Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d0859e17-317b-3ed0-9a07-601f52cc00c8.roa
File:                     d0859e17-317b-3ed0-9a07-601f52cc00c8.roa (raw, json)
Hash identifier:          kB9jFDeI6g1kkhaxv69bL9aLjqj5WIbwgmWMOaEmO44=
Subject key identifier:   4D:2D:B9:9B:AD:A9:87:BB:0D:70:C3:74:82:56:6C:B7:D8:B7:3F:00
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584F1B62469B69A5237D2D48FF20
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d0859e17-317b-3ed0-9a07-601f52cc00c8.roa
Signing time:             Tue 08 Sep 2026 13:00:12 +0000
ROA not before:           Tue 08 Sep 2026 13:00:12 +0000
ROA not after:            Mon 07 Dec 2026 14:00:12 +0000
asID:                     400402
IP address blocks:        104.253.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1b:62:46:9b:69:a5:23:7d:2d:48:ff:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Sep  8 13:00:12 2026 GMT
            Not After : Dec  7 14:00:12 2026 GMT
        Subject: CN=0c560de5-2c46-4c5e-a088-385a178abc20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a3:a0:4b:88:8b:08:19:e0:fe:d9:e9:d3:b6:
                    e4:68:fd:01:b1:9c:f4:d3:38:d9:13:52:25:9d:74:
                    54:47:4e:33:bc:cc:a3:da:13:22:94:e6:32:46:0e:
                    d5:f9:97:cf:b2:cc:33:b8:18:99:b0:b7:1a:4f:21:
                    1c:51:2b:b5:3b:2f:ea:b1:76:26:13:b2:0b:8a:d6:
                    c2:6c:de:76:2b:0a:5b:d9:88:2a:3d:5d:aa:b0:67:
                    53:59:29:82:91:8a:38:ca:fc:c9:45:ce:75:b7:f8:
                    0d:5c:3a:18:42:68:51:0f:19:06:b5:0a:21:27:4b:
                    f0:f3:5c:98:47:8c:b3:d5:4b:2c:fc:07:60:d7:c5:
                    f8:ed:13:f2:3f:2e:d8:52:4f:1f:99:ff:55:3f:3f:
                    ce:91:ad:df:ea:f5:a9:96:98:ff:44:ce:10:0c:85:
                    51:a1:bc:63:b1:4d:34:d8:9d:44:76:58:9f:e1:73:
                    3a:5d:29:40:44:ba:6e:f9:82:e5:b7:90:c9:68:79:
                    91:e6:23:95:88:b5:d6:b7:11:ec:2e:18:fe:b8:b4:
                    12:97:04:82:08:ed:e3:24:be:21:0d:17:3e:f8:8f:
                    92:59:9b:46:2f:5d:ba:fc:d0:b2:a8:6f:f0:c9:c5:
                    1d:64:ed:2a:95:1f:2d:66:f6:63:3b:93:05:eb:ac:
                    a7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:2D:B9:9B:AD:A9:87:BB:0D:70:C3:74:82:56:6C:B7:D8:B7:3F:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d0859e17-317b-3ed0-9a07-601f52cc00c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:a0:fa:1e:71:0e:94:c0:b2:86:27:11:ba:78:42:51:37:22:
         82:89:fd:ea:a9:30:e9:40:f1:88:85:c4:44:f5:2c:df:34:61:
         08:fc:89:5e:0d:3d:e4:88:7e:e0:de:0c:18:27:ca:96:a7:3a:
         e0:93:cd:14:18:a9:7c:6c:6b:39:3b:e3:2b:9c:52:32:f6:39:
         08:03:08:06:c3:1f:52:1f:4f:a6:26:f8:5d:c5:b1:c9:20:ba:
         dd:35:ed:aa:5d:86:a3:6a:83:6d:fd:45:25:70:dc:b4:4b:de:
         3b:fb:f7:24:7c:bc:34:6e:54:2c:73:7c:13:16:5c:49:9f:ea:
         03:cb:b6:6c:6e:00:6c:cc:9a:b3:14:9e:80:a5:53:a7:b2:cb:
         8e:a4:44:78:f3:5e:92:8e:2f:02:21:1c:26:ef:e9:96:9e:f4:
         9a:8a:77:e3:cc:e1:4a:0d:0c:47:12:30:12:23:10:20:75:7e:
         50:e7:e3:d1:ea:bc:8c:e6:89:72:90:2c:b9:0e:b1:6f:64:5d:
         f6:e8:ae:90:5f:b5:0b:dd:6f:50:2d:28:dc:64:23:c7:c0:31:
         9b:57:58:0c:c5:6f:1f:2c:b0:e8:7c:6b:32:4b:66:35:7c:a9:
         79:24:53:f7:d4:f2:9f:f9:89:9e:4f:74:ba:81:8a:d8:5c:9a:
         e5:c0:94:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:42:56 2026 by rpki-client