Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/86b6a500-5a6b-308f-93e2-266a9bfb5491.roa
File:                     86b6a500-5a6b-308f-93e2-266a9bfb5491.roa (raw, json)
Hash identifier:          UkHOmvj4Dw+ZKZgSYLah0lGNugGQy62LHjpudpDRUfI=
Subject key identifier:   9C:61:1B:9E:F8:C7:C2:BF:FB:1E:E2:2C:E1:03:B6:A3:95:24:1E:B0
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CB8360B1FF3F8AFFF7280
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/86b6a500-5a6b-308f-93e2-266a9bfb5491.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     398781
IP address blocks:        104.252.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:b8:36:0b:1f:f3:f8:af:ff:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=2526d576-7496-484c-a82d-fcf08a974a0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:40:8e:a8:4d:cb:fd:37:44:4c:61:5b:c1:7e:
                    c3:1e:c8:1d:76:a0:f3:31:d5:04:0f:0f:5d:44:84:
                    62:ec:7d:de:7a:87:42:73:e3:11:e6:b0:2b:97:c0:
                    7e:5f:43:c1:74:97:3d:c5:b2:5e:14:7f:33:d2:d4:
                    09:35:9e:58:b6:3b:30:1b:98:a5:7e:1e:85:55:d2:
                    da:44:f7:d7:0f:7c:17:bf:48:f4:1c:b6:5d:38:83:
                    e8:34:e8:b9:1f:8e:14:5f:e0:4d:0f:59:0b:49:20:
                    90:06:b5:14:8f:c4:bd:6f:40:c1:71:a9:dc:25:a7:
                    db:b2:af:b8:8d:22:a5:1b:ef:99:b3:c7:4d:22:f3:
                    2a:4b:70:1a:7d:b3:52:78:52:78:39:0c:a3:fd:49:
                    59:bb:84:c1:1d:c7:4e:32:6c:4a:4e:af:f8:d8:97:
                    f8:35:28:b6:55:fd:8f:78:2e:9c:fb:90:72:bc:c5:
                    ed:df:d0:ef:f7:c9:e2:1c:d5:64:87:51:26:ba:0a:
                    97:c4:91:b4:3f:22:81:6f:a8:75:ab:3c:00:fc:0e:
                    2e:f9:d2:60:88:45:81:bf:6b:fc:f7:18:0d:06:b5:
                    3b:6b:89:23:9c:9e:61:31:08:29:44:63:91:0f:e0:
                    9e:0e:22:ab:42:02:ec:ab:07:84:6b:98:31:a0:cf:
                    6d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:61:1B:9E:F8:C7:C2:BF:FB:1E:E2:2C:E1:03:B6:A3:95:24:1E:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/86b6a500-5a6b-308f-93e2-266a9bfb5491.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:45:3d:f3:43:01:5b:4c:31:7b:3f:8c:2c:eb:c8:93:b8:45:
         9e:ed:dd:3b:89:25:d0:51:d8:88:38:b7:43:54:3b:b2:40:4a:
         e0:61:2c:79:5d:cb:11:99:2d:f7:1a:71:ec:70:a8:bc:37:35:
         2b:08:72:bc:a2:b5:4c:2b:f0:6b:36:d9:93:e7:65:d6:b2:12:
         65:ae:08:4a:4c:09:61:27:f8:e9:c6:c7:be:ca:25:7e:33:b9:
         f1:3f:0b:01:b1:09:c5:cf:cc:76:63:ae:59:bc:0d:d3:1b:d3:
         28:f4:7a:39:ff:45:0e:00:24:91:63:c2:7b:61:5b:4a:b4:b5:
         52:b9:5a:cb:ce:fa:72:be:70:c7:ed:9a:d0:56:1e:83:12:48:
         4b:be:a9:11:d2:cb:04:66:60:69:f5:45:9f:a1:0e:31:ee:7c:
         fc:7a:82:85:62:25:c4:91:9a:70:29:be:17:d7:a3:88:aa:17:
         d2:7c:17:95:b9:c4:95:83:61:fe:5b:14:da:d6:e2:28:f5:9a:
         01:03:34:d8:e8:cb:a3:da:d8:1f:70:4c:dc:89:61:b9:9b:e1:
         dd:43:4c:47:47:c0:1d:12:18:b2:43:77:73:d3:f8:66:c8:fc:
         e8:d8:05:b0:43:73:a6:89:6c:6f:b5:0d:dd:d4:14:9b:90:d3:
         34:1d:59:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:02:20 2026 by rpki-client