Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/3d622670-00a5-3462-b6cb-ecb045c3c61e.roa
File:                     3d622670-00a5-3462-b6cb-ecb045c3c61e.roa (raw, json)
Hash identifier:          P9ybVplRGby5dtGxnAryBPxy9LfmS4MNuRfFs9a++k0=
Subject key identifier:   2E:91:86:9C:6E:A4:C0:CB:6C:C2:FF:CF:C4:94:FC:03:D3:43:08:02
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDBFD1AB84B1C251E06B1C0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/3d622670-00a5-3462-b6cb-ecb045c3c61e.roa
Signing time:             Tue 07 Apr 2026 16:27:56 +0000
ROA not before:           Tue 07 Apr 2026 16:27:56 +0000
ROA not after:            Mon 06 Jul 2026 16:27:56 +0000
asID:                     18779
IP address blocks:        104.252.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:db:fd:1a:b8:4b:1c:25:1e:06:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:27:56 2026 GMT
            Not After : Jul  6 16:27:56 2026 GMT
        Subject: CN=4aa3f70e-52e2-43ff-9d30-87c34a0a5030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0c:f2:42:28:4b:e8:0e:9d:0c:bb:26:7c:bf:
                    ef:14:3c:9c:7c:46:ea:85:bb:cc:8a:d3:6a:c7:42:
                    f2:b8:1d:ed:3a:bd:12:07:ce:7d:a8:86:6a:88:9b:
                    8e:eb:cf:bd:9d:43:c3:dc:d5:5b:fc:87:71:6b:8e:
                    22:a4:26:12:07:32:d0:0b:ab:c9:ea:2d:34:4d:c4:
                    f7:6c:a6:e9:5a:43:d2:9b:52:3d:b8:ff:58:b1:f6:
                    3c:d8:41:60:33:38:3e:3e:13:1a:6b:60:18:97:6a:
                    73:3a:89:1e:64:a0:f2:2e:a7:28:23:96:61:de:73:
                    5f:11:4c:4c:14:cc:28:f9:c2:09:73:90:01:24:45:
                    9e:95:4c:9f:9a:af:63:4e:bb:3e:c8:b5:78:d7:03:
                    5f:88:59:63:84:ab:a6:00:3e:af:e0:52:aa:fa:fd:
                    c1:6b:cd:0a:b0:45:21:d1:bc:06:43:b6:c3:1f:1f:
                    30:bb:dd:b9:04:9a:97:67:42:6c:1f:a4:8b:9e:ca:
                    87:36:25:3e:75:31:63:ce:da:c8:44:9c:e0:57:ba:
                    54:c6:54:86:da:47:ee:c5:04:7a:1a:73:14:2e:9f:
                    1e:8c:d1:10:83:30:7f:ef:49:7b:20:29:e4:d6:df:
                    4c:36:23:5b:8b:1d:e1:f2:94:be:9b:14:39:5e:1b:
                    1b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:91:86:9C:6E:A4:C0:CB:6C:C2:FF:CF:C4:94:FC:03:D3:43:08:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/3d622670-00a5-3462-b6cb-ecb045c3c61e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:99:dd:b8:d1:03:ec:68:8f:e0:da:bc:34:30:2e:a3:a3:66:
         8a:b5:7c:0b:2d:52:e6:ac:e1:2c:a6:b2:71:01:28:fd:2d:87:
         b6:2e:99:58:0d:e1:6d:f9:bc:7c:c0:da:eb:ba:35:ab:55:39:
         3c:0e:30:67:e9:cf:58:cb:5c:8a:e2:01:82:8c:bb:3f:a8:02:
         9a:e6:a3:f2:1e:9b:da:4b:a6:c0:f5:77:14:32:ad:d0:6d:08:
         c7:73:7e:91:54:ad:a7:89:49:3b:01:9f:0c:96:08:b3:c0:69:
         d9:b3:ea:31:b9:e3:4a:84:09:19:49:3c:75:47:d3:b0:e6:79:
         e6:bc:7d:af:4e:2f:96:46:7d:75:e9:15:25:94:32:e3:52:e3:
         9b:76:18:4f:c1:6a:76:82:f0:3c:79:ef:18:5e:e3:05:26:96:
         27:69:76:7a:be:97:2f:6f:26:65:02:b2:bd:54:1c:8b:ca:c2:
         a2:0a:a8:6b:8d:b7:bd:8e:9d:34:4e:1e:33:93:2b:14:b4:98:
         61:ca:99:69:9e:de:b1:70:8e:d2:7d:0c:ac:34:47:bc:0d:6e:
         3d:24:f9:6a:f9:eb:58:49:a5:d2:8e:1d:bb:60:60:16:04:c8:
         9f:3b:16:7b:8d:a9:ad:ed:5d:f1:3c:62:c1:bf:68:be:ce:9a:
         4a:1d:d5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:39:08 2026 by rpki-client