Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/bdbf5cd8-4849-33f6-830f-17bb1d055bbd.roa
File:                     bdbf5cd8-4849-33f6-830f-17bb1d055bbd.roa (raw, json)
Hash identifier:          0Sr/Pt02kTsDFiYU/D5UAjZ7j6qQzIIWnmVazkMsZLk=
Subject key identifier:   CE:BF:43:3B:B4:5A:CA:B2:A8:0D:F2:F9:1F:11:B3:EE:4C:48:09:2E
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CA6689505B58839EFFDB0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/bdbf5cd8-4849-33f6-830f-17bb1d055bbd.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     9009
IP address blocks:        104.253.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:a6:68:95:05:b5:88:39:ef:fd:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=6ac31ec5-4d9d-4567-ba7f-b5f692cd197f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cc:eb:f7:28:fc:08:8b:9a:4e:be:45:4d:8c:
                    3f:d4:b2:7a:a5:c1:48:90:10:b9:4c:db:8f:aa:7e:
                    3e:9a:31:0e:89:bc:43:08:f7:ad:b8:d9:65:f4:a4:
                    59:61:e1:f0:bc:73:94:1b:0b:a5:45:20:36:42:1e:
                    74:d6:07:10:e7:4d:2c:a4:d7:50:ee:2b:cc:fa:56:
                    43:b4:e6:33:b5:c0:86:8e:3a:06:99:67:d4:f8:72:
                    c9:a7:c7:cd:e9:b7:84:93:55:37:6d:96:ef:71:8f:
                    e2:dc:7c:42:fd:c4:b2:15:92:c3:fc:7d:ec:05:76:
                    36:2a:b4:89:3a:ee:e1:84:50:69:8e:37:e8:d9:66:
                    63:a5:3b:de:66:e8:72:27:62:3c:08:e8:b6:47:cf:
                    f6:86:00:88:ae:ce:33:6b:82:31:1b:0d:9b:d9:40:
                    36:4b:5f:ac:d9:0a:6f:fa:7a:0b:66:9f:54:01:85:
                    2c:77:f9:88:72:03:d9:2b:9d:af:ca:65:21:fd:84:
                    ee:f2:f4:00:85:87:53:2a:6b:47:ed:9e:31:c7:16:
                    2c:f7:8f:67:81:4d:b0:ef:6c:b0:5a:8e:9b:a4:46:
                    d6:4b:8b:51:31:1b:38:d5:c4:b6:57:5a:e9:a6:4f:
                    77:81:2b:61:8e:41:c8:c2:9c:c0:1c:de:d7:2e:58:
                    ef:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:BF:43:3B:B4:5A:CA:B2:A8:0D:F2:F9:1F:11:B3:EE:4C:48:09:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/bdbf5cd8-4849-33f6-830f-17bb1d055bbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:d3:00:aa:d1:b3:40:23:be:82:58:b5:fa:7c:81:2d:53:b2:
         8b:72:10:4d:5d:bc:1d:36:99:aa:f0:e8:09:86:e2:c7:74:22:
         3c:71:ef:1b:4b:1c:6a:d0:ca:60:68:03:a3:97:f8:79:42:29:
         c9:4a:e4:5f:4a:3a:80:d0:f1:dd:6b:70:b9:4e:c5:b0:82:69:
         cb:02:48:5b:25:39:b4:61:a7:01:52:ba:c7:ef:be:18:ba:a1:
         f2:66:30:98:09:f2:52:6f:16:f4:44:24:d8:22:0c:c9:4a:25:
         56:6c:2e:d2:4f:02:59:c6:8e:9e:7b:54:a7:00:16:a2:dd:df:
         32:df:d6:17:c0:54:f4:de:c8:f0:b6:f3:bf:c4:61:cc:3e:a3:
         03:f6:f5:b5:84:1b:f4:68:23:29:dc:85:7d:ee:37:ee:46:d3:
         41:c7:12:e8:e2:24:27:2a:80:be:07:47:f6:20:3c:00:fa:34:
         62:98:ef:5d:55:3b:b5:93:54:2b:fc:c2:db:68:92:a5:43:4c:
         78:83:f5:86:c9:de:ad:00:64:1f:a6:48:24:a4:db:61:0e:a9:
         5f:1a:3c:84:01:de:5d:dc:d4:5c:19:c6:08:53:88:a8:9e:5b:
         65:0a:c4:ec:74:a7:f0:04:eb:bc:ef:0b:2b:b8:d8:95:8c:0d:
         43:47:7a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:55:41 2026 by rpki-client