Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/fd03cee1-f3ca-3bb2-8a5e-2f33d172df81.roa
File:                     fd03cee1-f3ca-3bb2-8a5e-2f33d172df81.roa (raw, json)
Hash identifier:          PCPaXJ50WzNo+OrBSogjGDvQc2lO2NUFa99Sb3PkfA0=
Subject key identifier:   CC:BA:C3:C4:D5:E1:48:17:CF:0F:C2:C8:82:2E:AD:D2:2A:F6:1D:5E
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDC13D2F24CE4A092907680
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/fd03cee1-f3ca-3bb2-8a5e-2f33d172df81.roa
Signing time:             Tue 07 Apr 2026 16:28:07 +0000
ROA not before:           Tue 07 Apr 2026 16:28:07 +0000
ROA not after:            Mon 06 Jul 2026 16:28:07 +0000
asID:                     262287
IP address blocks:        104.253.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:dc:13:d2:f2:4c:e4:a0:92:90:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:28:07 2026 GMT
            Not After : Jul  6 16:28:07 2026 GMT
        Subject: CN=cf1ac406-4bcc-4c8b-8d06-89dbd1655570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:80:12:fc:95:2d:68:8e:9e:48:7a:6e:ed:ca:
                    91:1a:f4:22:78:42:20:8c:f3:79:33:52:35:29:8d:
                    3f:48:db:26:6d:de:0c:e0:e0:b9:ea:99:be:2c:22:
                    65:23:05:c8:98:5a:ab:3a:46:b5:f6:e3:3a:e0:5f:
                    e2:9b:35:23:2c:07:bb:82:0f:d6:67:fa:1d:2c:18:
                    a7:53:a9:5f:e6:6b:b2:f8:e0:86:3a:69:ec:9a:d1:
                    23:9e:8d:05:4e:89:a1:41:c8:16:23:0c:9c:ea:37:
                    75:5a:0e:a5:56:13:95:39:7b:d2:7f:6f:11:de:85:
                    ac:d7:9f:4b:7d:ce:b7:9f:be:10:f5:41:39:74:91:
                    2b:06:fd:25:d9:74:59:1e:08:6f:07:33:b7:5c:55:
                    8b:82:45:52:ee:91:36:59:7e:fc:b3:9e:4e:0d:34:
                    24:e9:90:0a:5f:2d:2d:82:53:b3:97:c7:05:3e:4e:
                    6f:0d:f9:e7:86:ad:c8:67:31:2b:b6:fd:ef:ac:31:
                    9c:8f:23:68:91:e5:57:63:6b:5b:82:44:9e:b3:fd:
                    fb:0b:3d:3f:5f:c4:26:e1:fd:68:32:6e:fd:96:1a:
                    31:08:ea:c4:0b:21:72:70:59:8e:67:ca:4e:ca:c1:
                    dd:fc:e4:9f:6b:66:78:73:36:b7:bd:2b:46:8e:71:
                    8c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:BA:C3:C4:D5:E1:48:17:CF:0F:C2:C8:82:2E:AD:D2:2A:F6:1D:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/fd03cee1-f3ca-3bb2-8a5e-2f33d172df81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:ad:d3:50:d6:fc:74:1a:56:ae:c9:d8:8b:87:98:59:cb:1f:
         5b:da:db:4d:29:b9:e4:76:f4:10:28:94:3a:04:a7:ac:6d:60:
         b9:4f:71:49:84:87:84:a7:7d:01:4b:7e:9c:61:8e:56:9a:b4:
         23:23:07:93:bd:06:30:70:42:69:d3:86:0c:fe:dc:84:f7:06:
         1b:a0:a3:c0:8f:a7:ea:82:32:45:5d:8d:39:57:4e:d8:0a:95:
         23:03:c0:3f:2e:fd:30:51:65:7b:66:68:ec:5f:f3:4b:ec:14:
         89:29:52:0e:3b:98:aa:fd:37:32:f7:bc:48:d2:3d:76:4c:67:
         f4:5d:97:e6:61:1b:3c:f0:03:07:6a:96:31:f0:42:6b:f9:b7:
         a5:0b:c7:5f:fe:69:00:88:3c:9f:37:28:82:d5:9c:36:29:9c:
         d1:fb:35:ff:b5:72:c3:7d:9a:10:ce:fd:04:c3:89:0f:1f:3a:
         af:7b:b1:a0:6b:0c:df:a4:4e:8b:de:ac:c0:8e:84:ab:4b:a8:
         0c:c6:be:bd:2e:98:5d:05:3f:ea:cf:e5:d9:ff:fb:02:b2:92:
         07:15:c0:83:dc:fd:bc:4a:c8:73:9d:68:63:16:21:2f:8a:92:
         54:28:57:28:65:1e:ee:87:48:7b:eb:e1:62:80:7e:ba:77:eb:
         d3:e5:80:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:39:32 2026 by rpki-client