Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/37aeb97d-31b3-36f0-886a-ddefe945667f.roa
File:                     37aeb97d-31b3-36f0-886a-ddefe945667f.roa (raw, json)
Hash identifier:          TkFwmORxWMhXYJ9BA2nVP6JCVaNJdslte+4d+Ri4sII=
Subject key identifier:   6A:EE:6D:34:EE:E1:34:57:2C:BB:D9:10:01:F0:B1:1B:03:97:DD:F1
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CADDAA65F5305DE03C080
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/37aeb97d-31b3-36f0-886a-ddefe945667f.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     211273
IP address blocks:        104.252.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:ad:da:a6:5f:53:05:de:03:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=723f5daa-f1bd-4216-a143-a82439d94f85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f4:e8:0e:c5:38:77:6f:5e:12:c2:10:1a:c7:
                    fd:ad:8f:87:91:1c:4f:78:7b:d8:49:6b:a8:8a:87:
                    01:54:be:ec:18:cf:98:f2:30:cf:be:0b:b7:85:50:
                    8f:fa:a2:02:97:27:53:b4:81:7d:5c:5a:2f:43:49:
                    cc:ca:a1:93:0b:6c:41:01:b4:be:40:d2:bf:34:76:
                    ca:73:d4:e0:09:00:ad:16:2e:c2:7b:2c:35:aa:2d:
                    59:6b:17:50:1b:57:bf:81:5a:6c:ef:9d:50:7e:63:
                    42:8c:b7:58:e7:04:0a:cd:4a:f0:89:77:28:e7:1a:
                    cb:77:ca:76:53:c2:c6:1e:53:a5:ab:de:f7:ff:a3:
                    5d:32:84:22:4e:ef:22:2a:96:43:d0:86:e4:d5:5a:
                    96:62:10:cb:8f:cb:dd:43:a9:45:54:44:bc:98:88:
                    d2:74:21:7e:bd:d5:d3:75:e1:a7:44:6b:da:b8:49:
                    fc:31:92:52:16:f6:68:fd:0b:d4:5c:21:44:8d:ca:
                    26:c2:c2:5a:37:ec:c3:4e:ad:6d:ef:2f:8c:44:52:
                    06:bd:15:3a:b3:e8:70:ce:15:90:ff:92:54:76:63:
                    36:bc:bc:6c:45:24:8d:2f:59:23:36:73:7f:0d:39:
                    15:46:d3:d3:59:e6:25:f5:64:49:d3:57:a6:2d:1d:
                    44:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:EE:6D:34:EE:E1:34:57:2C:BB:D9:10:01:F0:B1:1B:03:97:DD:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/37aeb97d-31b3-36f0-886a-ddefe945667f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:37:a3:c7:db:35:10:88:a3:e2:a4:00:1b:50:e0:e3:27:a2:
         48:f2:fe:8b:52:16:a2:08:3a:4c:b7:47:12:5d:fe:1f:6c:7a:
         4a:fc:67:d5:fe:e4:95:f8:a0:7a:6b:ea:3c:4f:f0:c7:36:a8:
         5e:34:39:95:46:39:f9:d1:9c:06:96:b7:5d:ab:8a:41:57:26:
         a5:44:64:ea:4c:00:0e:66:b9:a9:58:a0:da:ce:9d:1d:96:da:
         76:48:75:d3:32:00:38:d9:97:1f:d0:5b:f3:2f:ff:e2:a4:f2:
         0c:f4:67:ab:e0:15:71:20:ba:d0:25:ba:34:5e:ca:2c:15:73:
         c9:f7:9c:d1:93:fc:ea:f4:c5:73:8b:40:f3:12:d0:89:45:37:
         dd:98:56:55:1c:bf:da:0f:51:14:b3:80:82:a9:10:74:08:a9:
         f7:90:b3:85:1a:62:a1:f5:8a:0f:c3:a1:eb:de:8e:67:72:e2:
         90:4a:b8:04:37:85:21:48:cb:c5:9d:e7:e5:c6:55:8c:70:f2:
         7f:2f:4d:1a:7b:bf:3c:46:95:5a:a3:de:d4:8a:30:40:3b:d0:
         2d:e0:34:8d:14:c1:d8:27:e5:4e:a5:99:4d:7e:db:50:da:8b:
         16:69:0e:e8:e3:a9:cd:c1:8f:41:5b:69:9a:db:dc:da:e0:6f:
         5b:c0:9e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 02:10:12 2026 by rpki-client