Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/c55d137a-a789-3852-8def-7447ff7e143c.roa
File:                     c55d137a-a789-3852-8def-7447ff7e143c.roa (raw, json)
Hash identifier:          ide58DqQCrlfIuixqZpAi6mL9SZDnZjUroCA7mr10bc=
Subject key identifier:   C3:73:24:D9:B0:35:B2:B5:0C:4C:6E:DD:33:84:58:C7:96:04:C2:4A
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CD2C51A2FF282FBE3BA00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/c55d137a-a789-3852-8def-7447ff7e143c.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     211273
IP address blocks:        104.253.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:d2:c5:1a:2f:f2:82:fb:e3:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=7f9e7a74-63c6-4d8e-9ff1-9f3e9c07b0f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:4f:3b:ab:2a:0a:55:9c:94:e9:3a:15:d8:4a:
                    c6:90:fa:e8:2b:f7:b6:31:6a:52:92:ed:b2:94:53:
                    3a:8d:cc:26:2f:c1:07:f5:4e:62:cb:b9:20:22:3c:
                    e8:74:4e:8d:94:18:0a:42:c2:34:15:d2:3a:75:e2:
                    d5:20:15:62:2f:98:2e:95:d5:1a:8b:68:5c:5a:0f:
                    58:cd:ee:ef:6c:6c:e8:a0:64:89:27:e4:8c:cc:cb:
                    2f:a3:53:7a:03:b2:d3:9b:e3:89:53:92:2b:1d:72:
                    52:01:8f:56:59:3f:f7:fe:8e:58:28:4c:9f:76:6f:
                    58:38:bb:b1:e8:5f:44:2f:6d:d1:79:61:0e:04:51:
                    87:e3:15:54:d2:d7:cd:9f:64:ee:54:59:a2:67:dd:
                    2e:2d:79:8c:1b:5a:71:c1:e0:a4:77:86:51:de:f6:
                    ca:9b:e0:cc:e2:5f:a2:e8:ea:ad:3a:85:be:9c:04:
                    7d:9b:ca:23:24:bf:78:cc:c1:f8:90:60:29:73:d6:
                    6b:bc:4a:62:07:c3:aa:3c:da:ed:c0:a9:e6:ae:35:
                    6c:43:77:10:57:f5:48:f0:67:5e:b5:46:8a:f6:0e:
                    83:a4:33:fc:46:91:a6:1b:21:85:1c:f8:ff:b6:10:
                    93:a6:37:b4:5e:87:e3:cd:d4:9c:e3:59:7d:22:7c:
                    67:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:73:24:D9:B0:35:B2:B5:0C:4C:6E:DD:33:84:58:C7:96:04:C2:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/c55d137a-a789-3852-8def-7447ff7e143c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:b8:bf:2b:03:ac:1b:21:5c:15:ae:9b:e9:54:c3:85:98:ac:
         fd:c5:f3:cc:09:cf:b4:0e:bc:58:64:ce:8f:d2:68:b9:7b:07:
         1c:9f:5e:59:74:45:3d:de:ee:33:35:10:4a:e3:03:b6:e8:77:
         7d:a3:ab:39:be:3b:ac:3d:b1:78:03:b5:1c:e1:b3:6b:fa:99:
         d8:23:40:47:5c:78:b6:c0:76:0e:74:23:78:ed:1e:7a:89:f6:
         de:69:24:b3:2c:22:d1:b6:fa:8b:69:43:ff:54:4c:22:17:5b:
         b7:9b:b0:c4:32:1f:57:13:83:a2:c8:82:5e:9c:b0:7a:78:38:
         5a:71:30:e7:84:61:fe:cb:6b:67:16:17:d0:58:84:ec:3b:96:
         38:75:00:cc:00:4a:6b:1a:21:4c:3b:33:9b:73:be:4f:11:f2:
         33:31:53:5a:df:91:38:b6:7a:c2:ad:12:37:bc:ba:77:a8:f7:
         ae:e6:b2:88:c4:bd:82:48:6b:22:55:cd:3b:a3:e9:e6:f2:96:
         1c:f4:c7:e5:9b:6f:c5:08:6c:36:e5:97:01:f7:7f:ee:6a:ed:
         fe:0b:f1:09:01:4e:11:14:01:4c:82:b1:4a:91:9c:cb:bd:c9:
         32:a6:72:5d:f1:59:93:dc:ea:f4:58:99:ed:35:c0:15:e3:dd:
         6e:67:b4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:14:13 2026 by rpki-client