Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/9b6c8e75-3fd2-387a-9925-65d5c9d9779d.roa
File:                     9b6c8e75-3fd2-387a-9925-65d5c9d9779d.roa (raw, json)
Hash identifier:          Wkyjq9KfCX/pI9Ri6aH9M+pMHJNus9j1Grb+X4pvtAE=
Subject key identifier:   36:A9:2D:CD:BA:3B:43:BF:B2:E4:04:40:06:5D:28:67:61:A8:E2:3E
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DD8038E26045ACCEC36FD80
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/9b6c8e75-3fd2-387a-9925-65d5c9d9779d.roa
Signing time:             Tue 07 Apr 2026 16:19:56 +0000
ROA not before:           Tue 07 Apr 2026 16:19:56 +0000
ROA not after:            Mon 06 Jul 2026 16:19:56 +0000
asID:                     834
IP address blocks:        104.252.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:d8:03:8e:26:04:5a:cc:ec:36:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:19:56 2026 GMT
            Not After : Jul  6 16:19:56 2026 GMT
        Subject: CN=8c2d88fd-e0fd-4115-8226-662a18022cbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8e:07:ca:b9:35:46:45:df:bf:4c:90:36:0f:
                    c3:86:89:ca:41:23:12:66:dc:67:b3:9f:58:d9:57:
                    9d:d0:c7:82:55:6b:94:0a:19:8e:d2:e1:5b:d6:0c:
                    41:e6:4e:c5:01:a4:ba:a4:24:2d:59:59:7f:06:13:
                    c7:8f:f2:96:61:03:3c:41:c0:eb:42:1d:83:06:19:
                    10:60:4f:82:99:33:bf:2c:d0:0e:68:1f:39:20:80:
                    54:cf:de:c7:d8:87:cb:5c:e0:e6:8d:68:34:c9:4b:
                    c6:9d:8f:b8:f4:ae:c6:3e:8e:d7:ea:2f:ec:80:6a:
                    e5:6f:8e:7f:15:a1:54:c0:3b:95:18:09:dd:89:93:
                    1d:f8:50:47:b6:b3:08:ac:65:85:01:ae:87:e8:07:
                    0f:c1:89:20:96:9e:c9:7a:b2:13:b5:87:ac:4e:ed:
                    07:81:1c:87:6f:df:b5:a0:f2:54:9d:8b:65:a7:53:
                    e4:16:f5:85:26:98:ba:8c:1b:c9:05:c2:7b:d2:94:
                    14:37:78:55:32:2c:2b:29:1d:3b:61:be:44:45:75:
                    a6:4a:df:a4:35:d6:8b:2f:94:de:72:ad:26:97:b1:
                    0b:9a:e2:89:40:fc:69:49:e7:d5:2f:50:fc:70:6b:
                    b8:d1:7d:fe:9c:a4:67:c7:8b:3f:2a:f2:33:75:4e:
                    26:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A9:2D:CD:BA:3B:43:BF:B2:E4:04:40:06:5D:28:67:61:A8:E2:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/9b6c8e75-3fd2-387a-9925-65d5c9d9779d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:5c:12:63:e2:2b:47:a5:74:d2:db:69:3c:0f:3e:83:96:33:
         2b:9a:f2:1b:63:4f:d4:cc:d7:4c:ad:d9:c8:91:8e:dd:3c:f6:
         32:ca:c5:7e:13:b8:43:c1:df:06:1f:51:ad:51:6b:0e:90:51:
         76:84:8f:68:07:20:83:5b:b6:35:97:e1:4d:39:73:fa:4e:53:
         2d:ed:13:30:7d:4a:cb:e0:d4:80:a7:b1:a8:14:2f:dd:9a:8d:
         11:ec:b2:75:ea:68:b6:93:e5:72:7d:61:0e:ea:26:88:85:8c:
         2f:b5:f8:9b:e1:85:dc:93:e4:d1:cb:a5:d5:d6:a4:b6:3d:bb:
         ff:b1:a0:72:dd:ae:e1:df:cf:86:d3:7c:a1:70:05:8a:1a:6f:
         13:59:e8:dc:8d:98:fc:5a:10:60:6d:b5:7a:d4:8f:b1:c6:e0:
         e0:32:4f:d8:87:fa:93:5a:5f:64:c1:da:33:31:59:3a:7e:63:
         1e:33:10:fd:eb:4f:df:dc:ee:95:20:b2:a5:5e:a8:1d:fa:94:
         52:32:bb:71:20:cb:22:99:b4:ad:e1:1c:fb:77:ad:c8:89:7f:
         e2:84:3d:0c:a3:bc:c3:dd:56:7d:5e:1a:5c:fb:ed:16:60:cb:
         33:11:69:4e:c1:4b:93:9d:11:41:3c:56:53:0f:6e:d5:1d:e9:
         62:a8:40:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:39:12 2026 by rpki-client