Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/efd32d5f-843b-33b6-ab17-32d47a49000a.roa
File:                     efd32d5f-843b-33b6-ab17-32d47a49000a.roa (raw, json)
Hash identifier:          nWXcpEqqwYsGiMjsZ/lcbgoq7yV9MvU6vxu2aqFGfjM=
Subject key identifier:   7F:CD:2A:8E:FD:05:AE:21:95:E5:6F:93:3F:8E:51:88:3A:F2:2D:12
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CF01AD12E09E6CFDC6800
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/efd32d5f-843b-33b6-ab17-32d47a49000a.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     64445
IP address blocks:        104.253.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:f0:1a:d1:2e:09:e6:cf:dc:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=8df6af50-31bb-42a4-8386-6850f5ffa7dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:85:a2:03:75:c7:a2:8c:30:d3:aa:03:6f:89:
                    01:72:1c:ae:52:31:7d:2c:bb:d3:e8:49:09:3c:b2:
                    10:16:a2:ea:f7:11:7b:0c:f5:ae:84:cb:79:ae:4a:
                    64:18:26:a2:c5:05:d3:56:63:b0:8f:82:29:88:9d:
                    19:c8:ed:70:a6:22:07:d6:18:15:fd:77:ec:68:4a:
                    71:2e:2f:fa:2f:25:89:c1:2c:de:19:83:d5:a9:8d:
                    d9:b9:46:c3:f6:e7:9a:34:86:5e:ea:89:0c:cc:3c:
                    af:3b:ed:63:54:17:4e:56:c7:ad:6b:92:c3:7e:61:
                    54:64:e9:f2:15:d6:45:a3:76:39:94:ba:27:38:59:
                    3f:b0:f7:2a:e2:60:dc:be:98:e0:84:15:90:d3:3c:
                    b5:7a:44:a2:6c:08:c7:8f:74:0f:fd:13:82:23:40:
                    54:df:5f:9e:54:7c:6e:1d:b9:68:45:d6:cf:43:a2:
                    bb:c3:4f:40:f5:60:00:e6:e7:45:a8:9b:8a:b2:2a:
                    1a:51:23:ab:81:ca:ff:a0:25:a4:d8:ff:d0:d4:e2:
                    b1:29:bf:8e:10:b3:5e:2b:65:ec:5d:fe:86:b5:49:
                    09:07:15:52:13:f6:6f:81:56:10:b5:71:32:07:34:
                    b1:d3:20:8f:f6:6f:b8:2a:4e:38:13:3a:30:72:6b:
                    1c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CD:2A:8E:FD:05:AE:21:95:E5:6F:93:3F:8E:51:88:3A:F2:2D:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/efd32d5f-843b-33b6-ab17-32d47a49000a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:4b:e3:7b:f6:55:72:83:cf:fc:3b:e6:01:b6:bb:38:27:aa:
         b0:8f:8c:69:3a:2d:d5:29:a6:71:71:66:9a:23:fc:64:e5:48:
         07:c6:17:cf:66:40:30:db:a7:8b:8f:c8:39:26:64:eb:d0:18:
         e2:4b:ba:27:ed:7c:2b:20:80:8c:40:df:7c:bd:e9:28:13:67:
         75:f2:28:2e:40:07:36:20:54:d5:69:2a:0a:0c:79:c3:61:f1:
         9a:51:96:79:14:be:e0:bc:d3:f7:b8:be:c8:16:be:da:cb:b5:
         86:b3:40:ee:96:24:11:77:a0:7a:c7:a3:4d:6c:63:2c:82:d5:
         4c:18:1d:94:cd:cf:cb:05:08:b6:c7:33:ba:84:27:02:35:2d:
         aa:68:c2:76:49:0c:92:26:48:4b:2b:35:34:5e:ec:9d:2f:6c:
         51:13:e6:72:27:5a:a8:b7:ab:00:63:ce:b1:50:f0:49:70:8e:
         f4:8d:73:84:a5:1c:73:63:ea:16:fd:a2:ac:71:5e:61:f4:1f:
         5b:a6:1b:f8:9b:77:39:63:6f:f3:22:7d:7c:ae:81:ca:a0:11:
         7f:71:de:f5:17:1b:a8:fc:34:26:be:21:ce:a1:73:02:fa:69:
         e7:45:7f:79:6a:33:85:e9:eb:bf:a1:60:07:75:ca:db:d1:45:
         9f:2d:06:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHPAa0S4J5s/caAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk
OGRmNmFmNTAtMzFiYi00MmE0LTgzODYtNjg1MGY1ZmZhN2RkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYWiA3XHooww06oDb4kBchyuUjF9LLvT6EkJ
PLIQFqLq9xF7DPWuhMt5rkpkGCaixQXTVmOwj4IpiJ0ZyO1wpiIH1hgV/XfsaEpx
Li/6LyWJwSzeGYPVqY3ZuUbD9ueaNIZe6okMzDyvO+1jVBdOVseta5LDfmFUZOny
FdZFo3Y5lLonOFk/sPcq4mDcvpjghBWQ0zy1ekSibAjHj3QP/ROCI0BU31+eVHxu
HbloRdbPQ6K7w09A9WAA5udFqJuKsioaUSOrgcr/oCWk2P/Q1OKxKb+OELNeK2Xs
Xf6GtUkJBxVSE/ZvgVYQtXEyBzSx0yCP9m+4Kk44EzowcmscOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH/NKo79Ba4hleVvkz+OUYg68i0SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvZWZkMzJkNWYtODQzYi0z
M2I2LWFiMTctMzJkNDdhNDkwMDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP1aMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAFL43v2VXKDz/w75gG2uzgnqrCPjGk6LdUppnFxZpoj/GTlSAfGF89m
QDDbp4uPyDkmZOvQGOJLuiftfCsggIxA33y96SgTZ3XyKC5ABzYgVNVpKgoMecNh
8ZpRlnkUvuC80/e4vsgWvtrLtYazQO6WJBF3oHrHo01sYyyC1UwYHZTNz8sFCLbH
M7qEJwI1LapownZJDJImSEsrNTRe7J0vbFET5nInWqi3qwBjzrFQ8ElwjvSNc4Sl
HHNj6hb9oqxxXmH0H1umG/ibdzljb/MifXyugcqgEX9x3vUXG6j8NCa+Ic6hcwL6
aedFf3lqM4Xp67+hYAd1ytvRRZ8tBkM=
-----END CERTIFICATE-----
Generated at Thu Sep 24 23:15:37 2026 by rpki-client