Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/4aa75fd6-f6cc-3f79-8caf-1a458e1d68a2.roa
File:                     4aa75fd6-f6cc-3f79-8caf-1a458e1d68a2.roa (raw, json)
Hash identifier:          dh5d7YfS0Z79XZkrAQ2j8toUmYFOVzvbJ9f1xADnO/E=
Subject key identifier:   8A:FD:5C:83:0B:CC:63:0C:E6:D4:D1:80:BD:B8:C4:43:48:26:F3:D8
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DEC37EA54DF926FDDABCC80
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/4aa75fd6-f6cc-3f79-8caf-1a458e1d68a2.roa
Signing time:             Tue 07 Apr 2026 17:00:38 +0000
ROA not before:           Tue 07 Apr 2026 17:00:38 +0000
ROA not after:            Mon 06 Jul 2026 17:00:38 +0000
asID:                     5650
IP address blocks:        104.252.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:ec:37:ea:54:df:92:6f:dd:ab:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 17:00:38 2026 GMT
            Not After : Jul  6 17:00:38 2026 GMT
        Subject: CN=b109a6e6-52ee-4009-a91d-0d1b68a49fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8a:b8:56:c9:29:5f:85:b7:83:94:86:7f:da:
                    83:0f:4e:e0:ac:7a:44:42:a1:f7:dc:fe:86:20:14:
                    18:39:3c:6a:c3:01:0d:0b:84:31:c6:95:7a:b1:d2:
                    a9:8c:2a:78:36:bc:70:a0:0d:21:ce:91:f3:04:31:
                    27:41:e9:2f:e7:21:45:3e:40:f2:ab:52:c9:3e:07:
                    23:d0:fe:6e:e8:11:c2:6f:ad:08:40:1e:70:14:c7:
                    6f:d0:ae:ba:b5:34:47:cf:41:f6:98:bc:d3:a3:d3:
                    e9:1f:1a:2c:10:a2:a3:72:40:6d:bd:9a:3d:02:3b:
                    8d:f8:7c:97:f3:df:38:92:2d:d8:d6:49:ed:bb:1e:
                    c7:d4:d1:75:a2:af:89:60:45:52:c1:c2:13:f6:cd:
                    a6:1e:91:9f:a1:07:55:71:f3:16:bf:ff:f9:c1:30:
                    28:63:e9:b8:3e:4c:56:fc:f7:ac:4b:e5:ee:a5:07:
                    8c:d8:62:cd:48:3f:30:22:5f:66:59:a0:c7:3e:26:
                    8a:2e:a6:ff:4a:d5:4d:91:71:4f:49:a5:bd:50:6b:
                    22:dd:f0:6a:81:fc:1f:50:4f:c9:f1:cf:d1:77:22:
                    d1:64:fd:8a:87:e7:e0:cd:12:ec:19:49:52:96:5f:
                    69:0d:64:f8:e8:87:8b:e9:57:38:e6:4d:04:02:36:
                    b8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:FD:5C:83:0B:CC:63:0C:E6:D4:D1:80:BD:B8:C4:43:48:26:F3:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/4aa75fd6-f6cc-3f79-8caf-1a458e1d68a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:83:78:9e:4e:6b:04:82:07:c6:b5:11:cc:e3:e6:17:c5:97:
         44:cf:ac:eb:38:52:1b:52:2d:41:cc:21:77:e4:bf:c4:90:5a:
         d7:5d:3e:76:cc:32:eb:cf:cc:5f:33:16:58:3b:10:5b:b7:ee:
         bd:aa:a5:d8:ea:11:aa:8d:df:ba:c8:17:b8:f0:06:44:d7:c7:
         49:46:27:5f:1d:2c:4d:33:8c:8d:fc:44:9c:ee:17:c0:6d:cf:
         b0:43:ac:e7:4f:42:de:cb:1e:84:9e:2a:cd:c8:92:12:2e:7b:
         2d:27:ff:46:e0:74:b0:e4:f9:76:37:46:22:15:23:11:52:ca:
         35:63:21:4b:22:96:ac:bf:fe:d4:4a:48:4b:c4:d1:ba:48:a5:
         40:19:13:59:04:4b:8c:33:58:6f:73:87:5e:7c:5b:8a:ee:e1:
         c3:b5:71:0c:d1:14:c6:d2:0f:7f:d3:15:68:d3:4c:2f:f9:6c:
         ed:85:93:81:de:17:69:d9:27:de:f5:cd:f7:ca:10:82:97:6e:
         fb:3e:dd:78:83:cb:06:32:7b:26:25:c4:86:27:e0:31:54:bb:
         11:1f:07:6d:e7:07:21:79:0d:0a:8a:82:01:76:2b:af:ba:5e:
         a8:56:15:37:27:6f:83:cd:a8:35:ed:b8:cb:36:49:1e:aa:f0:
         82:63:d1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:42:26 2026 by rpki-client