Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/826d7fc2-2edf-3568-ab13-a0634c00688f.roa
File:                     826d7fc2-2edf-3568-ab13-a0634c00688f.roa (raw, json)
Hash identifier:          giS53Vg30lyQXH7DQoAI5DdmAaVGos1mtMs8eKN/j7k=
Subject key identifier:   A9:AA:3C:8E:42:48:B5:37:38:FC:63:C8:39:41:4C:55:B7:DF:BD:AC
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CEC4B094446E6BA514080
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/826d7fc2-2edf-3568-ab13-a0634c00688f.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     262287
IP address blocks:        104.253.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:ec:4b:09:44:46:e6:ba:51:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=41ba85c3-4248-427f-b3f9-b6b87d0da1f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7e:6a:84:78:a9:bb:5a:67:64:a5:36:1b:85:
                    75:d5:fa:40:a4:79:9c:ef:0d:90:ca:db:09:f9:a3:
                    96:5b:17:fb:2b:d2:e4:a9:dd:39:32:bf:fc:ba:18:
                    cf:ff:7c:02:53:f4:ba:4f:50:0a:8b:cc:b5:bf:bf:
                    44:f5:e1:c9:f7:20:a3:1e:83:ce:30:b9:2f:76:2e:
                    49:3c:7a:c7:66:0c:36:9c:c6:cf:1f:92:2f:7c:1c:
                    e1:3c:db:19:bf:7a:68:b3:2f:50:1e:28:06:22:4a:
                    ee:fd:91:0a:43:e0:88:df:22:c9:92:d8:8f:e5:bd:
                    c2:c2:3c:56:a8:5c:f2:0d:56:08:96:2b:95:bb:96:
                    c3:94:b6:08:6e:72:79:14:4e:de:5a:50:66:17:bb:
                    7d:c6:04:8a:6c:4e:d5:1d:ae:b4:03:f2:fa:c8:66:
                    96:ae:65:4a:c8:38:90:22:56:36:cb:1e:cd:79:14:
                    d0:f1:d0:98:33:a7:97:4c:0f:5e:4f:c0:eb:e7:47:
                    3d:65:0e:21:44:82:5b:f2:60:bd:1f:8c:50:47:13:
                    46:45:9c:03:90:c5:1a:85:3a:bb:eb:3d:c7:2d:41:
                    73:81:cd:27:21:7f:1b:9b:61:c1:bd:26:0d:79:0b:
                    8d:ca:26:80:fe:41:31:56:cc:c6:36:07:0e:88:5d:
                    a4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:AA:3C:8E:42:48:B5:37:38:FC:63:C8:39:41:4C:55:B7:DF:BD:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/826d7fc2-2edf-3568-ab13-a0634c00688f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:93:cc:90:ae:64:a6:26:fb:61:6d:bc:3d:f6:27:55:ce:86:
         d4:e1:31:77:be:da:b7:5f:3f:fb:4f:bc:48:64:e5:c3:4c:59:
         ff:f0:1a:57:56:94:da:aa:23:8c:e5:8a:ad:30:c2:58:53:fa:
         31:0c:ff:6a:cc:3d:31:c7:7a:e2:ec:8b:fa:2c:39:90:0e:58:
         dd:fb:37:20:33:24:2b:f2:6e:6f:cb:ef:51:b4:0b:c3:d0:88:
         72:e8:87:65:65:2c:f0:f5:e8:31:5f:b3:81:09:c9:08:14:60:
         44:2e:e0:56:e5:56:5f:42:42:34:6b:2b:23:35:43:f5:42:af:
         96:7b:76:76:ce:db:c0:70:5f:90:4e:91:41:50:c6:d2:b0:72:
         b2:d1:9d:31:5e:f4:59:cf:33:90:ea:e3:65:73:0a:76:23:3b:
         a3:98:84:62:7e:23:5a:4f:06:5a:ba:89:28:6c:20:33:e9:07:
         2a:f2:03:67:9a:16:a0:1b:4d:9f:7f:04:e3:19:8d:5f:c1:0a:
         88:cb:99:cb:76:81:6d:c4:e9:9a:a7:8a:ee:60:27:e5:12:f8:
         fa:32:dd:52:cb:b6:b8:a7:f3:07:92:c9:84:c9:46:bb:22:b2:
         d4:94:f9:d0:ba:6a:6e:52:80:0b:45:3a:fb:9c:63:21:d5:c8:
         14:e2:c0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:08:52 2026 by rpki-client