Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/16df6d81-c098-3b8c-a9d9-b05bc3049676.roa
File:                     16df6d81-c098-3b8c-a9d9-b05bc3049676.roa (raw, json)
Hash identifier:          9wTotDIFaWgFNdZ4YkDh08NYOCxC4T46AfQxDq0IFCg=
Subject key identifier:   53:15:6C:FF:10:C8:50:7E:90:B6:A5:8B:6C:BF:0D:A6:B2:76:31:58
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CE0823AE1C25853E31440
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/16df6d81-c098-3b8c-a9d9-b05bc3049676.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     18779
IP address blocks:        104.253.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:e0:82:3a:e1:c2:58:53:e3:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=7d99f938-7b79-412b-9933-5635c1b9ee28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f0:12:fd:fd:72:03:17:70:b0:7d:5b:42:69:
                    9b:37:e5:b6:49:f9:23:3c:77:e5:c1:57:b6:54:a2:
                    6e:9f:5a:9c:bc:09:9f:f6:b5:38:ae:ac:b5:05:a6:
                    81:a6:82:31:bc:2a:1d:de:64:55:db:7e:47:7d:dc:
                    20:ab:f5:29:a3:46:fe:31:f6:2d:ec:52:92:4a:45:
                    bb:97:d0:60:6c:c6:f5:d9:48:88:4e:9b:6c:64:13:
                    fc:06:ef:e8:b8:3a:43:04:f9:87:c7:ff:58:bb:b3:
                    17:ec:5f:bf:a2:2d:6b:a2:c5:cc:88:69:43:0f:00:
                    e5:ef:fc:ae:81:98:6b:e8:11:d0:b4:8c:8a:a5:e4:
                    e4:4d:a7:74:82:84:9a:26:d2:d0:f5:4d:12:13:cd:
                    cc:2e:e2:57:82:1c:55:ff:be:01:69:e7:3e:ff:a8:
                    82:2d:65:65:57:1b:f2:19:f7:f1:63:15:1d:0c:0c:
                    33:e8:d9:ec:04:06:b4:e9:6f:d9:5e:7a:a8:20:79:
                    f8:04:80:1a:30:7a:00:84:89:64:e0:6d:01:40:7c:
                    9e:d0:3b:75:ff:de:97:25:9e:bc:86:19:ce:a8:f1:
                    82:84:98:00:60:fa:d4:46:d7:97:02:34:63:53:5c:
                    ff:8d:41:69:b4:10:15:51:02:ea:45:c7:8f:26:71:
                    21:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:15:6C:FF:10:C8:50:7E:90:B6:A5:8B:6C:BF:0D:A6:B2:76:31:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/16df6d81-c098-3b8c-a9d9-b05bc3049676.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:d6:a1:67:b8:be:f8:02:b3:16:b7:ff:bf:12:b6:63:19:7a:
         cc:16:43:1a:bc:21:1c:4c:77:a9:15:f8:78:2b:8c:80:35:5b:
         ea:31:7f:55:7c:19:08:59:75:c1:c9:98:94:f0:78:90:8f:eb:
         e5:63:ba:c7:f0:d5:04:ec:65:09:31:51:77:44:e6:2f:5d:17:
         a3:13:ba:ba:36:4a:0a:a1:6c:e1:1a:73:bb:dd:61:74:ad:19:
         92:16:bf:1a:69:b0:fa:77:d5:b5:b7:8f:25:01:6d:76:1c:6e:
         46:d5:8a:17:12:17:ac:00:2e:e5:b8:a6:40:92:43:83:3d:6a:
         c8:4a:b1:60:de:33:c1:bc:32:a2:60:8c:e4:2a:ab:03:ae:5c:
         68:8f:a0:db:f8:f6:6e:d9:a9:9a:81:f4:f1:48:5b:c7:ed:81:
         2e:16:25:50:49:62:c9:9c:aa:b7:cc:eb:55:d4:3d:dc:e4:cc:
         d9:7f:f3:37:1a:bd:fa:bd:6c:d5:b8:63:a4:a2:17:e0:d2:c3:
         d6:b2:6a:b2:77:87:15:c4:00:6e:72:0f:7d:7b:c7:a1:e2:fd:
         0f:72:16:ec:f3:7c:ab:87:ef:90:62:b4:19:e7:70:68:7b:02:
         65:b3:61:f1:2f:fa:34:0a:d5:19:e2:fc:58:20:e7:90:19:cd:
         ab:57:91:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHOCCOuHCWFPjFEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk
N2Q5OWY5MzgtN2I3OS00MTJiLTk5MzMtNTYzNWMxYjllZTI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fAS/f1yAxdwsH1bQmmbN+W2SfkjPHflwVe2
VKJun1qcvAmf9rU4rqy1BaaBpoIxvCod3mRV235Hfdwgq/Upo0b+MfYt7FKSSkW7
l9BgbMb12UiITptsZBP8Bu/ouDpDBPmHx/9Yu7MX7F+/oi1rosXMiGlDDwDl7/yu
gZhr6BHQtIyKpeTkTad0goSaJtLQ9U0SE83MLuJXghxV/74Baec+/6iCLWVlVxvy
GffxYxUdDAwz6NnsBAa06W/ZXnqoIHn4BIAaMHoAhIlk4G0BQHye0Dt1/96XJZ68
hhnOqPGChJgAYPrURteXAjRjU1z/jUFptBAVUQLqRcePJnEhKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFMVbP8QyFB+kLali2y/DaaydjFYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvMTZkZjZkODEtYzA5OC0z
YjhjLWE5ZDktYjA1YmMzMDQ5Njc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP13MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAArWoWe4vvgCsxa3/78StmMZeswWQxq8IRxMd6kV+HgrjIA1W+oxf1V8
GQhZdcHJmJTweJCP6+Vjusfw1QTsZQkxUXdE5i9dF6MTuro2SgqhbOEac7vdYXSt
GZIWvxppsPp31bW3jyUBbXYcbkbVihcSF6wALuW4pkCSQ4M9ashKsWDeM8G8MqJg
jOQqqwOuXGiPoNv49m7ZqZqB9PFIW8ftgS4WJVBJYsmcqrfM61XUPdzkzNl/8zca
vfq9bNW4Y6SiF+DSw9ayarJ3hxXEAG5yD317x6Hi/Q9yFuzzfKuH75BitBnncGh7
AmWzYfEv+jQK1Rni/Fgg55AZzatXkSc=
-----END CERTIFICATE-----
Generated at Tue Sep 29 20:06:42 2026 by rpki-client