Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/0ae83657-7de5-339f-b057-4fcb05f15a58.roa
File:                     0ae83657-7de5-339f-b057-4fcb05f15a58.roa (raw, json)
Hash identifier:          BgEbsLgOy4nA4R3IFmneovTgmD06GYwBAPJrXH9IpOs=
Subject key identifier:   6D:02:87:25:CC:08:4E:43:1E:5E:56:8B:9F:2B:8B:29:06:E8:C6:8C
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584F51D2A866130AAB8B9E2F4D00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/0ae83657-7de5-339f-b057-4fcb05f15a58.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     3561
IP address blocks:        104.253.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:a8:66:13:0a:ab:8b:9e:2f:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=669f3424-0e85-478a-9d73-7711f64bd1d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:94:11:31:5a:b0:94:c4:a1:26:38:50:d9:12:
                    7f:27:97:ce:b2:85:0c:22:a7:9d:63:3b:f7:a5:9b:
                    77:fe:84:b8:f7:b8:13:3c:3d:ca:a6:10:b9:dc:05:
                    75:0f:fe:b2:e5:c4:5c:c1:c3:8f:ce:5d:b1:f9:50:
                    65:ae:77:5a:cb:71:ab:9d:76:df:77:59:f2:63:53:
                    0b:38:d6:ec:aa:70:4c:37:f9:f2:e4:f2:70:44:7f:
                    f8:3a:fa:00:6a:69:6c:07:57:fe:5f:cd:22:7a:5f:
                    35:1d:2d:f7:93:1e:6e:e6:51:a5:93:72:d8:0f:71:
                    59:4b:4e:34:09:de:0f:22:91:e5:79:ef:73:37:de:
                    e0:77:c5:0e:da:7e:75:57:40:41:91:d0:06:ae:76:
                    99:81:a6:c3:af:13:e7:8a:02:25:8e:7e:a1:7f:e7:
                    70:b5:73:ff:c9:30:cd:4e:32:96:f6:0c:5f:b1:1d:
                    91:7d:cc:7c:4f:52:e5:76:35:e1:a0:a6:87:2b:12:
                    11:11:99:d7:61:05:b0:b1:08:57:77:c3:19:b9:1f:
                    99:88:0f:1d:4b:b3:71:55:8e:57:21:93:4b:fc:3e:
                    46:13:37:1e:48:1d:87:92:40:d8:e6:71:36:e8:3d:
                    c6:e8:7c:2a:8f:c9:0f:95:23:2d:1b:1c:ef:22:df:
                    49:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:02:87:25:CC:08:4E:43:1E:5E:56:8B:9F:2B:8B:29:06:E8:C6:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/0ae83657-7de5-339f-b057-4fcb05f15a58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:98:61:f6:05:92:ff:7c:ce:85:10:cd:08:95:5a:1e:94:d0:
         69:d2:e2:61:cc:07:3a:5e:e6:c1:43:42:82:27:b9:9b:3c:7b:
         f5:37:ff:6f:93:9b:9a:21:4a:2e:67:ce:2a:74:fd:a3:3a:3b:
         9b:dd:86:83:eb:3d:10:5b:b5:b8:1e:e0:c7:80:5b:64:b7:5f:
         0d:2f:40:a7:47:51:3c:49:05:2c:9f:63:92:7f:aa:32:40:5a:
         74:da:dd:9d:1c:b5:34:3c:f4:69:c2:7e:6b:d2:45:91:d3:81:
         6f:a4:bf:34:bf:1f:95:71:91:85:e2:1f:fd:cd:f7:fd:35:87:
         d4:44:27:c6:fe:34:23:db:10:fc:a0:4e:4c:13:34:76:08:c8:
         f7:de:de:31:91:c4:08:b3:5e:16:48:94:15:31:fb:17:a5:bf:
         d0:30:ad:8b:6a:21:60:39:e0:b0:dc:d3:84:f6:0c:5c:35:fe:
         90:8a:84:eb:2f:68:eb:b4:8b:39:d8:9b:46:f6:73:06:90:43:
         73:5c:15:37:3a:bd:78:b4:1c:99:92:b1:03:0f:2a:67:2a:7a:
         f2:25:4c:bc:35:42:88:11:d6:cd:b8:f7:e3:7d:d5:c1:be:42:
         98:e2:70:1d:4b:c0:b7:a4:24:71:e7:a4:8e:dd:4e:b0:90:76:
         52:0a:b0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:32:05 2026 by rpki-client