Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/fb8ef0b3-3e85-3321-800b-5dcc4067d3aa.roa
File:                     fb8ef0b3-3e85-3321-800b-5dcc4067d3aa.roa (raw, json)
Hash identifier:          rxyvLScrdMpC4Gl2WRfYV4bZcPOYfgAMMvH/K3BUPJ0=
Subject key identifier:   24:1E:5E:AE:4A:26:17:0F:C7:3D:CE:10:C0:2E:91:B8:97:01:B8:86
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDD28C257782CB750090200
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/fb8ef0b3-3e85-3321-800b-5dcc4067d3aa.roa
Signing time:             Tue 07 Apr 2026 16:30:18 +0000
ROA not before:           Tue 07 Apr 2026 16:30:18 +0000
ROA not after:            Mon 06 Jul 2026 16:30:18 +0000
asID:                     214238
IP address blocks:        172.252.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dd:28:c2:57:78:2c:b7:50:09:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:30:18 2026 GMT
            Not After : Jul  6 16:30:18 2026 GMT
        Subject: CN=d9b4fcf9-e667-4f85-99df-6741c556ae0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c7:73:6f:ff:a2:8a:7e:19:a6:bc:7f:b3:18:
                    7f:aa:f9:aa:d2:5e:fe:c4:4a:bf:45:8a:2f:af:5a:
                    e7:22:ab:68:92:73:23:51:6c:53:6c:84:5c:27:14:
                    8d:a6:f5:96:c8:da:c6:ea:8c:0c:cb:bb:28:d4:64:
                    20:4b:84:b9:01:73:08:0a:31:f0:bf:74:50:49:ce:
                    38:cd:d9:1b:30:6b:25:41:93:b4:c6:8f:b6:31:d3:
                    f6:f8:28:69:ef:9e:ed:bc:8e:c5:ed:bf:0c:c4:0e:
                    05:79:ed:eb:7a:ac:66:48:2d:15:e5:4b:7a:0a:68:
                    32:f5:f1:fc:5e:87:7f:d6:90:02:ce:bc:ab:df:87:
                    37:bb:c3:bf:9b:1d:fe:b1:02:b9:79:e2:54:bf:0a:
                    c8:9f:b6:55:c6:6d:2d:a5:0d:10:14:11:82:73:7e:
                    14:04:d4:96:26:a8:03:13:41:e1:37:5b:64:a1:07:
                    e2:cd:72:22:d3:73:b7:6b:e6:1b:95:31:c7:02:95:
                    f2:c0:84:13:7b:15:d5:b5:d0:76:ab:29:36:c7:bf:
                    95:fd:f2:de:78:8a:20:fb:dd:b6:99:e6:94:4b:bd:
                    f0:b9:3b:72:35:57:94:46:9c:6a:a8:30:df:66:14:
                    4a:7b:86:81:64:3b:e3:56:01:f0:5b:83:fc:c4:94:
                    44:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:1E:5E:AE:4A:26:17:0F:C7:3D:CE:10:C0:2E:91:B8:97:01:B8:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/fb8ef0b3-3e85-3321-800b-5dcc4067d3aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:f7:12:8c:1f:5e:7c:7f:b0:13:da:0d:0e:86:cd:ac:ac:67:
         53:c3:2e:ec:59:1b:a3:79:a1:9d:2d:69:1a:b8:19:c5:33:e0:
         8e:99:2c:62:c8:f8:7d:5f:55:a6:66:3d:06:9c:07:84:57:2f:
         c7:96:2c:1b:37:f5:5d:09:20:15:45:48:82:45:f4:31:6a:e6:
         ac:cc:95:87:e5:47:41:18:38:83:1d:8d:f1:84:c9:67:b3:87:
         ca:2c:a8:95:0a:bc:4d:56:ca:ff:4b:4a:cd:0f:c5:af:d3:71:
         0a:3a:47:bd:35:6e:d9:99:b8:1f:1e:b0:6a:cc:d7:00:83:df:
         76:26:69:3b:cd:50:30:d6:39:4b:f5:85:d3:36:46:0f:6a:f2:
         ca:88:28:91:e0:56:3d:d5:64:1a:c1:8c:f5:9f:8b:12:fc:4f:
         14:96:f9:21:11:37:31:dc:90:a9:00:82:ed:c4:09:78:87:e5:
         65:27:7c:93:3a:59:7d:81:f1:60:af:05:62:c8:77:17:66:53:
         9e:b2:84:c9:c5:d7:7e:95:fb:5c:24:5e:bf:08:75:4f:91:b4:
         18:43:7f:dd:71:f2:95:20:5c:e2:d5:4e:b6:bf:6b:d9:d9:7f:
         f9:24:10:74:0c:f8:fc:cf:dd:6f:79:bf:4f:ac:13:2e:8e:20:
         78:44:41:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:39:29 2026 by rpki-client