Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/5d308255-e4de-35ae-a6bd-a038a2c66c90.roa
File:                     5d308255-e4de-35ae-a6bd-a038a2c66c90.roa (raw, json)
Hash identifier:          qzGr6nhQvK9RCLWvEz1DGOr+SbmVBtUTD5xrKPKUDQI=
Subject key identifier:   74:7F:B9:72:E6:90:3F:4D:B9:01:A3:77:46:A6:1B:B9:64:AC:00:5A
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D9856AD9D670634BFA5942C90
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/5d308255-e4de-35ae-a6bd-a038a2c66c90.roa
Signing time:             Wed 22 Apr 2026 21:39:05 +0000
ROA not before:           Wed 22 Apr 2026 21:39:05 +0000
ROA not after:            Tue 21 Jul 2026 21:39:05 +0000
asID:                     400536
IP address blocks:        104.253.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:98:56:ad:9d:67:06:34:bf:a5:94:2c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr 22 21:39:05 2026 GMT
            Not After : Jul 21 21:39:05 2026 GMT
        Subject: CN=3f63d3cc-a811-45ae-94ea-9f1d0afd1f43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a9:7c:07:be:67:04:8c:61:fe:85:01:32:d0:
                    a0:ba:75:64:fe:28:8c:8a:76:3c:70:48:0c:3d:5a:
                    08:c0:1b:64:bf:27:20:fa:48:a0:56:a1:7b:aa:64:
                    f6:04:e4:e4:9b:40:80:ef:71:6d:52:54:97:c2:a4:
                    28:b4:72:1c:8c:94:7e:3f:07:15:e4:34:9d:f5:98:
                    f5:cb:ca:ef:55:26:4c:9b:96:c7:c6:d0:89:1b:f7:
                    92:79:cf:54:89:c7:58:a7:3f:be:bb:05:e9:4c:40:
                    a0:70:5c:27:0f:f4:55:0e:56:c6:72:e3:5c:99:2b:
                    a9:f5:98:24:5e:d5:8e:de:f0:bc:b5:f6:9e:75:58:
                    f9:d6:a4:8a:15:3a:3c:5a:20:b7:64:2b:b5:b0:6a:
                    36:61:06:84:32:d9:67:db:62:96:d6:c9:e8:47:d6:
                    78:a9:5b:ab:a7:52:34:7e:49:c7:fc:d0:d6:05:25:
                    5f:a6:82:54:50:4f:3e:92:74:5c:3a:56:32:b6:5c:
                    da:1f:59:ee:ef:c3:5b:89:8c:a0:85:ed:3e:87:97:
                    02:29:45:71:cd:8e:3e:d4:8f:35:34:30:9d:d2:7b:
                    3a:d2:2c:0a:ae:7b:2d:8e:2e:5a:0b:cf:af:fc:d0:
                    9f:52:0c:c1:ab:35:28:23:35:27:38:d9:4b:23:29:
                    c5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:7F:B9:72:E6:90:3F:4D:B9:01:A3:77:46:A6:1B:B9:64:AC:00:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/5d308255-e4de-35ae-a6bd-a038a2c66c90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:29:41:93:60:79:34:e4:30:2e:6e:c9:c8:ed:da:d8:4e:ca:
         db:2f:33:d1:43:0d:ab:95:4b:9d:9a:6f:25:ea:2d:1d:36:23:
         9e:b8:5b:f3:7d:27:ba:97:29:cf:a7:b2:13:7b:03:e6:ba:d4:
         1b:23:01:12:7b:5a:a2:8f:60:18:c7:74:d6:6a:e9:02:5f:86:
         9a:5f:5a:3f:e6:ee:7a:95:6e:02:1f:a4:09:dc:1b:0e:65:35:
         e6:67:d3:25:a9:4d:19:68:77:9a:f9:70:99:47:ad:96:4a:0a:
         54:dd:21:60:36:d1:c1:bc:1e:48:ee:f3:c1:2c:b0:61:a3:a3:
         21:85:c9:d0:6f:aa:8d:a1:a6:ae:09:37:2d:2e:c1:e1:83:7d:
         01:a8:77:15:f2:73:70:2a:cd:ab:65:8c:f4:46:31:dc:69:36:
         09:8f:6c:e5:96:e2:f8:1f:6a:ff:20:4e:10:f1:13:dc:67:30:
         9b:29:08:11:6d:48:ea:78:6b:88:4d:82:df:76:2a:73:5a:5d:
         96:51:cc:ca:22:35:1e:ca:2c:fd:c1:f5:c8:8e:9c:c7:e0:16:
         5c:64:14:0d:36:2c:eb:1b:69:86:2d:ec:79:4b:8d:2c:dc:24:
         2e:4c:08:00:7e:87:13:b3:84:7e:dd:46:54:9f:30:3a:5f:74:
         79:96:a8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:48:00 2026 by rpki-client