Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/3188bd67-f517-33ad-ba93-4466299659db.roa
File:                     3188bd67-f517-33ad-ba93-4466299659db.roa (raw, json)
Hash identifier:          vagrzpIo1bFmyLpXmuT4L5afiu1QE0qxjKcleS3FneE=
Subject key identifier:   5B:FF:49:B1:97:B1:26:9A:49:75:D6:7C:59:E5:1B:48:D8:74:BD:13
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CBD5A4434C72BA4B31980
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/3188bd67-f517-33ad-ba93-4466299659db.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     18779
IP address blocks:        104.252.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:bd:5a:44:34:c7:2b:a4:b3:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=d5f78c6c-77f4-48b5-9cd9-f06ccfe163c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:93:9d:31:4a:e1:61:24:9e:83:cc:af:5c:7b:
                    74:b9:f5:1f:fe:a2:ee:fa:86:ce:13:6e:a1:27:a0:
                    be:a6:8f:c1:a0:97:b7:9f:38:ad:ed:76:23:31:06:
                    dc:f6:4a:cf:2d:1f:fc:63:0a:94:a3:91:d4:f8:d4:
                    7d:65:0d:08:2b:c8:fe:a8:f5:74:0f:3c:dc:d1:d0:
                    f4:e1:e8:2e:16:c9:95:18:79:06:a2:3e:2d:92:62:
                    0f:26:e9:a8:88:0c:f1:3c:3d:bb:88:42:43:0b:f5:
                    ed:2d:10:e1:f0:b6:5f:22:e6:7e:6e:ce:64:69:14:
                    b2:4e:a7:c1:a1:ce:76:a5:1f:97:69:5f:1c:7e:07:
                    32:82:ce:a8:ca:4d:f1:f6:8f:53:eb:14:0c:5d:a7:
                    2c:c2:2f:75:b5:e2:df:a1:0b:ca:68:a2:1a:82:10:
                    14:23:43:11:f8:3e:1c:64:72:c6:06:36:66:5b:3a:
                    0c:7a:b9:8f:3c:02:f2:20:b7:5c:52:8a:5c:00:1b:
                    4f:aa:c4:18:b3:a7:ce:aa:2d:49:58:45:ed:d5:56:
                    b2:9f:bc:64:8e:9f:20:30:47:e8:58:86:1e:37:f8:
                    bc:5f:b8:a7:28:13:c8:f8:bc:cb:f6:84:1a:6c:c2:
                    02:f7:02:e1:14:bf:17:06:3d:b8:89:28:e5:b9:9d:
                    11:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FF:49:B1:97:B1:26:9A:49:75:D6:7C:59:E5:1B:48:D8:74:BD:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/3188bd67-f517-33ad-ba93-4466299659db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:cc:11:6c:f1:8d:6b:dd:f1:93:9a:7d:13:fc:71:bd:66:08:
         62:5e:c6:ed:5c:2f:65:52:04:94:c9:35:c5:1a:ca:f3:64:f4:
         96:20:e3:33:e0:61:db:3c:6d:3f:2a:9b:d2:47:d2:fb:e2:40:
         c9:6b:b1:b0:3a:3c:a2:28:47:41:a7:2a:71:3e:86:20:0b:dc:
         57:72:9a:50:c8:b1:fb:ab:d6:b5:a0:f1:3d:6f:51:61:f1:fc:
         12:69:09:70:ca:d4:75:f3:75:23:99:b1:fe:81:9d:e9:1c:e0:
         61:22:0a:52:fc:07:e3:9a:30:c8:9a:18:f9:fd:8d:38:ce:5c:
         97:01:1a:32:d3:86:42:a9:e2:b8:5a:aa:ba:43:7e:00:a3:b8:
         6c:fc:5f:2b:45:af:91:11:93:29:83:c6:b4:e0:ed:30:16:d9:
         d5:76:08:5e:9e:95:64:6e:aa:fa:ff:d8:47:d9:b7:94:2c:0c:
         72:6f:4c:64:59:4f:b0:61:7b:cc:75:03:35:c0:63:4a:d9:0a:
         a3:1a:9c:5a:36:44:55:a2:8e:9c:1a:5f:4a:87:c2:4a:17:9c:
         d1:db:c2:94:94:64:9a:eb:69:29:f2:6d:b9:92:72:04:ab:29:
         fb:72:07:70:72:4a:60:3d:f0:e2:5e:1d:c9:ab:37:c1:f9:c5:
         47:3b:7a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:54:44 2026 by rpki-client