Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/5700d552-9371-31f4-9186-081e8d04428d.roa
File:                     5700d552-9371-31f4-9186-081e8d04428d.roa (raw, json)
Hash identifier:          HO/5mT0idhqMhjQbsc6qlM1fLqc7f84jy8vNddZUy1E=
Subject key identifier:   F1:22:D2:84:3B:2B:69:BC:DE:5A:87:2C:41:F4:A3:C7:9B:4D:D7:D1
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDC84976A211E49079391D0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/5700d552-9371-31f4-9186-081e8d04428d.roa
Signing time:             Tue 07 Apr 2026 16:29:00 +0000
ROA not before:           Tue 07 Apr 2026 16:29:00 +0000
ROA not after:            Mon 06 Jul 2026 16:29:00 +0000
asID:                     398781
IP address blocks:        104.253.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dc:84:97:6a:21:1e:49:07:93:91:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:29:00 2026 GMT
            Not After : Jul  6 16:29:00 2026 GMT
        Subject: CN=37c3887c-560a-4b6e-8e50-767f5d15fdeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ba:91:ea:57:9b:b8:28:95:d9:ea:18:57:92:
                    e8:a8:1f:e7:68:9a:03:3d:a5:3b:c1:c1:7a:63:f5:
                    dc:fd:9a:66:50:cd:47:3f:93:2b:5b:c1:b0:70:13:
                    fb:c6:40:1e:e4:1a:fc:d6:f1:06:86:91:81:2a:76:
                    d9:3a:e4:9c:e8:4f:07:e1:4c:73:22:cb:d7:56:b8:
                    60:c2:ea:86:81:c1:33:1f:b5:2a:ca:3b:f7:cc:d2:
                    95:34:11:6e:23:1f:ac:f9:b2:71:d0:c3:89:f1:d0:
                    cd:16:f6:4d:9e:50:78:1f:a4:6b:da:3a:e9:74:1f:
                    87:f5:17:73:c5:32:d8:a5:9b:50:da:f0:ac:08:c5:
                    6d:12:86:da:ab:36:2f:6a:aa:c8:ba:3d:62:50:41:
                    95:d1:1d:99:f0:da:f5:2f:97:18:9d:bc:9f:0c:04:
                    77:ff:c6:eb:e9:2a:03:6c:32:ce:fb:10:61:72:8c:
                    e3:b7:7e:82:52:24:2f:35:fc:bb:17:55:82:f5:b6:
                    85:fa:16:1d:8b:75:12:89:f4:b0:32:f2:c0:fb:52:
                    28:91:db:83:8a:bf:8c:3e:b2:f2:61:3f:a0:0d:5e:
                    8b:59:4e:66:35:ce:3c:66:77:3d:4a:97:62:8c:97:
                    87:6d:4a:58:28:9f:b0:0f:aa:27:92:40:96:b1:4f:
                    9a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:22:D2:84:3B:2B:69:BC:DE:5A:87:2C:41:F4:A3:C7:9B:4D:D7:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/5700d552-9371-31f4-9186-081e8d04428d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:71:24:5d:0b:7e:18:81:1a:e1:56:36:6f:43:05:23:08:fa:
         4d:1a:6f:4b:22:de:0e:71:b0:d4:60:87:b8:89:de:5b:7e:89:
         a0:81:3c:9f:2a:9c:96:4b:d7:9e:4f:f0:d9:2e:5f:d5:a8:62:
         a6:72:d1:91:45:4a:7f:a9:38:50:e3:9c:31:23:c1:0e:d5:15:
         8e:d0:a0:d2:bd:07:e2:a1:15:b7:8c:30:01:57:7d:c8:88:eb:
         77:11:8f:7f:e8:98:d9:33:a3:92:09:63:5b:85:55:00:c9:bb:
         fe:17:61:3c:7f:f2:ef:2c:06:7f:1d:99:2b:4a:33:98:e9:1f:
         78:98:b4:eb:89:6d:f7:30:5d:33:d9:b4:a3:3b:8a:0d:f4:59:
         3b:ff:b2:1d:4c:23:c4:cd:84:98:c5:ed:e1:a1:d5:68:b4:8f:
         60:2e:5e:ac:c2:6e:fe:86:04:f5:27:2d:87:a1:af:e1:66:ab:
         79:12:6e:39:39:05:4f:aa:9a:44:f9:8c:45:e2:81:af:c2:32:
         60:bb:bd:f9:8f:50:2c:48:f1:a6:cd:3d:88:02:1b:57:2f:e2:
         d1:c1:f2:02:fc:9b:e1:d7:0c:ad:51:2c:4e:43:b6:da:a3:a9:
         c8:f9:45:98:3b:f5:aa:8f:a3:e2:cc:ed:70:bf:54:8b:df:e4:
         15:00:db:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:42:24 2026 by rpki-client