Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/c319e918-59e4-33c5-b81b-b5cd36d57a9e.roa
File:                     c319e918-59e4-33c5-b81b-b5cd36d57a9e.roa (raw, json)
Hash identifier:          Aeg/HF3qfyyGCojaNBAy0f108ZCMTYjA3pWd4+SXYhs=
Subject key identifier:   7E:63:40:DD:4C:2E:08:27:32:B2:8B:33:D1:17:75:23:D1:02:D4:26
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CE949C22E95B25375FC10
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/c319e918-59e4-33c5-b81b-b5cd36d57a9e.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     8881
IP address blocks:        104.253.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:e9:49:c2:2e:95:b2:53:75:fc:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=98176a60-d649-4da8-a369-657631ede9e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b1:b5:10:1d:8e:d6:ac:49:f2:61:bd:d0:83:
                    90:e7:3f:51:8b:f7:e0:58:1a:b2:91:97:84:87:af:
                    c7:79:cf:f6:ef:0f:b8:74:dd:7e:80:67:d9:f8:22:
                    16:ed:f5:c2:15:ce:70:a4:fd:40:f0:12:ee:9a:05:
                    27:02:d3:a1:c1:bb:07:3f:cc:92:2e:1c:ba:88:33:
                    28:55:58:cd:e5:7a:67:98:9e:49:cf:9d:1c:3b:4f:
                    44:4c:57:e4:63:5d:01:1b:96:7b:3d:aa:35:ce:ff:
                    1b:bf:27:96:91:61:54:1a:94:6a:1c:7f:af:d4:57:
                    c1:b2:90:28:3d:94:96:a6:0e:5f:35:68:1d:95:3e:
                    78:a8:9f:80:d7:ab:aa:03:e9:0c:84:5a:a7:9b:23:
                    99:cc:93:ab:4a:38:f2:51:7e:d1:c0:64:cb:01:40:
                    ca:4e:1a:a8:8b:98:24:75:be:4c:7a:1f:13:ff:b4:
                    79:b1:09:1d:83:37:d7:c9:9f:57:e9:80:4a:ec:6d:
                    80:d6:3f:d1:be:bc:42:30:43:ec:ee:4c:dd:52:ad:
                    af:9d:b7:61:f3:9c:28:59:93:84:c9:f6:98:0a:22:
                    da:36:b3:5c:0f:4c:b6:d3:ab:db:23:8b:91:e3:56:
                    b4:2e:c1:78:65:87:e2:5c:5e:44:61:82:59:1c:1c:
                    5f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:63:40:DD:4C:2E:08:27:32:B2:8B:33:D1:17:75:23:D1:02:D4:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/c319e918-59e4-33c5-b81b-b5cd36d57a9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:ab:47:34:a7:a6:9d:d4:dd:39:16:ad:00:59:b6:89:f7:33:
         d8:92:9e:97:07:15:22:bb:76:f3:36:9a:86:48:a2:df:90:44:
         e9:f8:40:6d:15:d8:41:be:f8:b8:79:ed:cd:1d:d3:fc:be:c6:
         f0:d8:a1:fe:b9:d3:2a:7d:2f:bd:4e:a1:02:ba:6b:41:0a:0e:
         fd:f1:93:2e:2c:98:8d:1d:f7:31:a2:6a:4f:54:0d:dc:ff:6f:
         6d:cc:21:cb:97:6d:30:4e:03:7e:b1:b2:e2:06:10:60:b2:98:
         17:7f:37:74:9c:fc:56:0b:ee:27:2e:12:55:3b:22:77:d5:f9:
         5c:79:b8:19:7b:28:9a:35:6d:99:a8:a0:91:79:1e:38:09:43:
         a0:a0:59:0e:75:bd:98:b3:96:40:f9:03:39:bc:b7:73:b3:70:
         e3:39:bf:66:61:53:e5:6b:3d:e0:96:8e:d4:c8:44:c1:a2:1d:
         ed:b5:08:56:17:c3:59:b0:eb:e3:13:ec:9f:ed:65:0a:33:f1:
         7b:fd:21:8a:8d:4f:80:4a:46:f0:a6:88:4b:da:e9:c1:00:bf:
         ca:98:0c:31:05:01:72:c3:be:10:6f:41:e3:3f:56:fb:88:17:
         b2:83:18:d6:14:dc:69:a7:a5:99:03:42:73:86:91:9c:b2:1d:
         7e:c6:0e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:05:39 2026 by rpki-client