Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/aa85d150-99e2-369b-b66c-a3e03f5de25f.roa
File:                     aa85d150-99e2-369b-b66c-a3e03f5de25f.roa (raw, json)
Hash identifier:          TZDFeiX+P0M60iwtq7+blMw8unLbR46oF/nULjYp5vY=
Subject key identifier:   C5:B2:9E:03:7A:F4:4F:E4:29:26:BB:3B:1C:30:FC:8D:2C:D9:D3:E6
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDBD465EBC102AAE93CB940
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/aa85d150-99e2-369b-b66c-a3e03f5de25f.roa
Signing time:             Tue 07 Apr 2026 16:27:37 +0000
ROA not before:           Tue 07 Apr 2026 16:27:37 +0000
ROA not after:            Mon 06 Jul 2026 16:27:37 +0000
asID:                     50056
IP address blocks:        104.252.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:db:d4:65:eb:c1:02:aa:e9:3c:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:27:37 2026 GMT
            Not After : Jul  6 16:27:37 2026 GMT
        Subject: CN=7f27625d-334c-4be4-95c8-233bf9ac3a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ef:90:fd:fb:b5:91:23:86:cb:fa:e9:bd:f4:
                    10:50:3e:a8:b5:4e:bb:bf:d4:73:e1:42:7d:56:ca:
                    8b:4d:60:3c:9f:7f:ac:c5:1b:2e:d6:76:19:7f:36:
                    82:b4:86:d1:35:9a:af:4e:ec:8d:99:43:3e:1e:ad:
                    ed:d3:0b:70:4b:72:d5:8d:ab:68:ad:0e:cf:e9:9f:
                    d2:27:1d:b6:90:8c:9f:55:4c:eb:d9:d2:89:4b:35:
                    6f:cb:25:14:1b:ba:cd:57:c5:9a:57:dd:d8:00:92:
                    8d:e7:60:fb:ff:59:6f:48:17:b0:a1:ee:2c:62:ad:
                    7b:4e:89:c9:49:08:15:10:c3:c3:1a:41:af:a1:91:
                    51:b0:3d:b5:6a:74:00:6b:b6:35:3b:26:ba:cd:89:
                    b0:92:f7:1a:50:7c:ce:25:a6:2d:2f:66:c2:78:ab:
                    9f:5f:b3:a5:b7:ee:ef:d1:56:03:4c:03:a8:44:4b:
                    ad:ce:84:c0:ab:9b:18:80:0a:79:d0:34:b5:36:15:
                    b3:37:8e:32:e1:03:97:2a:70:19:5f:f7:ae:5b:93:
                    56:0a:41:d7:1e:4b:48:e4:50:1f:f2:77:0d:37:8c:
                    9c:4d:93:22:f3:d1:ad:e9:51:ef:5f:f2:f3:b0:ef:
                    04:bb:c1:b8:30:54:d4:a6:ee:35:96:80:ec:2e:55:
                    c6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B2:9E:03:7A:F4:4F:E4:29:26:BB:3B:1C:30:FC:8D:2C:D9:D3:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/aa85d150-99e2-369b-b66c-a3e03f5de25f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:2f:da:68:8b:98:31:da:37:a5:03:62:c5:25:aa:2c:72:fc:
         42:51:61:cd:45:de:ca:1d:23:1f:48:c6:99:7e:3a:d3:01:d5:
         c8:42:4c:5b:78:8f:c4:81:fc:da:94:e1:69:c8:08:a1:c1:c8:
         52:f4:a1:ef:7d:26:99:0c:58:92:59:22:05:d5:7e:3d:c9:cd:
         7d:15:5f:3f:23:c7:64:0f:0d:53:09:1d:30:44:1e:db:f4:ac:
         a4:2e:3b:90:5a:e9:d3:bb:f6:8e:36:6a:7f:8c:93:c3:0e:03:
         9d:fe:dd:4c:8e:d7:7f:50:e3:e6:b9:7c:2c:28:84:7b:c9:e9:
         98:cf:44:95:e0:a7:a7:ff:52:08:48:e1:2b:02:7a:24:61:6a:
         15:7e:db:d7:fe:db:74:d9:f4:55:ac:24:c5:e8:08:77:14:fb:
         ce:da:b7:16:96:13:59:85:00:2b:25:c9:1c:93:46:96:0c:43:
         0c:76:b3:cc:99:3a:ac:76:c5:0f:d5:63:fd:1d:af:9d:e2:c0:
         3d:fc:4b:1a:83:ac:e9:e8:45:a3:75:c5:be:37:a5:24:1c:e6:
         81:7a:74:71:fa:9d:fc:01:35:4d:1a:30:8c:a7:b2:b5:28:e6:
         76:11:b7:75:fd:d8:13:41:12:c2:8e:f3:62:14:45:e8:8f:12:
         01:61:77:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:40:40 2026 by rpki-client