Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b3fe7922-c0ad-325f-828f-d3145f266df8.roa
File:                     b3fe7922-c0ad-325f-828f-d3145f266df8.roa (raw, json)
Hash identifier:          rI5+o3FRNmgjuXnXJQYhedBS4pQ0TBOQgDQNNDpwktI=
Subject key identifier:   03:BF:68:35:18:26:95:17:73:42:7C:B8:99:A1:D7:7C:E5:86:7D:59
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584F49748D3E787D61C76751CB40
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b3fe7922-c0ad-325f-828f-d3145f266df8.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     212238
IP address blocks:        104.253.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:8d:3e:78:7d:61:c7:67:51:cb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ccdbb9a4-b01c-4a0b-89cd-aac531821095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bc:ce:c3:a5:96:c4:12:27:db:06:74:12:c6:
                    0d:87:3c:b0:e5:9d:a6:63:3b:00:7b:ae:06:2a:c1:
                    08:bb:13:24:57:d1:f0:54:7c:5c:36:84:71:b4:c1:
                    00:3f:58:8d:a9:29:d1:f8:b4:a4:45:35:a4:52:a7:
                    0d:88:d2:4f:ef:66:f9:ac:56:34:b3:de:24:ee:cf:
                    ce:38:fc:d2:2f:d4:6a:5a:82:a1:75:6c:77:85:59:
                    53:2e:23:81:3f:82:f0:5f:f9:9e:81:b6:e6:f5:bd:
                    78:59:4e:57:d1:ea:ec:bb:7c:7a:df:8b:0c:d4:b5:
                    be:e6:d5:ec:07:4d:1f:fa:6d:27:96:ad:40:f7:ec:
                    46:57:88:b4:7c:2e:1e:95:f8:b3:f7:20:9f:c5:cb:
                    41:4f:f4:47:b4:42:cd:26:c1:a9:99:a9:15:28:bd:
                    27:b1:97:63:a5:fa:59:e5:5d:89:c2:24:10:60:6a:
                    46:44:dc:fd:0a:9f:cf:45:57:5a:68:cf:ab:c7:c4:
                    b0:fd:fd:7d:9e:aa:bf:b1:75:07:55:87:fa:c4:dc:
                    1c:ca:e4:96:64:78:d2:92:17:c4:61:38:7a:6c:2e:
                    f3:7e:6d:31:45:49:51:92:e8:6c:f5:f1:0f:f6:dd:
                    51:0a:60:10:45:2f:03:6d:0b:23:b3:f8:2e:db:0c:
                    81:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:BF:68:35:18:26:95:17:73:42:7C:B8:99:A1:D7:7C:E5:86:7D:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b3fe7922-c0ad-325f-828f-d3145f266df8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:61:f7:1f:91:1d:d1:24:e7:41:6d:c3:35:24:6a:23:8c:01:
         70:29:9f:1f:b3:cc:7c:9e:df:70:97:92:6a:18:fd:e5:69:a4:
         8a:04:cb:4f:16:5b:02:bd:0c:13:3a:f6:fb:fe:a9:bd:96:37:
         7c:66:26:e1:f1:96:e0:76:bf:10:8e:f0:5b:7d:b1:bc:90:e5:
         17:e8:b5:eb:6c:2f:da:77:00:4d:87:a5:6b:a6:af:15:c6:43:
         bc:a2:84:b8:bc:73:d3:ff:ea:7b:07:26:ef:5f:a3:23:f8:d1:
         9c:c3:2a:bd:41:71:68:f8:7d:60:60:0d:a9:9e:31:e7:b0:2a:
         c0:b2:93:21:c8:a4:13:40:94:b1:55:25:56:89:01:62:04:df:
         f7:10:a4:71:c8:51:43:fc:2b:0b:6e:25:c1:60:37:71:9a:70:
         f1:43:fa:c8:fb:2f:22:7d:fa:20:9d:50:75:a0:b1:88:56:40:
         3f:be:96:73:35:91:82:36:34:41:aa:7a:1a:cb:0c:55:3b:9e:
         58:ec:b7:fb:03:ab:be:d6:31:a8:bc:62:1d:6e:48:a9:83:c5:
         d7:b2:ae:ee:0a:f1:7e:38:ad:a2:8f:1e:44:21:06:97:d9:79:
         a5:fb:b6:0a:5b:10:cc:48:56:22:ac:ab:11:6f:7c:07:d3:52:
         e2:06:1a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:48:27 2026 by rpki-client