Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/52d72cec-539b-32f4-8df8-273b4a326a9b.roa
File:                     52d72cec-539b-32f4-8df8-273b4a326a9b.roa (raw, json)
Hash identifier:          u4dRoq3vyBl0Xn2sePxJ66c7YK+1C2h2zdlJwT7I2KA=
Subject key identifier:   EB:F8:F0:61:0A:A2:FD:CD:E1:F0:59:6B:E7:A2:B0:45:6A:3F:10:D0
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDC5146B567BE80E4462D80
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/52d72cec-539b-32f4-8df8-273b4a326a9b.roa
Signing time:             Tue 07 Apr 2026 16:28:36 +0000
ROA not before:           Tue 07 Apr 2026 16:28:36 +0000
ROA not after:            Mon 06 Jul 2026 16:28:36 +0000
asID:                     212238
IP address blocks:        104.253.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dc:51:46:b5:67:be:80:e4:46:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:28:36 2026 GMT
            Not After : Jul  6 16:28:36 2026 GMT
        Subject: CN=213fd3ac-9408-4ba3-b77b-1e9f2e29a882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:af:d8:31:c2:be:b3:15:3a:0a:d6:50:48:14:
                    56:4b:17:47:f3:39:0f:f9:0e:0e:91:b2:4a:e2:4b:
                    05:ce:e5:de:52:d8:36:3f:f8:cb:de:62:82:fa:22:
                    5d:2b:4f:6d:79:81:70:cf:6c:32:35:e7:59:89:83:
                    0a:ab:6c:ac:c4:04:2d:70:15:9b:d3:8e:e3:a1:ec:
                    e6:79:3d:f3:e7:39:66:7a:72:67:81:55:55:91:ce:
                    8d:7b:50:1f:3a:e7:11:80:65:7d:20:91:77:2d:a1:
                    8c:fd:14:1a:fe:eb:57:3b:21:4e:ae:a4:de:31:82:
                    8d:2e:2e:84:a7:7c:06:a4:1d:b7:51:ac:92:78:5b:
                    12:b8:b5:4a:51:9f:28:44:2c:8d:90:89:eb:f8:7c:
                    38:43:f9:c2:22:38:f6:a5:0b:e9:b9:8c:d5:1f:fe:
                    7d:80:fe:c5:da:72:24:56:da:cc:c2:ed:5e:5f:16:
                    d3:e9:a9:6e:da:62:b4:1e:1a:c5:77:dd:c2:dd:0e:
                    ce:01:c9:f5:5b:b7:03:6c:54:9d:0e:35:9c:49:01:
                    74:fb:fb:7c:42:8a:d6:17:a6:8e:14:c7:a6:51:83:
                    dd:aa:a9:a1:88:d3:38:59:35:26:b6:8d:4a:0c:94:
                    2b:e8:1a:c5:28:46:ea:d3:ca:07:f3:7a:49:1e:a1:
                    c5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F8:F0:61:0A:A2:FD:CD:E1:F0:59:6B:E7:A2:B0:45:6A:3F:10:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/52d72cec-539b-32f4-8df8-273b4a326a9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:b8:ec:37:8c:45:1d:c7:77:0d:ad:78:ed:ff:7a:73:f5:d8:
         85:fd:b2:65:f6:a8:0c:64:91:4c:b9:4d:1b:d2:51:b8:9f:c1:
         19:bc:3c:e8:1d:73:de:eb:62:8a:7d:55:4a:5b:83:dd:d0:9e:
         c1:49:5a:50:fe:94:35:08:d0:a1:46:26:ec:0c:64:08:7a:4a:
         8c:f7:25:14:d3:42:79:fa:8e:c2:94:dc:2a:00:fb:9e:3f:3e:
         e6:cf:29:6e:56:69:a1:66:be:05:c3:68:9d:a9:68:ac:07:d2:
         cd:ed:8f:9c:66:49:bd:59:11:60:02:f8:20:eb:ff:7d:89:1e:
         58:35:f4:fe:91:a6:1f:43:76:53:c5:7a:6d:84:86:4d:06:97:
         5f:e6:52:4a:ed:7f:fb:12:2d:cd:66:95:e4:11:06:23:f6:3d:
         f8:f2:01:fe:8f:6c:16:67:e4:0d:7e:fc:71:1b:f7:ae:c4:38:
         23:3a:0f:3a:03:d7:57:39:bd:0b:d4:5a:23:0e:ab:f9:a6:f0:
         9c:e7:75:9a:af:20:e8:76:f1:8b:9d:04:4d:31:78:5d:10:d6:
         7f:44:81:68:39:b1:6a:d1:19:e5:b1:59:21:39:5f:d8:4b:a4:
         12:cd:37:e6:94:aa:09:fb:ea:fb:06:60:e8:e1:43:9b:ad:77:
         5d:3b:a2:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1t3FFGtWe+gORGLYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDQwNzE2MjgzNloXDTI2MDcwNjE2MjgzNlowLzEtMCsGA1UEAxMk
MjEzZmQzYWMtOTQwOC00YmEzLWI3N2ItMWU5ZjJlMjlhODgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6/YMcK+sxU6CtZQSBRWSxdH8zkP+Q4OkbJK
4ksFzuXeUtg2P/jL3mKC+iJdK09teYFwz2wyNedZiYMKq2ysxAQtcBWb047joezm
eT3z5zlmenJngVVVkc6Ne1AfOucRgGV9IJF3LaGM/RQa/utXOyFOrqTeMYKNLi6E
p3wGpB23UaySeFsSuLVKUZ8oRCyNkInr+Hw4Q/nCIjj2pQvpuYzVH/59gP7F2nIk
VtrMwu1eXxbT6alu2mK0HhrFd93C3Q7OAcn1W7cDbFSdDjWcSQF0+/t8QorWF6aO
FMemUYPdqqmhiNM4WTUmto1KDJQr6BrFKEbq08oH83pJHqHF9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOv48GEKov3N4fBZa+eisEVqPxDQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvNTJkNzJjZWMtNTM5Yi0z
MmY0LThkZjgtMjczYjRhMzI2YTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP2nMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABG47DeMRR3Hdw2teO3/enP12IX9smX2qAxkkUy5TRvSUbifwRm8POgd
c97rYop9VUpbg93QnsFJWlD+lDUI0KFGJuwMZAh6Soz3JRTTQnn6jsKU3CoA+54/
PubPKW5WaaFmvgXDaJ2paKwH0s3tj5xmSb1ZEWAC+CDr/32JHlg19P6Rph9DdlPF
em2Ehk0Gl1/mUkrtf/sSLc1mleQRBiP2PfjyAf6PbBZn5A1+/HEb967EOCM6DzoD
11c5vQvUWiMOq/mm8JzndZqvIOh28YudBE0xeF0Q1n9EgWg5sWrRGeWxWSE5X9hL
pBLNN+aUqgn76vsGYOjhQ5utd107ohY=
-----END CERTIFICATE-----
Generated at Wed Apr 8 01:41:20 2026 by rpki-client