Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d2c72623-c1c9-3828-817c-1c0b0bcfc439.roa
File:                     d2c72623-c1c9-3828-817c-1c0b0bcfc439.roa (raw, json)
Hash identifier:          /IGJZsU/2DHjYn/5TCLqu97b22bPYfj5rMAL8ckbGU0=
Subject key identifier:   7F:4A:1D:26:8B:59:12:25:F1:02:6B:EA:EC:E8:11:16:64:91:FC:15
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDBE7285D3DEB7D756A19EC
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d2c72623-c1c9-3828-817c-1c0b0bcfc439.roa
Signing time:             Tue 07 Apr 2026 16:27:46 +0000
ROA not before:           Tue 07 Apr 2026 16:27:46 +0000
ROA not after:            Mon 06 Jul 2026 16:27:46 +0000
asID:                     56971
IP address blocks:        104.252.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:db:e7:28:5d:3d:eb:7d:75:6a:19:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:27:46 2026 GMT
            Not After : Jul  6 16:27:46 2026 GMT
        Subject: CN=6ef8e6a2-9fa7-40bc-b42a-d6d4fbff2f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8b:7e:94:40:1a:6c:13:bc:ba:45:98:d2:14:
                    4e:44:96:12:ae:57:e6:92:4d:b8:a7:1f:bc:c1:11:
                    fd:0e:c3:f3:2b:7f:20:6f:88:74:16:50:e0:c1:37:
                    e9:46:7d:31:c3:03:98:5c:29:9c:72:01:2e:96:4a:
                    a9:5b:47:4a:24:c6:66:50:39:bb:2d:8b:84:d0:f2:
                    ec:97:f5:54:33:25:b5:ec:b3:6b:a9:e2:e6:f6:06:
                    f4:c7:c5:71:9b:75:8f:ac:65:26:79:83:58:a4:67:
                    85:3f:a3:f6:e2:2e:b5:fc:19:40:52:f5:58:af:f7:
                    d2:0a:06:9a:9e:13:8c:8a:7e:5f:69:4f:57:2d:0f:
                    25:33:a8:90:1c:33:8f:d0:73:4e:7c:0e:7a:d8:24:
                    dc:50:f3:26:27:6d:ca:fb:20:41:73:c6:d2:f8:4a:
                    9d:74:40:56:62:75:eb:dd:f4:17:51:f3:57:cf:a3:
                    ed:74:b5:21:9a:40:33:42:15:79:bd:53:08:01:05:
                    fa:48:7f:5a:7c:f8:68:06:92:28:db:4f:be:b5:25:
                    05:0f:a2:66:a0:25:2c:ab:3b:46:b6:74:0f:87:7b:
                    f4:2d:ae:32:61:bc:8f:01:a4:e0:36:75:e2:34:ae:
                    35:e9:a8:78:55:98:bd:0e:11:75:d6:04:be:a6:1c:
                    11:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:4A:1D:26:8B:59:12:25:F1:02:6B:EA:EC:E8:11:16:64:91:FC:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d2c72623-c1c9-3828-817c-1c0b0bcfc439.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:cd:91:c8:f3:cb:ef:08:0e:cb:4a:43:8d:c3:5f:84:ba:52:
         bc:24:9b:63:7f:45:89:cc:34:46:0c:7a:c0:65:98:ac:a5:b4:
         c6:46:f3:29:c0:9e:2c:c2:26:9e:4b:2e:4a:47:b0:4e:2c:14:
         0c:5d:1e:73:57:69:2e:c7:47:49:57:6d:10:4b:62:27:d5:ea:
         15:df:58:4d:2f:f4:51:17:57:8c:bc:af:96:69:e4:7d:fd:6c:
         70:21:6c:55:47:e2:d3:d7:2c:e5:86:43:e6:21:91:5b:5d:a9:
         a4:60:f0:db:19:8c:d9:8d:e3:4e:7c:8d:ef:c5:d6:9a:86:71:
         58:40:38:20:ac:cb:44:a1:e7:06:86:d9:ab:5d:60:9e:af:b3:
         11:fe:97:6e:77:ca:f2:11:f1:2e:8e:c9:42:57:3c:4b:48:4a:
         bc:87:e9:2e:86:a8:f6:59:cc:f1:d9:59:5f:91:66:e1:01:2b:
         ab:db:a3:68:9a:97:30:1c:b6:4e:95:de:49:38:d0:fe:fd:d2:
         af:c6:d5:04:0c:a1:10:03:87:ec:08:5a:50:92:53:d6:25:86:
         ea:5a:b6:71:75:04:2f:4a:68:3d:ae:36:b4:a1:d3:4f:6a:f0:
         3a:b9:d2:d3:f5:36:f5:af:23:45:e3:8d:d9:fa:b0:f9:9b:e8:
         5a:8a:0b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:42:24 2026 by rpki-client