Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/29202c20-a821-3338-82db-6f5ad3580acf.roa
File:                     29202c20-a821-3338-82db-6f5ad3580acf.roa (raw, json)
Hash identifier:          uFlNfOY80pmLinObwFQM5GqxGk+U2oppcaRrcxE/EEQ=
Subject key identifier:   51:42:40:EC:39:CD:17:99:CF:F0:88:F7:B8:6C:66:1F:71:10:C4:5F
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDBBBCE80406644B19069C0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/29202c20-a821-3338-82db-6f5ad3580acf.roa
Signing time:             Tue 07 Apr 2026 16:27:25 +0000
ROA not before:           Tue 07 Apr 2026 16:27:25 +0000
ROA not after:            Mon 06 Jul 2026 16:27:25 +0000
asID:                     18779
IP address blocks:        104.252.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:db:bb:ce:80:40:66:44:b1:90:69:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:27:25 2026 GMT
            Not After : Jul  6 16:27:25 2026 GMT
        Subject: CN=96e6830c-f4ae-423b-91f0-27b221a99dab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bc:8e:75:64:1e:a1:eb:e2:e2:05:37:13:f5:
                    92:de:36:47:b9:7d:af:ef:f2:a2:0b:50:f6:10:02:
                    bc:2a:41:f1:95:f4:ee:f1:5f:f0:96:73:64:02:92:
                    ec:b2:af:1e:1e:d4:b4:06:ca:b9:d4:e0:8f:44:0f:
                    5b:a4:d6:6a:91:3d:fb:86:d2:c7:a9:0f:a0:69:7c:
                    f7:d4:9f:27:6b:58:4e:b9:cf:4a:d2:3e:53:a2:9f:
                    fb:86:47:9c:ad:79:d3:50:73:ba:52:ab:98:cd:29:
                    70:21:3b:e3:70:a5:96:61:ff:b8:03:82:82:1d:b6:
                    2b:55:7b:39:02:fb:1d:e1:37:ea:fa:4d:94:3a:3a:
                    10:d1:73:62:f9:d4:1d:11:b4:a5:9c:66:d0:d4:83:
                    fd:ff:ef:03:3c:bd:19:8f:2d:57:74:61:1b:fd:54:
                    33:38:7b:6f:98:6c:f5:5a:1d:ea:d4:84:b6:1d:ed:
                    00:66:65:1b:44:7f:6e:86:7a:e9:e8:23:9a:ab:ba:
                    cf:e0:6a:2e:c2:ac:7a:8a:87:7b:e0:cd:ab:11:16:
                    e4:bc:48:57:78:0a:16:c4:5e:66:59:29:3f:0b:af:
                    fd:90:77:43:1f:a3:ab:63:83:54:af:01:a4:4c:af:
                    aa:e4:8d:4e:d6:35:44:c8:b3:62:a6:c7:be:25:f5:
                    f1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:42:40:EC:39:CD:17:99:CF:F0:88:F7:B8:6C:66:1F:71:10:C4:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/29202c20-a821-3338-82db-6f5ad3580acf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:04:a1:ee:85:ef:d8:d2:88:6f:74:fc:be:ae:95:07:71:ca:
         e1:70:f0:97:c7:e9:bf:69:31:30:9a:de:52:93:8c:b5:34:4d:
         2a:c5:3b:ea:9a:cc:6c:a3:ab:30:53:5e:f6:e8:a4:01:56:c6:
         c4:01:7c:b7:6d:ef:9b:71:36:12:f3:37:e8:69:8b:05:de:b3:
         6e:42:9d:96:58:2e:c2:e2:a7:18:d1:27:b0:38:2a:1b:16:52:
         a6:6c:46:bd:f4:e0:13:e3:91:2c:f4:88:36:34:a7:b2:87:4c:
         ca:5b:d6:fc:67:78:b0:95:27:a9:c7:a8:af:05:ff:63:72:03:
         09:4e:1b:ea:7e:07:fe:8d:92:74:81:3b:11:a9:3f:03:9e:06:
         d6:1d:93:35:d1:b4:3f:4e:92:80:e0:ff:d0:18:c0:9a:dc:96:
         ca:e4:e0:e4:ca:59:f5:ce:71:bd:99:f5:c0:ff:6f:9b:bd:da:
         6c:1a:7b:72:b3:64:0d:99:0d:b9:a0:a2:f9:18:dc:12:23:54:
         92:0d:af:4d:a6:5a:94:7e:35:ed:40:6c:3b:86:10:2f:33:f8:
         be:29:29:99:79:b1:bd:ac:d9:4f:bc:85:f8:77:65:d4:da:75:
         58:12:f1:fc:3b:69:35:4a:07:b3:ae:a9:94:11:e0:3d:09:df:
         f0:5e:b2:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1t27vOgEBmRLGQacAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDQwNzE2MjcyNVoXDTI2MDcwNjE2MjcyNVowLzEtMCsGA1UEAxMk
OTZlNjgzMGMtZjRhZS00MjNiLTkxZjAtMjdiMjIxYTk5ZGFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlryOdWQeoevi4gU3E/WS3jZHuX2v7/KiC1D2
EAK8KkHxlfTu8V/wlnNkApLssq8eHtS0Bsq51OCPRA9bpNZqkT37htLHqQ+gaXz3
1J8na1hOuc9K0j5Top/7hkecrXnTUHO6UquYzSlwITvjcKWWYf+4A4KCHbYrVXs5
Avsd4Tfq+k2UOjoQ0XNi+dQdEbSlnGbQ1IP9/+8DPL0Zjy1XdGEb/VQzOHtvmGz1
Wh3q1IS2He0AZmUbRH9uhnrp6COaq7rP4Gouwqx6iod74M2rERbkvEhXeAoWxF5m
WSk/C6/9kHdDH6OrY4NUrwGkTK+q5I1O1jVEyLNipse+JfXxfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFFCQOw5zReZz/CI97hsZh9xEMRfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvMjkyMDJjMjAtYTgyMS0z
MzM4LTgyZGItNmY1YWQzNTgwYWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPwDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADoEoe6F79jSiG90/L6ulQdxyuFw8JfH6b9pMTCa3lKTjLU0TSrFO+qa
zGyjqzBTXvbopAFWxsQBfLdt75txNhLzN+hpiwXes25CnZZYLsLipxjRJ7A4KhsW
UqZsRr304BPjkSz0iDY0p7KHTMpb1vxneLCVJ6nHqK8F/2NyAwlOG+p+B/6NknSB
OxGpPwOeBtYdkzXRtD9OkoDg/9AYwJrclsrk4OTKWfXOcb2Z9cD/b5u92mwae3Kz
ZA2ZDbmgovkY3BIjVJINr02mWpR+Ne1AbDuGEC8z+L4pKZl5sb2s2U+8hfh3ZdTa
dVgS8fw7aTVKB7OuqZQR4D0J3/BesiI=
-----END CERTIFICATE-----
Generated at Wed Apr 8 01:43:47 2026 by rpki-client