Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/4bf26ce3-d128-3010-9ce5-2de523f13a95.roa
File:                     4bf26ce3-d128-3010-9ce5-2de523f13a95.roa (raw, json)
Hash identifier:          RrknfaIXPf6u6JxLFyQB8aK6pCgkOJM+f3Ks33cdOqQ=
Subject key identifier:   43:16:E5:1A:CA:72:E2:86:A7:0E:1F:A0:A1:D7:BA:20:2F:C2:87:43
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CB3D0A4FCFB268A967980
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/4bf26ce3-d128-3010-9ce5-2de523f13a95.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     6939
IP address blocks:        104.253.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:b3:d0:a4:fc:fb:26:8a:96:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=18fe68bf-3efc-486f-a4c6-f581080d2c13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:17:7a:5d:2d:be:3d:eb:09:2c:85:c7:65:ee:
                    6a:4c:82:8e:3b:62:76:f1:31:9c:c5:03:f3:6f:4e:
                    a4:75:b8:e7:9e:d0:cb:30:5a:59:c2:b4:d3:88:ea:
                    f9:55:01:6f:32:db:5a:41:e1:70:53:41:8d:dc:e5:
                    5b:7b:f3:77:ff:ab:7e:b6:e6:1d:ef:8c:7a:4c:18:
                    8a:ab:03:ff:31:89:c6:a8:c8:6d:c9:cd:be:06:17:
                    88:48:e0:58:0d:c5:7e:0f:5e:0f:2d:a6:14:01:ba:
                    91:cc:73:2f:14:be:8a:f5:db:91:cd:78:84:bb:62:
                    3f:b8:2c:21:70:8f:0d:2e:ab:b7:d5:84:6b:c0:15:
                    dd:0a:c5:17:d2:16:b6:92:cc:28:97:3c:70:63:b8:
                    38:93:65:e0:2e:3b:25:9b:98:17:54:eb:71:fe:e5:
                    39:95:12:d2:a6:5a:d1:d0:64:80:34:82:08:db:57:
                    4e:ee:84:26:f8:d8:47:e2:ac:97:e5:13:00:fc:04:
                    48:0c:47:73:44:69:b1:14:b6:7b:5b:72:e3:88:2f:
                    df:df:8e:91:89:3e:9f:a5:2c:f5:68:f6:59:0c:d2:
                    72:fa:6a:0e:67:c6:48:7e:61:b1:8e:a2:84:33:57:
                    19:f2:f2:d1:b8:fa:20:77:ae:ec:fe:40:2d:78:75:
                    44:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:16:E5:1A:CA:72:E2:86:A7:0E:1F:A0:A1:D7:BA:20:2F:C2:87:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/4bf26ce3-d128-3010-9ce5-2de523f13a95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:61:17:1b:f3:2f:61:51:70:ad:bf:74:5e:60:b2:0f:f9:ea:
         fe:1d:bc:a8:eb:68:06:a5:d2:ee:6d:72:6c:33:66:e3:79:6b:
         5f:9e:c9:73:b9:21:11:c3:12:91:d4:be:7c:ef:96:c8:76:4f:
         74:aa:e2:0e:be:12:eb:c5:42:48:8d:fb:a7:04:05:f4:1d:3d:
         e0:92:e9:5d:88:5b:e9:7c:80:23:b7:a6:a0:0a:8a:fd:e9:d6:
         1e:fb:84:de:ce:2d:be:76:64:01:4c:fa:a9:91:c9:58:3c:38:
         40:14:e0:87:5a:ef:9e:20:33:0e:bf:13:24:3f:8d:57:e8:ea:
         cd:64:63:16:ba:82:5c:75:2a:ad:9f:a8:72:66:5d:20:47:5d:
         69:74:9b:b1:7b:9a:ca:14:62:d1:2f:22:78:85:c7:1e:24:a4:
         4c:20:d2:f2:ca:a3:a8:e0:29:00:62:10:ed:b7:45:69:33:d5:
         28:00:c5:cc:67:fa:86:f1:d9:c7:eb:6f:97:af:81:63:5e:ad:
         1e:4e:f5:ca:8d:15:01:b5:47:62:4d:77:df:1b:06:de:b9:cf:
         e7:c0:5a:1b:2b:6a:56:9e:b9:9a:a1:88:02:b3:f2:54:78:74:
         a7:46:0d:34:3d:93:60:86:87:cc:fd:12:63:31:42:9c:3f:65:
         29:8f:cf:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:01:55 2026 by rpki-client