Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/78b20614-9f38-36ef-aae6-453e3b86b579.roa
File:                     78b20614-9f38-36ef-aae6-453e3b86b579.roa (raw, json)
Hash identifier:          Lun+JkbuczhHua6lEd65MgORLZen+x5yTFfohmjAhmU=
Subject key identifier:   50:8E:B9:26:87:58:7B:D8:93:B4:49:4D:5C:65:FD:B3:04:2F:99:5D
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CD022B7496C11D5B30000
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/78b20614-9f38-36ef-aae6-453e3b86b579.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     59253
IP address blocks:        104.253.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:d0:22:b7:49:6c:11:d5:b3:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=aeae2721-030e-4d45-8143-a7dbe00d2c1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a3:f2:2f:58:84:11:12:e7:a4:78:79:da:ee:
                    30:19:ad:b3:02:1b:fb:0c:01:f9:5e:6f:d8:b6:a5:
                    d8:d1:1e:11:50:c0:af:be:99:48:4e:c7:22:18:9d:
                    51:2d:0b:79:4b:ff:6e:5b:cf:28:cc:21:eb:b3:2f:
                    79:38:93:de:f0:ac:93:0d:63:4d:e7:bc:b8:c5:e7:
                    6d:6f:60:a9:5a:df:f8:ca:20:62:42:76:56:bd:a2:
                    a4:09:87:7b:bd:57:2c:fe:45:42:4e:3b:8c:66:53:
                    fe:39:92:c4:29:76:d5:1f:b8:83:3d:02:bd:1f:66:
                    49:6d:05:0e:f8:7b:c1:f8:79:19:8e:44:e1:19:ae:
                    60:eb:c9:e1:06:97:fe:9e:5d:f2:bb:d5:db:b7:41:
                    89:ce:96:c2:5e:ba:f4:5a:90:a2:11:8c:40:e9:86:
                    6d:97:6d:55:26:a4:3c:72:88:fd:d0:53:e6:1f:09:
                    ae:64:c4:2f:44:40:35:0c:4b:50:2d:17:2c:67:46:
                    18:b3:04:c2:e9:4d:f6:1d:aa:8f:e0:b1:bd:7b:c5:
                    95:c4:3f:e8:37:9f:61:10:f1:6f:b3:a8:f5:76:b0:
                    ed:1d:e4:d4:4b:82:7f:8a:f7:a5:ec:8b:1a:d8:d5:
                    fc:28:38:50:ea:5e:e4:c8:74:24:29:f3:71:03:fd:
                    9f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:8E:B9:26:87:58:7B:D8:93:B4:49:4D:5C:65:FD:B3:04:2F:99:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/78b20614-9f38-36ef-aae6-453e3b86b579.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:46:63:4a:f7:ed:a3:16:8a:e4:f4:9c:60:fd:d2:c3:ca:4e:
         dd:43:b1:f1:d9:44:7f:4c:46:cb:d9:5d:ea:6d:d9:a5:45:e2:
         dc:74:07:49:fc:b4:86:1b:4c:2d:0e:b6:df:8d:1f:18:9f:35:
         66:c1:e1:f3:58:b6:a1:81:90:71:d5:45:a9:a9:9a:4a:99:85:
         29:81:64:cd:8c:b0:fd:26:9d:cc:cb:42:ff:db:3e:db:dc:3c:
         c5:e8:6e:f0:2b:a8:d8:67:df:c7:99:71:6c:df:39:b2:94:4b:
         98:4b:52:d4:7a:ca:5d:a7:93:a3:8c:28:cb:9f:8d:cc:f0:b2:
         ff:bf:41:6e:3c:6a:ee:a3:92:67:bc:67:98:3b:7c:33:96:f3:
         2c:18:58:68:7e:6a:47:41:9d:18:58:22:c4:99:b9:bd:bb:13:
         d0:aa:55:80:1a:68:a7:9e:6c:bd:b0:5d:27:65:71:60:30:e1:
         a7:39:e4:95:85:97:0a:86:2b:86:54:a9:f4:95:a5:e0:bb:39:
         c9:82:6e:1a:6a:bd:f2:3b:6b:d5:c3:7d:94:6b:3e:cb:07:8f:
         e8:40:19:23:49:b8:8a:6d:2b:f7:85:ff:b4:f2:c8:65:74:39:
         d3:a7:24:4a:57:58:f6:e4:8a:26:3e:d9:6e:d9:1b:c6:7d:e0:
         93:2f:eb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:59:32 2026 by rpki-client