Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/34136fb0-21fb-3672-9c3c-bffadc108e0a.roa
File:                     34136fb0-21fb-3672-9c3c-bffadc108e0a.roa (raw, json)
Hash identifier:          Wlh378uGIQ63yxREceTdKkF8jZrwMSNhhFoHqXxP2hA=
Subject key identifier:   13:E9:DD:5D:70:70:F8:E6:13:92:62:3A:DF:15:37:67:A3:55:81:FE
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584F497449ED9DD6DA1AB6E437C0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/34136fb0-21fb-3672-9c3c-bffadc108e0a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     3561
IP address blocks:        104.253.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:49:ed:9d:d6:da:1a:b6:e4:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3e354828-b9df-4124-8048-9e712ad4246d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:57:93:66:d0:a4:25:a7:36:eb:f4:0c:20:2d:
                    dd:85:36:f3:3c:02:16:ec:f1:f9:84:ef:1c:cf:26:
                    d0:0d:d2:c4:d2:47:41:61:44:fa:5d:3c:27:40:83:
                    77:ac:e2:5c:1f:c4:67:0a:37:0b:a2:87:17:2d:fe:
                    47:f3:10:46:e5:f6:05:a7:8c:a6:e4:f8:a3:1e:ba:
                    c4:67:18:c6:ad:e4:11:d3:c5:bd:df:8b:90:3b:67:
                    2e:17:ae:71:ca:56:89:f4:6a:6b:ac:32:c5:3e:aa:
                    d4:26:eb:14:33:d2:d6:0b:0b:73:64:20:68:50:78:
                    a6:43:8c:09:a3:7d:93:26:11:8e:f4:18:ec:3f:bd:
                    90:0b:64:cb:ea:87:2e:b5:9c:b3:3d:db:03:05:eb:
                    44:e8:81:21:d8:6b:4a:ed:36:52:12:bc:d6:7b:cd:
                    0c:9f:83:a9:c3:4c:8c:d0:b7:1c:a6:73:92:73:7f:
                    52:76:2c:e7:5b:1c:d9:75:67:71:69:68:de:7c:34:
                    17:fa:42:df:e7:b5:b8:c7:96:bd:15:0b:3c:da:9e:
                    f5:2b:75:97:4e:5b:bf:1a:d9:11:27:ec:a3:14:9d:
                    83:49:40:10:cc:5f:4e:f0:5b:b0:e3:c1:df:fb:89:
                    5a:47:2d:8b:d9:72:80:db:b5:a1:b8:9d:bd:5b:84:
                    2d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E9:DD:5D:70:70:F8:E6:13:92:62:3A:DF:15:37:67:A3:55:81:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/34136fb0-21fb-3672-9c3c-bffadc108e0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:c5:f3:ac:6d:79:ee:56:13:f4:1d:81:ad:61:94:95:09:a0:
         c2:93:b9:ec:fe:ee:9f:24:52:52:67:d4:50:c7:25:b2:37:7d:
         76:4f:6c:25:4e:10:7c:d3:17:ec:72:39:e0:d9:e0:4e:dc:d9:
         95:3e:b3:b4:3f:98:4f:00:dc:8d:2a:aa:b6:67:cd:06:52:83:
         b4:7b:31:a5:66:ba:2c:77:f5:7b:b8:62:c6:ec:03:ce:e4:38:
         e6:a0:4b:5b:1b:02:f4:a2:4f:66:f5:ee:6d:ea:ee:31:90:f4:
         2b:53:db:dc:ef:68:9f:ba:d1:47:cc:2a:b2:43:17:c8:bc:e9:
         44:89:6d:e0:9b:21:c1:df:db:7d:83:9c:53:d7:c6:48:d1:36:
         a5:58:8c:f4:25:dd:6f:7b:59:8c:88:f4:82:9b:e4:12:26:a8:
         4e:42:56:a8:24:69:c4:2b:1d:44:e5:de:bb:41:3c:86:18:4a:
         9a:36:20:26:e5:6f:03:4a:eb:d9:ea:16:a4:f8:8e:91:40:97:
         4d:0d:b7:d5:ed:ce:86:5a:4b:27:ef:91:30:f7:ac:8f:37:ef:
         b7:71:8b:76:39:0a:af:45:49:2e:59:9a:a2:81:af:57:fc:e0:
         62:f4:7c:d1:50:0e:6d:5d:2a:51:de:e2:8e:97:34:c6:45:56:
         85:56:b0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:25:45 2026 by rpki-client