Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/eb615ec8-5b71-303e-85e7-5d40dafe0c6a.roa
File:                     eb615ec8-5b71-303e-85e7-5d40dafe0c6a.roa (raw, json)
Hash identifier:          SgQE8FkW01aoZBAyES8+HED0g9IJ1AZZ9q3hFzuJjTA=
Subject key identifier:   51:E4:3B:B3:E1:62:DA:C1:86:8E:42:49:2C:76:57:4C:65:FF:C9:72
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CF4A50C3915C7001DAD80
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/eb615ec8-5b71-303e-85e7-5d40dafe0c6a.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     9009
IP address blocks:        104.252.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:f4:a5:0c:39:15:c7:00:1d:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=57492c83-486c-4fa8-a353-036232c8dabb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f5:88:23:db:92:3b:50:38:82:73:e5:75:5f:
                    9e:a4:8c:bc:d4:f4:75:4e:e9:12:be:66:2d:ab:f4:
                    43:ff:b5:a3:e7:b1:a3:9a:c6:38:42:2d:fa:d4:d9:
                    26:3c:a4:da:b6:5d:3d:a7:e0:c3:60:d2:2c:a7:a4:
                    73:f6:f8:53:04:2b:b0:7c:fd:49:8b:80:69:70:cd:
                    1d:d1:cf:7a:2b:e8:49:79:2c:c9:f9:d7:74:b2:97:
                    8c:38:19:5e:84:30:88:4e:bf:c8:20:19:3c:72:50:
                    13:02:90:43:0e:f0:31:c9:00:da:85:1c:53:0c:4a:
                    8c:c0:a4:bb:c8:c3:24:b5:f4:b0:fa:2b:01:e3:0e:
                    1f:38:53:e7:43:f2:74:3d:35:a5:56:6a:cf:b2:50:
                    b7:3c:eb:70:d3:66:a9:84:c8:8d:9a:4f:ed:2e:d0:
                    33:d9:44:51:15:70:39:0e:1b:ce:a0:a9:a4:66:51:
                    0b:f1:97:b2:c0:87:49:6f:91:50:5f:51:18:0b:f5:
                    5d:85:18:35:ff:e7:a6:f0:4f:8f:4a:53:bb:57:e0:
                    2a:11:f6:cb:ac:8b:50:7b:c0:8c:7b:56:3e:fd:e4:
                    d2:81:d4:fc:cf:5c:d1:35:1e:39:ec:e3:d9:5b:ef:
                    f2:3e:c5:01:67:34:99:f5:4e:10:e5:f6:9e:f0:82:
                    81:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E4:3B:B3:E1:62:DA:C1:86:8E:42:49:2C:76:57:4C:65:FF:C9:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/eb615ec8-5b71-303e-85e7-5d40dafe0c6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:aa:7b:59:53:d3:48:6b:f7:77:e3:2e:6d:bf:a4:a1:62:9e:
         14:f4:dc:12:f7:9f:2e:d5:81:0b:2b:ac:78:88:96:b3:ca:a7:
         56:30:6c:02:b4:52:17:ca:44:9d:3d:aa:69:0b:f4:0f:dd:ed:
         ac:f9:ab:f6:5d:a4:1f:e4:70:c0:7c:8b:46:03:73:ba:29:78:
         21:ec:99:12:33:67:a6:1b:4a:8e:25:78:81:74:1f:c4:7c:ba:
         87:d6:a5:ab:ed:fe:72:6a:05:22:ec:81:13:50:8f:b0:ee:ab:
         da:99:b0:1d:75:cb:bb:a7:37:c1:01:57:f0:ed:df:e9:ed:c9:
         86:21:a2:76:cb:04:16:3e:d2:2c:10:06:4f:8a:6c:05:18:41:
         ad:a2:c1:d0:90:eb:c2:a8:46:e5:ec:29:6c:62:2b:96:51:15:
         0f:3d:3b:ad:ce:33:56:bb:06:39:b9:67:80:69:ef:3e:f7:0f:
         2d:b7:71:8a:98:90:df:0c:ad:19:4c:7a:14:84:98:e6:3c:b1:
         f9:7f:b9:9b:cf:b7:e2:7e:d8:6a:c6:c3:fc:37:da:d4:7c:5c:
         2a:4e:6d:e5:25:df:97:8c:61:12:c1:27:5c:68:35:67:6c:fe:
         01:80:35:65:02:12:59:24:59:3e:71:34:92:6d:e8:32:68:2f:
         0f:b9:27:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHPSlDDkVxwAdrYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk
NTc0OTJjODMtNDg2Yy00ZmE4LWEzNTMtMDM2MjMyYzhkYWJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfWII9uSO1A4gnPldV+epIy81PR1TukSvmYt
q/RD/7Wj57GjmsY4Qi361NkmPKTatl09p+DDYNIsp6Rz9vhTBCuwfP1Ji4BpcM0d
0c96K+hJeSzJ+dd0speMOBlehDCITr/IIBk8clATApBDDvAxyQDahRxTDEqMwKS7
yMMktfSw+isB4w4fOFPnQ/J0PTWlVmrPslC3POtw02aphMiNmk/tLtAz2URRFXA5
DhvOoKmkZlEL8ZeywIdJb5FQX1EYC/VdhRg1/+em8E+PSlO7V+AqEfbLrItQe8CM
e1Y+/eTSgdT8z1zRNR457OPZW+/yPsUBZzSZ9U4Q5fae8IKB6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFHkO7PhYtrBho5CSSx2V0xl/8lyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvZWI2MTVlYzgtNWI3MS0z
MDNlLTg1ZTctNWQ0MGRhZmUwYzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPx1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFCqe1lT00hr93fjLm2/pKFinhT03BL3ny7VgQsrrHiIlrPKp1YwbAK0
UhfKRJ09qmkL9A/d7az5q/ZdpB/kcMB8i0YDc7opeCHsmRIzZ6YbSo4leIF0H8R8
uofWpavt/nJqBSLsgRNQj7Duq9qZsB11y7unN8EBV/Dt3+ntyYYhonbLBBY+0iwQ
Bk+KbAUYQa2iwdCQ68KoRuXsKWxiK5ZRFQ89O63OM1a7Bjm5Z4Bp7z73Dy23cYqY
kN8MrRlMehSEmOY8sfl/uZvPt+J+2GrGw/w32tR8XCpObeUl35eMYRLBJ1xoNWds
/gGANWUCElkkWT5xNJJt6DJoLw+5JzY=
-----END CERTIFICATE-----
Generated at Mon Sep 21 14:57:42 2026 by rpki-client