Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b0628daf-ad38-3550-afad-d130ee8be259.roa
File:                     b0628daf-ad38-3550-afad-d130ee8be259.roa (raw, json)
Hash identifier:          yPYma2/Ojh6Jx+DTVyZu3Ly3fBFMtpZkvi9y+WrnILY=
Subject key identifier:   99:48:CA:18:AC:A3:8E:1E:11:72:55:11:58:EB:66:F2:C6:DC:81:CB
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CBC1E37CC9CA57594C740
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b0628daf-ad38-3550-afad-d130ee8be259.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     398781
IP address blocks:        104.252.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:bc:1e:37:cc:9c:a5:75:94:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=84d2b53e-aaaf-4f4b-8d7b-928e9fb0d85c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d4:a4:a1:c7:fa:02:38:c9:83:03:13:af:27:
                    ad:74:47:43:10:2b:23:ea:14:31:96:2d:75:a7:d1:
                    0b:9b:e9:7c:80:2a:6c:65:88:29:e6:c4:77:f9:fc:
                    76:d7:64:46:06:76:d7:4d:bd:a0:70:49:d2:58:1e:
                    b7:fa:b6:48:0c:85:ad:ff:83:9d:72:52:3e:85:c8:
                    ad:58:c4:1e:2b:18:8b:cd:01:99:52:3e:81:2a:56:
                    67:8b:ae:29:de:78:e0:e8:a3:bd:9b:b5:aa:3f:16:
                    cf:b6:e4:3c:e6:45:a0:3f:9f:92:fd:f2:b9:22:46:
                    c7:be:7d:ee:23:ae:fd:35:a1:45:07:d4:d2:2e:37:
                    e9:af:6b:cb:3f:fb:7d:02:4c:57:9b:cb:0d:19:fb:
                    d5:2b:ad:be:a8:15:06:97:da:c6:31:e4:48:d9:c8:
                    b4:45:75:ff:fe:76:a6:3d:56:a2:56:e0:dc:0a:89:
                    de:5d:43:86:5e:43:f3:73:87:5c:92:fb:53:f6:5e:
                    f9:ff:54:8f:2a:12:ad:30:3d:59:89:9f:19:8a:61:
                    ff:67:64:f9:c8:ac:17:aa:ae:7d:82:9f:e9:ef:76:
                    da:2f:67:c6:55:6f:cd:75:a5:38:d6:6f:a3:4f:92:
                    f2:01:e9:a6:11:8b:66:71:f8:4b:b3:e3:3d:1c:67:
                    fa:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:48:CA:18:AC:A3:8E:1E:11:72:55:11:58:EB:66:F2:C6:DC:81:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b0628daf-ad38-3550-afad-d130ee8be259.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:7b:78:6b:e7:3f:14:de:77:c6:56:35:4b:3a:4d:a6:8b:48:
         79:f2:94:97:e1:09:c3:b6:34:62:a4:05:ae:a7:0c:6c:a0:c6:
         fa:aa:a4:83:d4:d1:ec:15:de:db:93:04:80:b8:7a:23:87:cc:
         03:f0:ca:f0:fd:2f:c7:ab:3f:d1:c2:0c:d2:d2:2f:a4:5c:27:
         f2:62:36:88:8d:57:e9:30:03:5f:c1:d6:c7:bb:42:19:42:d9:
         c2:cc:40:fe:49:03:d3:83:24:e8:45:d1:a2:8f:ef:75:08:49:
         f2:06:ef:37:ab:d3:f7:42:3f:81:fb:e3:fc:f0:9c:5c:cf:3f:
         d3:42:77:ab:97:e3:34:50:c5:5d:ca:f1:55:ed:cb:11:02:aa:
         58:cd:36:40:78:e2:d5:7f:8e:fb:c5:30:43:e6:24:6e:03:01:
         49:2d:68:86:4a:f4:09:7d:7d:c3:fe:37:4b:3f:0c:3e:56:48:
         28:97:38:84:2b:80:62:2c:1d:64:ed:ac:2c:5f:f5:09:34:1f:
         03:26:cf:8c:57:58:75:44:65:40:ff:ed:69:7c:12:68:ff:67:
         10:8a:e5:6b:3d:d2:ec:52:f1:31:cf:e5:18:1f:1e:56:e2:a9:
         9f:95:5e:2d:83:5e:b8:b7:b0:bf:f8:77:87:94:aa:87:f5:28:
         90:19:40:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:54:27 2026 by rpki-client