Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/3f7c94ac-4660-3c40-8bb7-06dc30cd6227.roa
File:                     3f7c94ac-4660-3c40-8bb7-06dc30cd6227.roa (raw, json)
Hash identifier:          680yVtOKAvSzEVjgNOt4Wba4FaQw3AxhtqImVwwCG2I=
Subject key identifier:   D6:21:B2:2C:0D:66:E2:3B:56:A8:27:8D:6B:72:9C:E3:D2:B9:78:F3
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDBD3128E978ED09320B880
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/3f7c94ac-4660-3c40-8bb7-06dc30cd6227.roa
Signing time:             Tue 07 Apr 2026 16:27:36 +0000
ROA not before:           Tue 07 Apr 2026 16:27:36 +0000
ROA not after:            Mon 06 Jul 2026 16:27:36 +0000
asID:                     50056
IP address blocks:        104.252.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:db:d3:12:8e:97:8e:d0:93:20:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:27:36 2026 GMT
            Not After : Jul  6 16:27:36 2026 GMT
        Subject: CN=0b978cb3-7861-461c-9138-b93dca8490ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b8:dd:5e:bb:c4:55:cc:4a:0b:70:cf:c0:7c:
                    19:a6:6f:89:2a:b1:04:d9:10:aa:3e:82:1a:19:a0:
                    5f:d5:b8:65:96:87:73:06:e5:48:b7:ef:eb:c7:42:
                    b3:72:98:92:90:21:75:6f:d2:a5:8d:86:66:34:28:
                    e5:65:d4:f0:95:27:8d:9c:74:a3:e2:6c:76:d6:4d:
                    a4:d4:ef:7d:7c:d0:80:81:9b:17:cd:40:24:ad:64:
                    da:a5:35:95:85:e2:cc:8e:dd:51:fc:68:f8:d3:47:
                    f1:7c:9d:3f:ba:75:a8:3a:23:c0:bf:ea:69:5a:44:
                    d0:07:32:0d:98:81:ae:ea:19:f7:8c:24:d0:2d:56:
                    86:30:61:e7:2d:e0:49:09:31:74:e5:9a:b4:27:4d:
                    9b:80:70:f0:b1:a1:cb:9b:06:97:5f:60:a2:54:42:
                    82:0a:6e:a0:da:4c:6f:94:6d:b3:cc:f0:d5:62:1f:
                    63:03:e6:e0:6f:2d:19:34:f5:10:e9:bd:6e:79:e2:
                    46:dc:7c:89:6a:79:08:e5:6f:fa:54:ed:78:c3:d8:
                    02:51:25:be:e3:de:62:e0:d9:64:37:e4:7f:6c:ed:
                    6b:c8:67:79:9e:db:7d:c4:bd:e6:1a:f3:72:9d:dc:
                    7e:1c:d5:65:cd:cc:29:81:8b:34:c0:72:f1:e6:fa:
                    c2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:21:B2:2C:0D:66:E2:3B:56:A8:27:8D:6B:72:9C:E3:D2:B9:78:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/3f7c94ac-4660-3c40-8bb7-06dc30cd6227.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ba:12:54:1c:b8:a9:69:87:39:d3:47:99:22:af:cb:6a:01:
         0c:09:f6:54:91:6b:d9:4f:0d:3c:12:2c:10:63:39:47:bc:71:
         43:c6:d3:55:d4:a6:63:25:30:d9:3c:50:0f:c3:e3:36:62:51:
         fe:dc:61:5c:99:15:45:e9:9c:19:17:45:ed:f7:18:af:c8:06:
         a9:f6:1b:28:5a:09:6c:c7:7d:5b:7e:93:5a:5a:13:ab:99:4a:
         39:ae:fe:00:ad:cf:be:3d:87:18:cf:81:88:40:3a:c2:88:be:
         7d:b3:12:3f:4f:81:2b:4a:88:65:09:4c:82:97:4a:2d:3d:1a:
         cb:fb:56:1a:ca:a9:20:dd:31:fd:fe:bf:dd:f4:72:fd:29:4c:
         59:d1:80:d3:64:52:dd:2c:25:20:35:50:eb:1a:89:80:9e:93:
         da:90:58:ec:c0:8f:a6:ee:71:01:0a:5c:24:82:44:6a:b4:65:
         e8:19:14:30:64:cf:f1:81:b2:3f:b1:e2:9b:4d:6e:5d:2b:63:
         d1:7f:4a:d1:b5:ea:c0:7a:76:f1:47:97:fa:0d:f3:26:f3:41:
         94:2c:0e:c0:f4:9b:d5:74:5b:b2:2f:79:e9:07:71:28:60:d2:
         9a:f6:ce:bd:6d:94:ba:68:04:85:80:a2:bf:d2:3c:8d:6c:9a:
         6e:50:1b:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1t29MSjpeO0JMguIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDQwNzE2MjczNloXDTI2MDcwNjE2MjczNlowLzEtMCsGA1UEAxMk
MGI5NzhjYjMtNzg2MS00NjFjLTkxMzgtYjkzZGNhODQ5MGZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrjdXrvEVcxKC3DPwHwZpm+JKrEE2RCqPoIa
GaBf1bhllodzBuVIt+/rx0KzcpiSkCF1b9KljYZmNCjlZdTwlSeNnHSj4mx21k2k
1O99fNCAgZsXzUAkrWTapTWVheLMjt1R/Gj400fxfJ0/unWoOiPAv+ppWkTQBzIN
mIGu6hn3jCTQLVaGMGHnLeBJCTF05Zq0J02bgHDwsaHLmwaXX2CiVEKCCm6g2kxv
lG2zzPDVYh9jA+bgby0ZNPUQ6b1ueeJG3HyJankI5W/6VO14w9gCUSW+495i4Nlk
N+R/bO1ryGd5ntt9xL3mGvNyndx+HNVlzcwpgYs0wHLx5vrCUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNYhsiwNZuI7VqgnjWtynOPSuXjzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvM2Y3Yzk0YWMtNDY2MC0z
YzQwLThiYjctMDZkYzMwY2Q2MjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPw+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGC6ElQcuKlphznTR5kir8tqAQwJ9lSRa9lPDTwSLBBjOUe8cUPG01XU
pmMlMNk8UA/D4zZiUf7cYVyZFUXpnBkXRe33GK/IBqn2GyhaCWzHfVt+k1paE6uZ
Sjmu/gCtz749hxjPgYhAOsKIvn2zEj9PgStKiGUJTIKXSi09Gsv7VhrKqSDdMf3+
v930cv0pTFnRgNNkUt0sJSA1UOsaiYCek9qQWOzAj6bucQEKXCSCRGq0ZegZFDBk
z/GBsj+x4ptNbl0rY9F/StG16sB6dvFHl/oN8ybzQZQsDsD0m9V0W7IveekHcShg
0pr2zr1tlLpoBIWAor/SPI1smm5QG+4=
-----END CERTIFICATE-----
Generated at Wed Apr 8 01:42:30 2026 by rpki-client