Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d6094959-7564-35a3-972a-794e353523f8.roa
File:                     d6094959-7564-35a3-972a-794e353523f8.roa (raw, json)
Hash identifier:          drg9ArF/GTzPffza1mXXe5MAVSDQJvKqbLOEPwgkiMo=
Subject key identifier:   02:4D:AB:1D:7C:C8:30:64:7F:59:E8:18:76:C3:98:30:77:CF:5D:5F
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDD4EBACBD262271DDBAB80
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d6094959-7564-35a3-972a-794e353523f8.roa
Signing time:             Tue 07 Apr 2026 16:30:36 +0000
ROA not before:           Tue 07 Apr 2026 16:30:36 +0000
ROA not after:            Mon 06 Jul 2026 16:30:36 +0000
asID:                     398781
IP address blocks:        172.252.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dd:4e:ba:cb:d2:62:27:1d:db:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:30:36 2026 GMT
            Not After : Jul  6 16:30:36 2026 GMT
        Subject: CN=18da1e42-579d-45bf-b915-c4efd3c04cf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f5:1b:e5:ff:ff:cf:fc:ac:2c:74:c4:6a:7e:
                    ed:83:25:76:7f:52:46:d3:51:c8:2f:57:e2:2f:c4:
                    c9:cb:e6:b4:9e:66:94:a8:e0:1d:8c:de:e5:c2:32:
                    ef:e9:7c:68:05:c9:8a:da:43:bb:2a:77:9d:f9:be:
                    46:a4:27:02:77:c0:d3:21:0c:37:6d:e4:3a:b8:17:
                    50:66:15:67:44:12:05:f0:5f:df:4c:b7:d1:c1:7c:
                    48:71:e4:a8:81:e2:d1:53:4e:cf:8d:af:0b:6c:b1:
                    a0:46:31:2c:03:a8:22:24:fb:b6:00:34:b7:49:ed:
                    e1:c6:13:4c:bd:cf:2a:45:fb:bd:27:a7:07:94:06:
                    b3:71:1a:7f:2f:6f:92:ed:d6:36:7a:72:9d:39:84:
                    88:9f:bb:2f:25:f6:6f:88:43:a5:18:69:ea:36:55:
                    92:c2:6c:80:a5:bb:01:81:e5:2f:fe:7b:43:97:a3:
                    a3:29:8a:9d:42:18:42:29:5f:67:bd:75:e8:06:7c:
                    ae:4b:53:7e:37:cd:7c:2f:63:0a:20:21:80:74:dd:
                    ba:33:df:bf:21:43:72:21:2d:3e:15:48:dd:4e:b7:
                    2b:cd:f6:31:ea:0d:6b:e4:e6:d7:1a:c5:a5:2e:b4:
                    e4:73:14:18:d0:2e:91:ad:71:13:93:e1:8d:6c:c2:
                    91:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:4D:AB:1D:7C:C8:30:64:7F:59:E8:18:76:C3:98:30:77:CF:5D:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d6094959-7564-35a3-972a-794e353523f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:cd:aa:9e:67:90:58:00:4c:76:2f:79:8b:a0:c4:50:77:42:
         f7:8b:66:60:2c:d5:f4:b2:7d:4c:2e:16:c3:03:cb:f6:ec:31:
         90:91:37:73:b9:28:46:24:24:de:c9:ab:15:6e:f0:c3:1a:19:
         a1:1f:9e:2c:6e:7a:c0:62:d2:49:e2:da:81:23:a3:c6:d6:c1:
         29:7a:88:34:92:44:67:75:1b:95:70:a9:fc:af:24:0b:db:a1:
         85:6e:de:39:be:fe:0f:02:6b:2a:31:6f:95:8e:c0:8f:47:9b:
         2f:05:6b:04:5b:d0:c2:70:fb:62:34:e9:9a:87:b3:a0:4c:7a:
         93:a6:1b:6d:3f:df:1b:3a:fd:c7:93:28:ea:fc:24:ea:c3:62:
         be:68:a7:a5:f1:b5:57:ff:b9:ff:23:4c:a9:9a:e6:05:f3:8e:
         fd:ac:a3:76:e9:e7:c9:03:7b:0d:eb:33:21:d2:2a:4a:da:91:
         0e:ef:7c:a5:5f:06:3b:7a:ff:71:91:43:81:61:cc:b0:ca:16:
         14:28:96:02:d4:19:30:4f:ab:73:bb:7e:3c:8f:eb:75:72:90:
         33:8a:73:84:c7:6b:a8:c5:c8:fa:3c:7b:98:0d:ec:69:08:69:
         a8:81:da:e8:f9:c8:4f:2d:fd:d8:67:6f:8c:4e:75:be:a9:cb:
         bc:98:4c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:43:58 2026 by rpki-client