:80:81:2a:42:b5:
                    23:e2:6c:06:07:9b:08:ae:d3:0b:a9:9e:b8:ee:83:
                    eb:e5:e6:65:74:ad:ec:57:ff:b9:57:2a:7e:2a:b9:
                    b3:e6:b6:6e:40:40:61:57:c6:8f:a5:fd:94:30:11:
                    ec:8d:8d:55:aa:8f:73:bb:9c:c9:da:86:8a:b4:2d:
                    52:b6:44:8a:a6:74:e1:9c:a7:17:67:58:13:4d:5f:
                    6c:f0:1b:35:bb:5b:e3:d9:83:f7:73:1b:e5:94:ed:
                    cd:09:a5:f6:3a:82:1b:10:8d:63:cc:c4:5a:b3:2a:
                    f5:89:eb:e3:ec:34:3f:5b:e3:c5:92:c5:b8:36:d2:
                    d3:e7:cb:7f:8e:74:7c:bd:49:7f:e1:b7:38:e0:ca:
                    88:5e:b9:c9:b2:ef:db:bc:48:2d:98:52:ba:97:9a:
                    6b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:77:47:CF:74:1C:70:63:68:93:42:BA:38:60:9D:EE:E7:9E:4B:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b0d0df67-10c7-36d3-b0eb-e6fd5e40a1fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:0c:a5:67:d6:7a:74:e0:63:96:79:ad:56:19:95:52:e6:af:
         61:f3:51:87:7f:f6:d5:f0:0b:e1:ff:52:7c:7a:23:63:a0:da:
         0d:96:9b:ad:49:7c:90:c1:77:90:81:b1:dc:f7:42:42:52:95:
         c0:12:3e:f7:bf:61:37:97:ff:66:98:9f:bd:c3:0a:21:e5:e1:
         e0:be:5a:af:81:f0:a3:d6:ac:a5:a2:75:4c:a0:91:a1:50:6d:
         72:a4:15:ef:a3:72:af:ec:a5:fa:6a:0a:75:cd:7d:f0:30:d3:
         34:45:01:71:b2:7e:49:26:bf:cb:2d:5c:1e:e0:b1:88:41:d8:
         9a:de:2b:84:11:68:5f:34:a6:54:be:6d:a9:bd:c2:bd:60:08:
         d1:bb:11:0d:8c:36:d9:d9:aa:48:ce:6d:3b:39:75:6a:25:13:
         00:b5:5e:6a:0f:f4:c9:19:61:55:07:87:59:17:b0:92:af:9b:
         09:27:32:7a:ed:67:4d:c0:a2:9e:98:66:e8:35:bb:4f:f0:06:
         c6:88:8b:62:73:16:eb:52:31:79:9b:f1:1b:f0:68:86:fc:2d:
         ab:30:54:a0:a4:ff:47:db:88:46:7c:43:d9:c6:e3:73:22:74:
         55:91:11:a3:4f:bc:69:f4:3d:df:f2:2d:ed:3b:5b:66:91:f0:
         4f:f1:dc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:15:40 2026 by rpki-client