Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/0ddb9b2d-6e9d-3ba8-a29f-b5b3d1126f61.roa
File:                     0ddb9b2d-6e9d-3ba8-a29f-b5b3d1126f61.roa (raw, json)
Hash identifier:          /hJ4putqzNAam5M3iTQQ89qnotiN87EccUjUNS1bzqQ=
Subject key identifier:   E2:D2:99:34:EE:7B:BC:2B:2E:A6:FB:3C:01:B7:03:BE:7A:A7:B6:17
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDBBCF5F7D27F9F37340100
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/0ddb9b2d-6e9d-3ba8-a29f-b5b3d1126f61.roa
Signing time:             Tue 07 Apr 2026 16:27:26 +0000
ROA not before:           Tue 07 Apr 2026 16:27:26 +0000
ROA not after:            Mon 06 Jul 2026 16:27:26 +0000
asID:                     18779
IP address blocks:        104.252.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:db:bc:f5:f7:d2:7f:9f:37:34:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:27:26 2026 GMT
            Not After : Jul  6 16:27:26 2026 GMT
        Subject: CN=5a0f1dfa-146f-48c7-94a3-9c4776e59e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:12:5a:5f:7d:c6:b0:a6:7f:6f:b5:3f:72:c1:
                    5d:c8:e9:44:d9:63:8a:5a:4b:d8:e2:cd:07:70:8a:
                    9e:c1:b1:1b:70:25:1d:cb:e4:4f:e6:6c:99:93:d3:
                    17:5a:30:99:d5:6c:c4:14:a2:87:fd:87:96:88:d9:
                    64:ec:56:ef:35:7d:57:ba:e8:40:91:97:93:5f:03:
                    33:70:4f:b7:cc:a2:4e:12:96:41:1e:96:bc:5c:25:
                    76:ab:e0:8d:39:bb:da:54:86:dd:5b:b4:05:b6:78:
                    1d:3f:d5:d5:7f:27:58:28:fd:6c:01:b3:70:f4:a4:
                    e3:65:f0:ea:ac:e2:ab:39:8b:87:26:64:e1:c8:e0:
                    2a:48:8b:bb:27:97:ab:8a:10:ea:f0:f6:0a:1a:5c:
                    e5:74:fa:f1:28:1b:76:84:48:0c:b0:9e:a3:20:f5:
                    3e:d4:96:24:b9:fb:ab:5e:43:93:f5:55:35:c6:4d:
                    b6:2a:65:d7:70:fc:92:9e:fb:dc:16:71:65:b9:c3:
                    56:ca:b6:15:df:ee:64:2c:9f:3b:ec:8b:88:ab:c7:
                    d8:82:ba:37:5b:4a:ed:1c:e6:ec:e6:3e:45:28:82:
                    8b:41:58:53:96:5f:02:c4:87:02:de:c4:53:df:27:
                    ca:ac:05:70:8d:0c:82:12:bd:34:91:e8:7c:4a:6b:
                    a4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D2:99:34:EE:7B:BC:2B:2E:A6:FB:3C:01:B7:03:BE:7A:A7:B6:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/0ddb9b2d-6e9d-3ba8-a29f-b5b3d1126f61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:8d:23:9b:70:c3:fb:05:bd:34:a3:9a:09:de:5e:ac:c1:fb:
         e0:bb:a2:1f:cf:0c:80:64:ce:9c:6f:08:40:d8:e9:ec:98:2d:
         91:0f:5a:70:2e:a4:61:20:90:10:8d:68:72:9b:1b:47:b1:85:
         8f:19:61:21:99:6c:6c:d2:7a:08:82:16:74:db:3b:75:a9:27:
         39:43:fc:eb:d0:74:81:bc:84:d4:66:22:4e:c0:1e:28:a9:2a:
         a5:0e:07:4d:4d:59:a3:7a:84:d8:93:ef:66:54:28:51:a3:b6:
         08:d8:74:c9:2c:a8:14:44:b8:db:ba:20:dc:d0:96:69:9e:0b:
         25:8f:f1:c7:b1:c8:f4:6e:08:95:9e:79:ec:fa:6b:5b:8d:c1:
         a7:cd:59:d5:c8:d4:f3:79:1c:a2:ea:28:22:b7:25:f8:c8:78:
         1f:38:e6:95:75:e0:49:5b:bd:14:11:d1:37:05:5c:9c:f0:74:
         87:94:ba:d4:e0:13:7d:32:3c:e1:dc:be:d8:f3:7b:90:96:d8:
         4e:70:61:4e:31:dd:c6:44:1d:4d:fa:24:05:bb:1b:52:98:25:
         e6:d6:d2:da:31:4c:76:26:80:7d:d3:91:ed:ac:7e:bd:cc:cf:
         bf:ae:75:1a:89:08:eb:0c:d6:c2:ab:79:51:72:10:70:ba:2d:
         9f:bc:65:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:39:29 2026 by rpki-client