Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/29be9b7b-c427-37e0-93ab-7363a7f572e0.roa
File:                     29be9b7b-c427-37e0-93ab-7363a7f572e0.roa (raw, json)
Hash identifier:          ITNWRRTSYEz8lW06MJRSAOkKlVD/lGAh9jAzSIFbQvI=
Subject key identifier:   2E:51:58:AF:53:E1:AE:A6:19:5C:9F:35:A1:1B:A1:25:1A:5F:7B:FC
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDBE90EAAE5885E74219C00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/29be9b7b-c427-37e0-93ab-7363a7f572e0.roa
Signing time:             Tue 07 Apr 2026 16:27:47 +0000
ROA not before:           Tue 07 Apr 2026 16:27:47 +0000
ROA not after:            Mon 06 Jul 2026 16:27:47 +0000
asID:                     212238
IP address blocks:        104.252.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:db:e9:0e:aa:e5:88:5e:74:21:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:27:47 2026 GMT
            Not After : Jul  6 16:27:47 2026 GMT
        Subject: CN=cb167f5a-a5ed-41ed-88d8-9a6ff296db19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d9:58:8a:28:3e:9d:85:74:02:92:53:f7:f7:
                    8e:a8:d5:87:a6:ef:40:42:b9:9e:27:02:3d:05:a2:
                    7e:1f:8f:3a:58:51:e0:7a:98:89:a7:a6:7f:66:b6:
                    92:99:f0:4e:bd:dc:3e:ba:15:c8:cd:20:12:fc:c8:
                    73:82:42:85:c1:cd:5b:11:97:36:20:12:da:19:44:
                    7c:43:c4:4c:13:9c:51:a5:cd:a8:1e:d6:77:cf:c8:
                    ea:e1:67:41:7b:7d:9e:b9:44:0b:78:e3:14:92:e0:
                    18:25:63:a6:db:64:3f:f8:9f:cc:c3:50:d3:ab:a2:
                    87:e5:65:08:ab:7f:3d:dd:b2:a4:5b:96:eb:e2:c0:
                    96:11:bd:3a:7a:8e:5c:33:22:c9:93:ce:86:d4:70:
                    9d:65:b7:e0:dd:c2:1f:90:54:c7:0d:2e:2e:3f:fb:
                    01:35:d4:d9:f1:ba:f3:ca:fe:f3:dd:73:77:0e:e3:
                    36:78:28:f5:a8:d4:02:68:19:f6:7d:7d:9e:b1:5c:
                    85:1a:05:50:6b:a6:03:e4:07:ac:78:8c:4d:be:d3:
                    b1:cc:15:d2:90:6e:9e:56:93:a6:e1:b0:4d:83:3f:
                    d5:e9:c2:a8:a5:19:69:59:8d:ec:dd:3c:7b:e1:a7:
                    54:5a:40:6e:a9:6f:bc:e5:8a:3e:09:26:46:8a:b6:
                    8b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:51:58:AF:53:E1:AE:A6:19:5C:9F:35:A1:1B:A1:25:1A:5F:7B:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/29be9b7b-c427-37e0-93ab-7363a7f572e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:00:ed:cf:43:65:29:8e:c4:89:a6:50:17:a1:b7:b5:92:5e:
         69:c5:08:99:44:93:ea:74:31:3a:3b:66:8f:0d:9f:db:a8:b4:
         3c:df:1c:be:94:5a:af:ae:a3:d0:04:ba:92:da:e7:19:79:dc:
         8c:1d:e9:69:5f:86:21:05:31:cc:be:8b:16:d4:d2:6f:ca:91:
         da:0e:27:82:ba:15:9e:3d:25:68:fc:a7:63:e6:0b:df:4d:dd:
         ac:e3:88:d7:48:1a:bb:88:0f:1a:c9:e2:08:38:64:8a:95:62:
         b9:80:da:04:22:4f:21:48:a7:12:8f:6e:ee:9a:12:85:37:9d:
         10:82:4f:42:13:fb:fe:d2:b8:08:e0:b9:14:7c:6b:35:31:34:
         12:08:13:cb:be:c1:09:2c:da:bb:c7:6f:da:bf:1e:ac:f5:5b:
         3e:6c:1b:ef:0a:d8:66:2a:ba:d5:66:a8:da:56:1c:84:f5:05:
         9c:41:6e:9d:fd:3c:f8:20:ee:29:b2:6a:67:22:62:bf:29:cf:
         39:57:06:c4:de:2e:4d:65:b8:33:04:b1:6c:63:59:16:7d:62:
         bd:6e:54:a2:dc:52:73:79:56:b2:e3:df:22:ae:24:0a:0e:32:
         71:fe:59:15:f3:d2:a6:6e:23:8a:88:e6:5a:d5:04:2c:fd:7d:
         7e:a4:af:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:42:33 2026 by rpki-client