Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b2a78f91-df9d-33f9-b411-434efb46c32c.roa
File:                     b2a78f91-df9d-33f9-b411-434efb46c32c.roa (raw, json)
Hash identifier:          B1oDKq9L+p6HJgQ0uw8d99VJiy1Myrd+xPl39TfvML0=
Subject key identifier:   AF:12:A5:72:8E:24:39:2D:DA:A6:97:01:23:D1:20:E7:A0:FB:F3:45
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CC602F05C1336AE9C2780
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b2a78f91-df9d-33f9-b411-434efb46c32c.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     3356
IP address blocks:        104.253.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:c6:02:f0:5c:13:36:ae:9c:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=b916a140-9742-4a2d-bd69-f69d58ce99e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9d:ad:af:a7:82:2a:87:f5:d4:13:15:16:dc:
                    96:15:b2:e6:bf:9d:82:16:8c:20:0b:b8:c7:c6:ec:
                    74:54:a4:6f:fd:bb:dd:5a:47:f2:2d:40:b5:aa:71:
                    4f:77:c5:8e:0f:37:2f:c3:44:6f:6f:2b:62:65:f0:
                    3b:f8:63:ce:e9:e6:90:95:12:9b:2a:04:2c:00:e8:
                    5e:5b:57:bb:88:59:c6:53:ac:d1:46:5a:79:c3:31:
                    ed:66:d5:cb:1f:c3:14:ea:1a:3f:18:2f:28:42:e5:
                    d6:d1:07:c5:33:c7:62:22:fd:70:03:4b:00:59:fc:
                    7c:98:bb:0f:88:0a:1c:0e:e3:1e:fe:79:67:c8:54:
                    c7:66:42:a7:16:d5:41:cf:fa:83:2c:c6:ed:24:1a:
                    b7:31:3b:22:66:18:72:58:9b:83:f3:5c:0b:0b:50:
                    9d:e4:6d:c1:ef:15:a9:c1:e4:5d:d0:3c:bd:e1:5e:
                    d6:15:4b:34:69:81:b1:c6:f0:75:93:8e:c0:d9:9b:
                    8b:c1:53:cf:73:1e:ee:85:1b:47:cb:96:64:af:47:
                    99:e2:a6:65:70:2e:e2:31:38:ca:a2:4d:71:35:bc:
                    02:c5:3b:71:c6:7b:a7:c4:1b:dd:d5:97:62:54:cb:
                    b5:d3:42:d9:a2:2b:ca:a0:c5:39:70:64:a0:11:d6:
                    b9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:12:A5:72:8E:24:39:2D:DA:A6:97:01:23:D1:20:E7:A0:FB:F3:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b2a78f91-df9d-33f9-b411-434efb46c32c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:75:f7:41:24:f4:e3:12:d0:3e:0e:77:dd:2b:35:44:1f:e9:
         08:8c:5d:f7:80:b1:b7:5f:e9:ec:93:33:7f:ef:63:c2:f6:27:
         87:41:52:45:af:e7:c7:f4:f0:4e:7a:e2:45:e1:a3:ea:ef:80:
         ba:29:ad:4f:8d:6f:75:c2:8d:22:93:7d:68:48:ef:ba:7f:2e:
         93:fb:df:00:19:80:6d:de:b1:3a:0b:70:e1:30:ed:53:da:08:
         5b:39:b6:44:06:5f:ca:a1:1c:c3:78:f4:5c:66:e5:37:7a:f9:
         79:2d:c0:34:5b:43:31:85:c3:7f:55:08:f5:fe:e3:00:19:34:
         b8:d1:ad:8d:09:f5:80:04:ac:f3:c8:6e:74:c2:fa:4c:e2:55:
         0c:3d:45:be:c4:52:5d:b6:5b:e5:c7:36:ca:14:ef:65:29:85:
         d9:79:bd:1a:aa:d3:9d:75:ba:8c:41:72:2a:24:fd:5a:ef:5f:
         c7:68:08:c9:fb:be:0e:6c:b0:0d:a7:16:82:87:65:cf:0a:f1:
         cd:ac:ff:3c:d8:ec:33:c1:18:83:18:55:cd:6c:e2:15:53:04:
         16:e3:94:7d:9b:39:9b:4f:9b:34:84:74:57:9c:7f:bd:c9:14:
         58:b1:bd:13:e3:dd:7a:f4:d4:36:98:90:c4:5d:1c:3a:28:3e:
         aa:0b:66:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHMYC8FwTNq6cJ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk
YjkxNmExNDAtOTc0Mi00YTJkLWJkNjktZjY5ZDU4Y2U5OWUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmp2tr6eCKof11BMVFtyWFbLmv52CFowgC7jH
xux0VKRv/bvdWkfyLUC1qnFPd8WODzcvw0RvbytiZfA7+GPO6eaQlRKbKgQsAOhe
W1e7iFnGU6zRRlp5wzHtZtXLH8MU6ho/GC8oQuXW0QfFM8diIv1wA0sAWfx8mLsP
iAocDuMe/nlnyFTHZkKnFtVBz/qDLMbtJBq3MTsiZhhyWJuD81wLC1Cd5G3B7xWp
weRd0Dy94V7WFUs0aYGxxvB1k47A2ZuLwVPPcx7uhRtHy5Zkr0eZ4qZlcC7iMTjK
ok1xNbwCxTtxxnunxBvd1ZdiVMu100LZoivKoMU5cGSgEda5UwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK8SpXKOJDkt2qaXASPRIOeg+/NFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvYjJhNzhmOTEtZGY5ZC0z
M2Y5LWI0MTEtNDM0ZWZiNDZjMzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP3OMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABd190Ek9OMS0D4Od90rNUQf6QiMXfeAsbdf6eyTM3/vY8L2J4dBUkWv
58f08E564kXho+rvgLoprU+Nb3XCjSKTfWhI77p/LpP73wAZgG3esToLcOEw7VPa
CFs5tkQGX8qhHMN49Fxm5Td6+XktwDRbQzGFw39VCPX+4wAZNLjRrY0J9YAErPPI
bnTC+kziVQw9Rb7EUl22W+XHNsoU72Uphdl5vRqq0511uoxBciok/VrvX8doCMn7
vg5ssA2nFoKHZc8K8c2s/zzY7DPBGIMYVc1s4hVTBBbjlH2bOZtPmzSEdFecf73J
FFixvRPj3Xr01DaYkMRdHDooPqoLZl8=
-----END CERTIFICATE-----
Generated at Thu Sep 24 22:28:43 2026 by rpki-client