Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b2188c46-2d29-3328-8933-eaaf579a57ec.roa
File:                     b2188c46-2d29-3328-8933-eaaf579a57ec.roa (raw, json)
Hash identifier:          7hZogk8PKJqRuNH2GTMWDwZtZlt2M5wHwtxQQMSGe28=
Subject key identifier:   1A:99:38:FB:CC:CB:41:13:9E:DE:34:71:92:08:50:B3:D9:7E:1D:FC
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DEC3808B4E858E2FE3E9D00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b2188c46-2d29-3328-8933-eaaf579a57ec.roa
Signing time:             Tue 07 Apr 2026 17:00:38 +0000
ROA not before:           Tue 07 Apr 2026 17:00:38 +0000
ROA not after:            Mon 06 Jul 2026 17:00:38 +0000
asID:                     6939
IP address blocks:        104.252.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:ec:38:08:b4:e8:58:e2:fe:3e:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 17:00:38 2026 GMT
            Not After : Jul  6 17:00:38 2026 GMT
        Subject: CN=23b4d1eb-3abe-4a6c-aa2a-40219831b7ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:eb:61:13:2d:b3:3b:e8:33:0a:c8:12:dd:d8:
                    a2:ca:3c:79:69:6c:93:cd:9c:8b:90:cc:7f:01:40:
                    d2:8d:a7:77:9e:01:fa:52:dd:4f:d5:50:8e:0f:32:
                    24:33:6a:2b:1d:26:ce:57:46:41:d9:af:48:92:15:
                    b2:09:35:05:df:22:35:11:2e:7c:73:bf:66:81:33:
                    5e:fd:8b:5c:b7:c8:b4:5d:f7:04:c6:6f:73:38:23:
                    04:dd:45:5f:b4:36:68:8f:d6:66:01:8a:dc:b4:94:
                    b1:35:c6:00:04:da:09:ed:2c:fa:ee:6e:3d:ca:97:
                    44:a6:96:2e:2a:17:3b:d6:9f:1e:3d:9f:ed:27:78:
                    81:3a:1c:6c:71:80:e3:9e:ac:03:bf:42:8b:68:ac:
                    c7:31:be:02:62:aa:38:ea:1f:bd:b5:ab:c3:7a:2a:
                    72:08:1d:01:46:41:ee:a8:7f:f7:9b:72:8a:98:48:
                    51:b4:9c:6c:f9:e7:ee:75:b6:03:20:6a:63:f6:13:
                    d3:80:55:a4:92:a2:72:2a:e5:0d:4b:fb:17:2b:b4:
                    18:ba:76:81:f9:c0:26:70:c4:0f:8b:a9:86:db:85:
                    fd:16:dd:32:ba:3c:0d:4e:33:da:77:22:41:5f:06:
                    48:32:73:53:69:a6:cc:9a:6f:ba:d6:2d:39:e4:14:
                    83:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:99:38:FB:CC:CB:41:13:9E:DE:34:71:92:08:50:B3:D9:7E:1D:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b2188c46-2d29-3328-8933-eaaf579a57ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:1f:35:67:9b:7c:25:3e:1a:41:a0:62:49:13:a4:dd:b3:73:
         c0:a4:64:45:cf:5f:50:1a:e0:24:8c:0e:13:80:0f:f0:35:eb:
         0b:f5:b7:09:c7:76:2d:6e:28:70:33:99:59:cb:57:6e:6d:bb:
         fd:39:c4:74:dc:cd:14:5f:17:5f:cf:dd:ad:a1:45:a6:d8:fc:
         8a:ca:a9:95:72:03:a0:52:ef:6d:25:76:0e:c7:a9:05:c6:65:
         56:7d:06:d2:bb:9e:03:86:88:5a:bd:f7:7d:00:d2:99:66:f4:
         98:30:c8:7d:f6:35:9d:ff:9e:f6:4a:f5:91:ef:1f:f0:94:c8:
         57:fa:8f:64:81:06:99:06:a6:5a:20:d0:60:c0:56:de:53:07:
         28:87:58:e4:61:6a:41:37:0c:be:d1:64:f5:68:53:33:f1:43:
         7a:a3:b6:6c:ad:46:a8:35:d6:5c:c0:49:93:11:9c:cb:7f:5f:
         4a:cb:0e:f7:87:d2:99:cd:72:c6:e0:cc:40:22:2d:bd:f1:9a:
         96:a3:07:38:cc:1d:fd:ec:64:76:ca:bd:39:16:5d:0b:23:38:
         e7:7e:eb:33:f1:c4:28:70:37:d9:3c:be:3b:5b:76:86:07:fa:
         9f:44:46:54:38:b6:46:97:d9:71:56:75:5d:c9:42:36:ce:ce:
         55:27:48:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1t7DgItOhY4v4+nQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDQwNzE3MDAzOFoXDTI2MDcwNjE3MDAzOFowLzEtMCsGA1UEAxMk
MjNiNGQxZWItM2FiZS00YTZjLWFhMmEtNDAyMTk4MzFiN2FjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOthEy2zO+gzCsgS3diiyjx5aWyTzZyLkMx/
AUDSjad3ngH6Ut1P1VCODzIkM2orHSbOV0ZB2a9IkhWyCTUF3yI1ES58c79mgTNe
/Ytct8i0XfcExm9zOCME3UVftDZoj9ZmAYrctJSxNcYABNoJ7Sz67m49ypdEppYu
Khc71p8ePZ/tJ3iBOhxscYDjnqwDv0KLaKzHMb4CYqo46h+9tavDeipyCB0BRkHu
qH/3m3KKmEhRtJxs+efudbYDIGpj9hPTgFWkkqJyKuUNS/sXK7QYunaB+cAmcMQP
i6mG24X9Ft0yujwNTjPadyJBXwZIMnNTaabMmm+61i055BSDXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBqZOPvMy0ETnt40cZIIULPZfh38MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvYjIxODhjNDYtMmQyOS0z
MzI4LTg5MzMtZWFhZjU3OWE1N2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPw4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFwfNWebfCU+GkGgYkkTpN2zc8CkZEXPX1Aa4CSMDhOAD/A16wv1twnH
di1uKHAzmVnLV25tu/05xHTczRRfF1/P3a2hRabY/IrKqZVyA6BS720ldg7HqQXG
ZVZ9BtK7ngOGiFq9930A0plm9JgwyH32NZ3/nvZK9ZHvH/CUyFf6j2SBBpkGplog
0GDAVt5TByiHWORhakE3DL7RZPVoUzPxQ3qjtmytRqg11lzASZMRnMt/X0rLDveH
0pnNcsbgzEAiLb3xmpajBzjMHf3sZHbKvTkWXQsjOOd+6zPxxChwN9k8vjtbdoYH
+p9ERlQ4tkaX2XFWdV3JQjbOzlUnSKY=
-----END CERTIFICATE-----
Generated at Wed Apr 8 01:42:31 2026 by rpki-client