Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b4c3fcb3-b529-3b10-a392-4a8809bd01db.roa
File:                     b4c3fcb3-b529-3b10-a392-4a8809bd01db.roa (raw, json)
Hash identifier:          C8aHRCoi/7iNCtgfvRTXTrFvoWIqtz4J4D6osh1QaIE=
Subject key identifier:   F3:59:0B:44:2E:29:A5:1E:00:75:8A:0C:AC:D4:F8:84:59:E4:D6:6B
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDBE945666914F030431740
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b4c3fcb3-b529-3b10-a392-4a8809bd01db.roa
Signing time:             Tue 07 Apr 2026 16:27:47 +0000
ROA not before:           Tue 07 Apr 2026 16:27:47 +0000
ROA not after:            Mon 06 Jul 2026 16:27:47 +0000
asID:                     212238
IP address blocks:        104.252.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:db:e9:45:66:69:14:f0:30:43:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:27:47 2026 GMT
            Not After : Jul  6 16:27:47 2026 GMT
        Subject: CN=4f0bb283-b14b-4980-a48e-ab1ff8590597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a9:97:ab:ae:a0:4d:1e:2c:d9:d4:fe:5c:24:
                    0a:73:7a:d6:92:ad:1a:6b:fd:5a:ce:75:9e:73:17:
                    8a:bc:9f:ab:5c:e7:69:2e:2e:d7:19:6d:78:3b:f0:
                    68:19:de:06:97:a8:9c:a2:f1:36:5c:21:28:a7:43:
                    db:b3:c3:b5:e1:44:86:44:10:9d:1c:dd:ee:67:3b:
                    31:26:06:75:9e:93:b0:7d:5c:ec:f6:59:76:50:f2:
                    ef:4d:97:4f:d3:9c:5c:92:09:fe:3a:98:b1:16:23:
                    f2:17:e0:cc:37:91:5d:d5:e2:66:c2:e5:da:a1:9e:
                    82:8b:89:20:5d:c6:c8:fe:5c:b1:86:06:2b:48:58:
                    ed:96:c1:56:e5:84:9d:69:27:ae:37:31:0b:c0:97:
                    8b:05:2e:42:67:b5:ac:5c:25:00:c3:2b:69:eb:a8:
                    50:bf:4e:b9:d8:0e:32:a1:6c:78:db:75:62:e3:96:
                    6d:47:c6:42:4c:58:98:2a:47:4f:f5:0a:16:76:1d:
                    53:92:d3:5f:7a:5e:19:5d:1d:6b:98:5f:fe:20:4f:
                    54:c8:a2:4b:2d:ff:fc:55:3a:95:7b:f0:b2:00:17:
                    04:db:8f:d9:b8:62:45:d7:d7:75:36:bc:48:8c:1f:
                    91:f3:b1:6d:ab:4d:e8:6e:62:03:92:e8:cb:1a:15:
                    0a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:59:0B:44:2E:29:A5:1E:00:75:8A:0C:AC:D4:F8:84:59:E4:D6:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b4c3fcb3-b529-3b10-a392-4a8809bd01db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ac:1e:30:34:95:1b:0d:d4:bd:6a:a8:1d:42:4f:0c:65:0d:
         e2:29:b8:c4:0e:90:cb:88:01:f5:aa:f9:d3:e6:77:32:16:21:
         21:d9:45:d7:5f:4e:5f:70:e6:27:0d:17:9b:12:fe:19:5a:f9:
         81:2a:1a:67:7f:42:e2:69:40:d6:89:80:56:3d:a1:ce:b6:f9:
         f7:d5:78:f9:de:f7:e9:21:84:f9:85:a5:e8:7c:37:b4:19:a9:
         84:df:5f:a6:58:08:bb:30:86:bc:28:76:42:53:3f:e4:9d:e6:
         81:64:5d:a7:f2:6b:0d:4c:68:45:38:a5:c7:bc:b4:7b:5f:e8:
         e9:33:73:95:59:a9:97:ae:cb:96:3f:de:f0:91:3e:48:79:48:
         01:35:32:e3:96:02:1b:a4:f2:2b:46:c1:71:88:e5:e3:a2:d6:
         f6:00:b1:aa:c2:cf:95:7e:55:d2:34:8d:83:7b:08:f4:5d:1b:
         30:42:4c:ea:9f:87:94:bb:01:63:e6:f9:d4:66:61:6d:ae:3a:
         34:88:85:9b:e9:c9:55:28:f3:d8:c0:6a:90:f6:18:88:0a:0e:
         03:2a:ba:06:54:95:a6:39:f1:40:ed:1a:3d:19:53:dc:c6:07:
         9d:9f:51:af:32:50:ce:f3:66:bb:f9:14:20:8d:81:22:78:87:
         25:01:1a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:40:38 2026 by rpki-client