Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/e1bbc520-648a-3a5e-9409-a749ac2ce90e.roa
File:                     e1bbc520-648a-3a5e-9409-a749ac2ce90e.roa (raw, json)
Hash identifier:          KTKkXeCWrR37A1tZ/uBh3LAfqfxxKvnXkyHbNw8pn9c=
Subject key identifier:   A8:F3:2E:06:B8:6E:FD:9E:7F:42:60:49:90:1C:81:D3:D8:89:24:0E
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDC3ED2475F36208BBFFF00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/e1bbc520-648a-3a5e-9409-a749ac2ce90e.roa
Signing time:             Tue 07 Apr 2026 16:28:27 +0000
ROA not before:           Tue 07 Apr 2026 16:28:27 +0000
ROA not after:            Mon 06 Jul 2026 16:28:27 +0000
asID:                     18779
IP address blocks:        104.253.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dc:3e:d2:47:5f:36:20:8b:bf:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:28:27 2026 GMT
            Not After : Jul  6 16:28:27 2026 GMT
        Subject: CN=71b3e37b-6564-42a5-90c6-580a40c8d014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d4:ee:38:38:f2:d5:50:90:f5:87:e4:3a:bb:
                    7f:e5:78:50:52:0d:8e:53:01:d7:3e:de:f4:50:29:
                    2c:6d:c7:05:e3:74:24:b1:33:d9:6d:f5:51:c5:67:
                    42:a2:c2:91:f5:78:8c:28:40:ef:a3:77:d9:3d:05:
                    af:68:fb:33:60:7a:c7:4c:2b:b9:45:82:ea:19:a6:
                    fd:27:35:2c:8d:ab:2d:83:76:56:f2:f4:bd:92:4e:
                    95:b7:7c:91:b9:d2:90:f6:81:b1:e1:59:27:50:46:
                    c5:a1:be:54:f8:ea:66:01:b2:36:c2:a7:15:a9:14:
                    16:d5:c0:6b:87:97:b1:3e:05:48:89:78:66:42:3a:
                    14:35:27:60:77:98:63:9c:d5:80:1d:7b:4a:af:95:
                    1e:48:05:60:ef:7f:1f:2f:b3:cc:1c:bf:9c:fe:b0:
                    ce:bc:5a:98:5f:8c:ce:c4:09:74:7c:8a:21:58:f4:
                    08:6e:45:fc:a9:4f:14:ea:10:26:bc:b1:63:6a:de:
                    ba:d9:bc:d0:e7:f6:28:c9:58:69:3f:15:c2:ba:6b:
                    9c:6d:10:db:74:f7:4a:c1:f8:20:51:48:e4:a4:e1:
                    3b:78:c1:3c:0c:c4:78:bb:37:bc:af:ca:e4:05:33:
                    86:62:a4:65:d3:65:69:99:18:ed:12:fe:0a:05:b7:
                    6a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F3:2E:06:B8:6E:FD:9E:7F:42:60:49:90:1C:81:D3:D8:89:24:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/e1bbc520-648a-3a5e-9409-a749ac2ce90e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:49:d6:93:08:81:ef:99:2d:4a:fa:0f:c5:06:53:3d:2f:69:
         f8:ae:43:a0:fc:46:be:ff:2b:a2:f6:0b:7a:79:32:35:58:c4:
         44:50:34:44:e4:1e:36:c6:85:52:95:8b:bc:19:4a:54:e0:15:
         09:65:ac:c8:72:42:94:d1:5b:72:c1:10:8b:54:6a:3b:75:91:
         a2:2e:80:18:a5:2a:79:d7:1d:30:c1:f3:67:94:18:1d:fa:20:
         f0:86:bf:b9:9a:dc:ed:54:5d:bb:5b:5f:b4:a0:3d:de:ed:5c:
         69:09:4f:f9:f5:b8:46:41:24:39:00:c7:af:bd:0a:34:4e:6d:
         82:c9:d9:a2:72:78:70:36:de:ca:2e:78:91:2a:82:00:29:84:
         35:ed:15:16:89:fc:e8:19:35:02:4f:3c:e8:29:ef:a3:8a:cf:
         3e:89:dd:6a:c0:0e:90:ce:dc:eb:31:c6:e0:b8:b5:6a:cf:8a:
         da:1f:f8:32:e7:9c:60:c3:af:e8:62:b9:53:49:22:6e:e0:a8:
         15:55:03:d9:e4:9a:d9:27:3c:a7:44:78:76:54:4d:c7:e5:37:
         79:a2:ad:0f:79:67:29:94:93:c7:4d:50:98:ac:12:6c:37:bf:
         6c:98:74:b5:5a:75:11:d7:b3:fd:d9:9f:8d:20:b4:65:8d:b8:
         b4:fb:7b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:40:41 2026 by rpki-client