Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/e38e4ca5-61db-306c-819c-39e9208163e9.roa
File:                     e38e4ca5-61db-306c-819c-39e9208163e9.roa (raw, json)
Hash identifier:          J0cobWMNJ3jEPTlpHZDkDL/riD4bDb2rMmdcCdncmOk=
Subject key identifier:   85:7D:34:78:6F:C2:E3:02:1B:8A:7B:9D:0A:78:4C:24:2F:53:6A:1F
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584F1B6242F787A56B0168560C10
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/e38e4ca5-61db-306c-819c-39e9208163e9.roa
Signing time:             Tue 08 Sep 2026 13:00:12 +0000
ROA not before:           Tue 08 Sep 2026 13:00:12 +0000
ROA not after:            Mon 07 Dec 2026 14:00:12 +0000
asID:                     400536
IP address blocks:        104.253.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1b:62:42:f7:87:a5:6b:01:68:56:0c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Sep  8 13:00:12 2026 GMT
            Not After : Dec  7 14:00:12 2026 GMT
        Subject: CN=254670d0-b247-4d45-9a9d-0db446b8a0ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:74:8e:0f:f4:ba:89:6f:b2:28:8b:92:0b:2f:
                    76:60:9c:37:c6:3b:57:db:ff:c4:1d:f6:aa:2a:88:
                    2d:bf:a2:71:3f:a5:b1:1c:59:48:de:ff:6c:e1:b3:
                    b2:05:19:ca:52:0f:82:13:74:f9:97:40:7c:14:e9:
                    ae:02:d5:ad:e5:2e:e9:fa:f8:3c:55:30:fd:ae:34:
                    18:f5:b4:75:3a:ec:eb:9b:3c:e7:1a:1d:bb:19:5c:
                    47:c5:32:49:fb:68:27:e7:c9:f8:62:76:6b:0d:75:
                    08:20:35:a5:19:e8:91:53:f1:d7:8c:90:61:d5:4d:
                    0a:5b:87:ab:af:c1:38:b3:a8:27:ba:85:cc:f4:af:
                    9f:0f:5c:49:7c:fa:24:d4:dd:cd:52:22:1d:ae:45:
                    0a:f9:47:f7:8c:db:cb:63:9d:57:b8:30:6e:3e:32:
                    ae:96:dc:8d:31:82:46:b4:f1:84:f2:1d:6e:06:d3:
                    6a:f1:91:a6:87:36:95:c7:6e:6a:3b:8e:af:65:b6:
                    4d:d8:3e:25:f9:09:e3:e6:6f:66:94:7d:ec:4a:26:
                    18:19:2c:2c:89:08:6d:9c:e0:41:a0:49:ff:5e:3e:
                    40:bf:6d:fb:19:eb:cf:8a:9c:a0:1a:9a:62:a6:78:
                    01:da:a9:8f:d5:0c:1a:7b:e5:0a:17:b9:88:29:6f:
                    cf:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:7D:34:78:6F:C2:E3:02:1B:8A:7B:9D:0A:78:4C:24:2F:53:6A:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/e38e4ca5-61db-306c-819c-39e9208163e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:78:17:5f:6f:4d:6c:19:a5:89:bb:d5:5a:ee:93:50:c3:52:
         c0:9f:43:42:de:8f:40:8f:7b:cf:0e:73:fd:12:e8:46:32:04:
         02:14:84:91:ba:d9:1f:32:a4:90:b7:ba:f7:46:74:23:5d:98:
         15:ee:fd:36:2b:84:be:61:f5:04:5b:81:f4:f8:38:e5:77:a2:
         0d:aa:a3:ad:0b:d2:ff:01:5c:18:ee:ce:28:1f:a7:fe:0e:00:
         e8:52:fa:fc:04:72:29:9c:ca:f5:22:b6:67:82:8f:25:1a:42:
         84:1c:72:85:ab:6c:92:66:e9:46:63:c3:9e:9f:15:68:70:9e:
         4f:78:d9:f9:34:20:fb:3c:43:a4:cf:59:76:09:92:87:de:92:
         dd:46:5e:1b:1d:e1:c8:7b:2f:da:78:a4:aa:04:d1:70:f9:71:
         ff:6d:ee:7b:cb:c5:dc:11:04:8f:6a:d3:bc:46:73:a9:f0:d6:
         60:12:c9:a3:cd:1f:0f:c9:a1:ed:10:3b:ff:34:f9:44:7b:94:
         6e:ae:ab:42:d7:ef:5b:9a:e5:23:b2:08:d6:19:91:c2:9b:7c:
         84:b4:ef:26:cb:48:09:ca:3f:7b:cb:bf:6a:c2:14:98:a4:aa:
         10:a5:27:ef:ce:c5:f3:87:93:29:70:da:48:ac:17:8f:ed:65:
         38:c9:bb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:39:49 2026 by rpki-client