Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/247818ae-6aff-3e35-812b-64e91704399e.roa
File:                     247818ae-6aff-3e35-812b-64e91704399e.roa (raw, json)
Hash identifier:          ubnm2DmFafw4zsAhHHlg1IHwbgDz3uqwuLHpmif1Kh8=
Subject key identifier:   23:53:0F:F6:51:9E:03:B2:3F:CD:E9:87:F3:2A:5D:3B:1F:4A:49:7A
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CF06F5979FF026939CF10
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/247818ae-6aff-3e35-812b-64e91704399e.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     18779
IP address blocks:        104.253.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:f0:6f:59:79:ff:02:69:39:cf:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=a29541cd-cfcf-4d20-b3d5-279c5956a05b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5a:87:3e:10:30:9e:be:83:2c:2e:68:d7:d9:
                    1b:ee:19:51:ff:88:4c:8f:a9:87:e4:93:f3:8a:82:
                    ba:10:ea:fe:75:ac:4e:7f:a1:12:4f:c1:9e:36:de:
                    39:7b:69:c4:6b:62:fe:9b:4d:7e:47:5c:75:1b:63:
                    96:46:f2:2f:17:34:72:81:da:93:a1:94:a0:9b:af:
                    b2:da:93:1b:f2:ff:b8:74:13:8b:d6:00:71:72:55:
                    de:07:d5:74:30:d5:7d:0d:22:41:4c:d9:01:1c:f1:
                    ab:17:3a:04:7e:ea:d4:2c:17:5d:12:7c:c4:2e:e1:
                    76:41:8f:6d:29:f3:cc:82:41:25:8b:4b:a1:96:e9:
                    1e:cd:93:5d:e9:79:9c:0d:bd:24:22:0d:69:61:d2:
                    f2:6e:df:8a:0d:d8:ec:d5:2d:72:27:75:97:64:fa:
                    58:5e:89:81:24:06:8a:af:69:5e:5e:bd:28:fc:01:
                    2f:a4:ca:e7:60:a4:cf:21:a5:77:5e:13:99:d0:29:
                    cf:65:7b:50:e7:26:19:cb:07:b3:f0:21:80:27:40:
                    c8:4b:f3:d6:44:13:fc:30:e8:2f:11:e6:37:da:ea:
                    b4:fe:c6:99:8b:5d:3e:5b:0e:2f:cd:1d:c6:39:cb:
                    72:2d:78:20:eb:2d:3c:de:be:d2:d1:a3:ed:00:ab:
                    83:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:53:0F:F6:51:9E:03:B2:3F:CD:E9:87:F3:2A:5D:3B:1F:4A:49:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/247818ae-6aff-3e35-812b-64e91704399e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:1e:2a:2b:c3:20:4b:2d:f6:94:05:2e:48:43:48:3e:29:9c:
         31:93:0a:1d:62:7f:0e:88:a1:2c:0c:29:f1:18:23:37:01:a9:
         17:ec:5f:80:40:34:70:76:e3:94:5e:71:9e:16:73:67:d9:d1:
         07:58:c7:31:6d:a5:78:df:d6:7d:4b:4c:5a:48:5b:31:9c:48:
         f0:a4:37:d2:04:56:9e:b6:0e:2b:e5:aa:f9:c1:20:40:2a:2f:
         35:c0:87:e0:e1:ac:fb:c0:0f:68:91:52:9c:cf:c9:05:58:ad:
         7c:06:38:ed:8b:f4:fb:da:df:0a:19:64:a3:62:a8:31:09:54:
         7c:a6:a2:5e:44:b8:85:03:ed:32:48:89:03:31:b8:33:1b:dc:
         40:0a:cf:76:33:c2:5b:5f:c0:1d:f3:d8:96:2c:6d:2d:f5:69:
         29:44:87:d4:72:c4:3b:4b:79:d7:8c:ff:f8:e0:d4:e4:fe:79:
         38:07:f1:bc:31:21:96:86:80:4c:98:8f:27:42:32:95:c7:65:
         45:e4:2d:9a:23:19:2c:cd:f0:f9:30:71:24:d2:b0:3c:91:51:
         67:6e:2f:ed:00:fb:ff:d6:e7:aa:95:27:53:55:a6:c0:2a:7d:
         a4:5d:5c:f2:ff:55:85:db:06:f7:d5:74:04:ce:91:6c:6d:63:
         23:bf:85:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:41:29 2026 by rpki-client