Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/dacaa57c-10d2-306d-ae96-6a90dc4c3e49.roa
File:                     dacaa57c-10d2-306d-ae96-6a90dc4c3e49.roa (raw, json)
Hash identifier:          u7NGz1zxgZ8ueDMmJUMrA7zrQYQYdKJz5/GD/Obz4yY=
Subject key identifier:   C2:05:8F:73:5D:C6:61:C4:29:D5:78:A8:00:EA:01:63:0C:7B:11:0D
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CACE2555339ECDD0C93E0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/dacaa57c-10d2-306d-ae96-6a90dc4c3e49.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     262287
IP address blocks:        104.253.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:ac:e2:55:53:39:ec:dd:0c:93:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=de008015-e261-4c72-8910-a814a32f95b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e4:07:e2:92:80:1d:82:a8:9b:c9:39:b0:2d:
                    aa:30:d9:42:7f:3d:8d:c2:82:e1:41:4a:3e:55:6a:
                    6e:3c:65:d0:51:47:2b:73:7d:a4:71:b6:b8:57:03:
                    d8:d1:d2:eb:99:28:3f:cd:d5:1a:77:36:f9:f1:40:
                    d3:38:b5:38:4d:d2:46:18:67:69:30:1f:47:73:d4:
                    7e:28:63:6f:aa:65:31:ae:9a:fa:bd:03:3d:97:1d:
                    62:56:5b:b1:60:13:52:18:3a:86:84:8e:22:05:80:
                    40:4b:18:72:3b:60:ed:7d:94:59:e7:bd:d7:95:a1:
                    95:81:d0:fe:ef:a8:be:5a:4b:a8:bd:29:02:d9:94:
                    f0:37:ba:00:2f:5b:5a:d9:d3:e4:86:6f:23:76:0a:
                    12:7f:bd:26:a3:a8:e4:a4:61:4d:c0:c8:d2:7c:5c:
                    a9:e3:c6:d0:30:1d:1b:f9:48:5c:cc:94:7b:d7:17:
                    47:3a:c0:b3:45:92:48:ce:11:95:10:77:02:1f:ed:
                    a2:e3:42:a2:f6:05:24:be:a6:c5:aa:d9:5a:09:52:
                    28:4f:1e:19:54:0e:d6:23:be:8e:45:20:79:96:85:
                    09:f2:89:51:4b:52:28:c4:5a:a6:d4:ed:49:32:af:
                    cc:3a:5e:ba:8d:25:44:6c:23:12:87:02:53:0e:3e:
                    26:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:05:8F:73:5D:C6:61:C4:29:D5:78:A8:00:EA:01:63:0C:7B:11:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/dacaa57c-10d2-306d-ae96-6a90dc4c3e49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:d2:d6:18:b7:61:1f:b2:04:0d:c9:ba:76:83:1a:91:bd:e3:
         c6:38:cb:01:7d:f8:29:b7:22:bc:53:be:c4:e0:60:d5:82:fd:
         e6:e6:84:d7:a7:ed:c7:31:b8:02:21:3b:e4:2d:c7:2c:5c:74:
         44:39:e4:65:0f:d9:1e:9f:2f:e3:bf:1b:9e:03:f6:c3:72:b7:
         a8:fa:d9:11:ce:df:0f:13:34:1f:ef:fe:4c:3a:5d:8b:52:2f:
         55:af:55:76:ac:26:98:a3:2b:50:08:b6:3c:ce:0a:7b:f0:d7:
         39:52:29:36:91:44:43:c0:9b:cc:be:ee:ad:47:68:59:e9:83:
         94:5a:c2:18:f4:1d:f5:c7:ff:68:98:0f:22:77:aa:54:9d:e8:
         d9:11:69:83:2d:4b:bb:6f:a2:77:b0:cd:35:01:f7:0e:98:32:
         9c:ae:99:9c:fb:19:85:7e:95:f2:88:3e:64:f4:b4:9a:89:b8:
         a9:95:6c:b9:31:a9:74:c7:32:e2:f9:53:df:08:ae:d0:c2:f5:
         be:78:03:b4:54:65:41:d6:08:06:f4:8e:a4:20:35:77:73:59:
         d9:24:88:2a:99:bc:91:d8:6c:d3:9f:30:06:65:1b:52:75:d3:
         cd:3b:91:ad:fc:31:7f:29:0d:00:fa:06:49:6e:79:94:8b:ef:
         ca:eb:46:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:42:55 2026 by rpki-client