Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/0b474437-166f-3568-8e31-7a12f8ce9b45.roa
File:                     0b474437-166f-3568-8e31-7a12f8ce9b45.roa (raw, json)
Hash identifier:          QyfnhvTzHQR1lpSF1RG224WzA+iDtzjuxUirFHUAarI=
Subject key identifier:   37:DB:1F:A6:63:E5:2B:E4:6B:20:86:CB:E6:64:A8:E5:E4:86:4C:97
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDC1265032C871B9581DA00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/0b474437-166f-3568-8e31-7a12f8ce9b45.roa
Signing time:             Tue 07 Apr 2026 16:28:06 +0000
ROA not before:           Tue 07 Apr 2026 16:28:06 +0000
ROA not after:            Mon 06 Jul 2026 16:28:06 +0000
asID:                     396356
IP address blocks:        104.252.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dc:12:65:03:2c:87:1b:95:81:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:28:06 2026 GMT
            Not After : Jul  6 16:28:06 2026 GMT
        Subject: CN=628dbb9a-952f-4c32-9be7-53272903f503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7f:7e:f5:72:0c:70:fc:1b:e1:95:e9:c1:fd:
                    31:0a:11:47:72:1a:5d:5d:bd:3f:54:b6:cf:76:c0:
                    2d:d6:a2:cb:27:ad:ed:4c:ad:ec:8f:a7:63:b4:40:
                    dd:4e:e0:75:50:0c:8f:f5:6b:f7:dd:e1:23:48:ba:
                    ac:cf:e3:5b:cf:5a:e6:f0:28:55:15:b0:2f:f2:76:
                    21:91:38:40:7f:63:1a:64:7c:7c:ca:6e:3c:a3:33:
                    1d:8f:79:9a:97:f1:9a:e8:a2:44:46:e3:15:b5:1a:
                    7c:52:10:90:43:f0:37:86:c2:17:67:b9:67:e2:3a:
                    d4:a3:bc:30:12:ff:bd:77:92:25:9c:56:2f:9a:57:
                    b0:ee:e2:9e:5a:00:e1:99:a2:cf:b0:e3:53:72:e8:
                    17:b8:36:84:25:c1:fb:91:3f:5a:c7:d9:59:30:71:
                    91:d1:38:21:92:c2:d1:4f:95:3f:e8:e1:33:85:55:
                    9b:49:19:c7:8b:56:fa:61:47:94:7f:04:27:61:76:
                    f5:cf:44:c4:68:bd:74:3b:a0:dd:61:1d:67:f1:1f:
                    f8:56:07:f5:bb:c5:c3:ba:71:84:5a:d2:79:d1:85:
                    6b:1a:ea:b7:05:e8:cd:76:83:fc:28:61:2b:3f:2a:
                    f3:24:7c:ae:c8:c4:6f:10:6c:a1:cd:4e:1e:ee:b0:
                    0b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:DB:1F:A6:63:E5:2B:E4:6B:20:86:CB:E6:64:A8:E5:E4:86:4C:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/0b474437-166f-3568-8e31-7a12f8ce9b45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:33:4f:ad:31:b0:1d:e4:2e:d5:fd:cf:7d:f6:20:18:40:42:
         43:73:ed:87:52:d9:95:ed:7a:c7:b1:8d:4f:e8:bb:07:23:6c:
         87:33:32:9a:f2:55:79:c6:20:6d:f3:d9:43:75:46:cc:cb:d6:
         c7:66:cc:45:80:5e:14:e0:1a:b4:a8:75:95:1d:4a:10:d4:8e:
         af:24:3f:25:cd:01:26:02:33:d5:52:55:23:e7:86:d6:c3:68:
         a0:58:a7:f1:f4:c2:ef:14:90:8a:76:a2:13:60:e8:12:eb:a6:
         cb:7b:04:60:1c:17:e7:a2:3b:cf:7d:4e:70:b8:3e:d9:a3:da:
         c7:90:74:89:c3:86:c1:97:d5:0b:e9:19:37:d0:e2:20:44:f3:
         58:df:07:90:7e:38:58:3b:85:84:7b:a6:8b:bc:ac:b8:cf:04:
         a8:7b:3c:47:41:90:22:13:4f:69:c1:f4:35:f9:44:dd:ca:8f:
         de:48:7c:16:a3:e7:b5:5e:cc:ca:9d:19:50:28:8f:e8:01:e3:
         08:70:51:a6:2b:d3:35:74:05:66:08:19:03:fe:02:a9:71:21:
         41:77:7a:cc:08:9d:ea:9c:d0:c1:a5:02:dd:e9:6c:e5:2c:03:
         e5:11:74:fc:2b:6d:31:22:78:bd:1f:8f:b1:af:6d:d3:fe:9b:
         56:2b:9f:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1t3BJlAyyHG5WB2gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDQwNzE2MjgwNloXDTI2MDcwNjE2MjgwNlowLzEtMCsGA1UEAxMk
NjI4ZGJiOWEtOTUyZi00YzMyLTliZTctNTMyNzI5MDNmNTAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo39+9XIMcPwb4ZXpwf0xChFHchpdXb0/VLbP
dsAt1qLLJ63tTK3sj6djtEDdTuB1UAyP9Wv33eEjSLqsz+Nbz1rm8ChVFbAv8nYh
kThAf2MaZHx8ym48ozMdj3mal/Ga6KJERuMVtRp8UhCQQ/A3hsIXZ7ln4jrUo7ww
Ev+9d5IlnFYvmlew7uKeWgDhmaLPsONTcugXuDaEJcH7kT9ax9lZMHGR0TghksLR
T5U/6OEzhVWbSRnHi1b6YUeUfwQnYXb1z0TEaL10O6DdYR1n8R/4Vgf1u8XDunGE
WtJ50YVrGuq3BejNdoP8KGErPyrzJHyuyMRvEGyhzU4e7rALUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDfbH6Zj5SvkayCGy+ZkqOXkhkyXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvMGI0NzQ0MzctMTY2Zi0z
NTY4LThlMzEtN2ExMmY4Y2U5YjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPztMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB0zT60xsB3kLtX9z332IBhAQkNz7YdS2ZXtesexjU/ouwcjbIczMpry
VXnGIG3z2UN1RszL1sdmzEWAXhTgGrSodZUdShDUjq8kPyXNASYCM9VSVSPnhtbD
aKBYp/H0wu8UkIp2ohNg6BLrpst7BGAcF+eiO899TnC4Ptmj2seQdInDhsGX1Qvp
GTfQ4iBE81jfB5B+OFg7hYR7pou8rLjPBKh7PEdBkCITT2nB9DX5RN3Kj95IfBaj
57VezMqdGVAoj+gB4whwUaYr0zV0BWYIGQP+AqlxIUF3eswIneqc0MGlAt3pbOUs
A+URdPwrbTEieL0fj7GvbdP+m1YrnxI=
-----END CERTIFICATE-----
Generated at Wed Apr 8 01:42:57 2026 by rpki-client