Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/ec6d3234-112c-3883-bf3a-af86d303840b.roa
File:                     ec6d3234-112c-3883-bf3a-af86d303840b.roa (raw, json)
Hash identifier:          la/LcEjQTP68w201gsnXUUBmvHTyYYkPgweg9Ljn4+E=
Subject key identifier:   7A:23:39:75:75:92:3A:6F:23:ED:4B:5E:3C:A7:25:A4:5E:71:DE:34
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDD4F3A32C12C59957E5380
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/ec6d3234-112c-3883-bf3a-af86d303840b.roa
Signing time:             Tue 07 Apr 2026 16:30:36 +0000
ROA not before:           Tue 07 Apr 2026 16:30:36 +0000
ROA not after:            Mon 06 Jul 2026 16:30:36 +0000
asID:                     63199
IP address blocks:        172.252.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dd:4f:3a:32:c1:2c:59:95:7e:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:30:36 2026 GMT
            Not After : Jul  6 16:30:36 2026 GMT
        Subject: CN=e8f9dc07-7177-4bcc-b841-00edc04a2e0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7c:a4:75:4c:f6:72:03:1f:95:26:9d:a5:bc:
                    37:47:c4:42:c6:b3:f3:f2:81:56:8d:81:51:57:c0:
                    82:5c:74:75:c0:d0:81:ba:0a:28:a8:93:d4:08:ef:
                    d9:41:1c:20:4a:d3:3b:1a:13:7c:72:de:2c:e0:fc:
                    17:e0:8f:b0:75:3d:1f:3b:9d:69:bf:0f:27:9a:0c:
                    e4:e5:8d:e9:be:ac:5e:e9:76:b6:50:ce:8c:e0:4d:
                    0c:0b:b6:48:a7:69:25:2f:ff:fd:1f:a0:f2:62:1e:
                    23:29:70:53:c0:6f:da:fd:70:87:28:90:8f:6e:c0:
                    ae:e2:13:c2:bd:69:19:6b:2d:cc:2f:b3:96:8c:28:
                    b9:52:0c:a3:1c:b7:25:aa:b7:4f:93:bc:7b:1c:d8:
                    c6:67:9d:a7:58:08:7c:71:3b:56:c3:fd:b3:b3:09:
                    35:1e:d2:f0:c8:1f:6f:2c:3f:39:18:fc:9c:01:3e:
                    d0:1c:eb:91:bc:3c:a8:44:65:51:d7:16:6c:b7:6d:
                    1e:a8:f5:91:46:3b:54:11:ff:c1:a5:12:6f:ad:58:
                    bb:93:9d:2f:0d:3c:5c:02:f2:53:d4:c3:75:16:e6:
                    df:a2:4b:09:e2:03:37:22:d1:1e:20:a9:0f:f0:ac:
                    43:85:e6:90:eb:1a:ad:a4:99:c2:2e:e8:c4:86:d6:
                    2c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:23:39:75:75:92:3A:6F:23:ED:4B:5E:3C:A7:25:A4:5E:71:DE:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/ec6d3234-112c-3883-bf3a-af86d303840b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:78:85:70:74:2d:1a:47:c3:51:ab:e5:ea:95:ff:bf:73:e7:
         ed:e3:a8:57:ce:0e:de:1d:e0:01:58:3c:b4:cd:59:76:7c:8d:
         33:b0:e1:6a:0a:ef:52:1e:2e:84:a6:2d:ea:09:9b:a5:18:af:
         eb:68:3c:ec:7d:34:db:84:ba:60:5d:61:8a:7d:f3:96:c5:e7:
         3d:3c:08:4e:e7:36:cb:a5:26:b2:82:bd:58:c7:31:fb:3e:78:
         93:72:f2:ac:e5:00:57:40:92:64:84:95:f9:33:ec:3f:b5:f7:
         f7:43:aa:bb:44:1d:43:e4:c6:d4:2e:be:25:35:b3:d4:96:63:
         b3:f0:34:eb:8c:11:42:2e:e1:c4:a5:d4:34:ba:d2:d2:9c:8a:
         65:7a:e3:1d:e5:ba:78:db:72:c4:15:be:10:c0:9a:6e:d5:e2:
         39:a7:1b:bb:6c:73:5c:e5:50:a3:d1:c5:ea:53:2f:6c:5f:c6:
         be:84:82:d3:54:21:ab:cb:76:e0:41:30:c4:58:64:07:8a:5b:
         d5:98:cd:40:7c:1b:b1:75:fa:13:95:f3:4b:41:ff:2d:df:3f:
         d6:96:01:5f:e1:09:5f:68:f2:58:04:24:0c:af:cc:1c:82:a1:
         1d:71:1d:7e:43:dd:c8:70:dd:46:20:b9:96:d6:a4:e1:68:83:
         ee:18:02:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:42:36 2026 by rpki-client