Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/3ff5f647-e948-3bdf-8286-cc27e2fddab2.roa
File:                     3ff5f647-e948-3bdf-8286-cc27e2fddab2.roa (raw, json)
Hash identifier:          yqi+JPNP0HuadqcS7DydNPVBb29MTAKNL2GFgkFy32c=
Subject key identifier:   88:96:39:BA:79:FD:98:19:1E:9A:2D:B2:77:27:BB:41:7F:D8:49:AD
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDC51873CFCD3F30FCB9600
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/3ff5f647-e948-3bdf-8286-cc27e2fddab2.roa
Signing time:             Tue 07 Apr 2026 16:28:36 +0000
ROA not before:           Tue 07 Apr 2026 16:28:36 +0000
ROA not after:            Mon 06 Jul 2026 16:28:36 +0000
asID:                     59253
IP address blocks:        104.253.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dc:51:87:3c:fc:d3:f3:0f:cb:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:28:36 2026 GMT
            Not After : Jul  6 16:28:36 2026 GMT
        Subject: CN=158fa41e-e211-4e05-bd52-6363b221eaec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:44:ba:2a:b5:32:8e:9c:01:86:c7:0b:93:a4:
                    9e:3d:47:49:fb:22:54:3e:85:e4:0a:52:5b:f9:4d:
                    a7:f8:1d:8f:60:15:be:c4:28:7b:70:d2:82:bb:5d:
                    c4:d0:41:56:36:d8:09:87:df:4d:40:2c:c8:6d:19:
                    a9:24:95:d5:7f:75:a2:dc:08:cf:71:0c:38:fb:aa:
                    7b:86:ba:fd:8c:21:e4:2f:b1:dc:93:f6:ef:e3:34:
                    13:ec:20:2d:9f:5f:94:c3:6a:43:4b:74:d4:a6:52:
                    8e:88:57:40:99:66:17:fa:d9:e7:09:37:fb:c5:ce:
                    c8:27:3b:11:b7:f9:c1:2a:6d:04:c3:3d:5e:c5:f3:
                    9b:9a:b6:67:c3:cf:81:8f:83:0e:d9:3f:1e:52:ed:
                    9b:2d:70:23:f8:f0:e9:5b:5c:93:83:36:84:7d:b4:
                    25:4d:6f:6a:32:e7:4f:a5:42:85:88:08:89:80:de:
                    d3:16:ea:79:c0:46:1a:4f:f7:d1:06:59:45:9f:e0:
                    57:f3:c9:b1:ce:92:ae:da:c4:2d:67:67:34:60:ae:
                    4a:f0:6f:e6:e7:f8:2f:c1:6e:57:a3:e0:39:66:c4:
                    ed:85:44:51:26:f0:94:8e:70:c3:6d:db:c5:5e:1d:
                    52:8e:9a:08:7c:43:c9:1a:7b:db:5a:fb:3b:4a:f2:
                    53:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:96:39:BA:79:FD:98:19:1E:9A:2D:B2:77:27:BB:41:7F:D8:49:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/3ff5f647-e948-3bdf-8286-cc27e2fddab2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:89:3a:97:ba:13:73:c1:a2:d3:ba:76:e5:27:4c:1a:28:2d:
         b1:b4:7c:2f:7e:b6:f0:c7:4a:9b:cd:0f:26:b4:f7:04:75:ae:
         02:eb:47:de:a4:7c:cf:ea:28:b1:5e:d3:f7:4c:b7:31:7b:71:
         f1:94:99:e6:56:4f:b0:fa:07:73:73:8a:84:c9:4e:1b:91:66:
         73:b4:d2:b8:69:17:3e:fa:6a:54:18:c1:f9:6b:e0:3e:b3:b1:
         fa:10:0a:01:5c:a1:41:60:55:98:3e:3b:ac:e0:7f:b3:43:29:
         b9:b2:24:af:27:bb:8b:ad:b5:f9:8a:6e:83:5f:f5:f3:fe:a6:
         cd:eb:52:ba:66:42:d7:0f:23:79:65:1f:ee:8e:17:7f:3c:c7:
         16:44:a1:84:75:e1:c2:c3:b4:41:c7:e8:83:2b:ca:1b:fe:33:
         4e:ae:db:e5:04:95:97:25:c6:9c:23:a1:31:f6:2a:ed:c4:49:
         94:f6:21:74:a9:68:62:f5:b2:15:d0:f2:a5:cf:61:b2:db:1e:
         44:8b:3e:93:f6:a8:05:93:1f:93:5b:da:a3:82:1c:64:c2:7f:
         39:b6:fc:8c:cf:8d:48:0e:2d:10:74:3f:ac:d7:0a:98:9e:a5:
         eb:37:f0:99:75:6e:ef:23:1e:60:b8:9f:be:da:97:6c:3f:3f:
         68:76:37:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:39:09 2026 by rpki-client