Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/197cdca1-3741-3ff7-a98f-77d599a89d38.roa
File:                     197cdca1-3741-3ff7-a98f-77d599a89d38.roa (raw, json)
Hash identifier:          NrG4RB/blvz6A/n4rVtc2OyNgI1Dqs9grnIUAcKpQk4=
Subject key identifier:   53:8E:36:CB:A0:10:D3:AA:D5:2B:0B:44:B0:06:58:52:CF:F6:E3:B0
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EA79230F583849AEAB0625500
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/197cdca1-3741-3ff7-a98f-77d599a89d38.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20738
IP address blocks:        104.253.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:30:f5:83:84:9a:ea:b0:62:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=106baef3-2f88-4c7e-8fe5-92c9e1405f5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:04:7a:0f:fa:60:f5:97:d6:7a:f2:d3:ec:d2:
                    67:93:47:3e:b4:28:7f:e3:fb:ee:52:3b:c4:7c:78:
                    fe:30:f4:43:06:33:1f:40:9b:67:1b:30:09:2e:e7:
                    57:46:a8:32:f0:54:7b:82:ba:ba:d6:46:ff:c1:51:
                    6e:85:30:db:34:a0:b1:e5:de:b3:ed:46:f3:fb:40:
                    74:c3:d3:d7:a8:19:68:53:37:1b:53:09:7b:b9:55:
                    f2:74:bb:8d:d8:44:89:a6:12:3d:50:b8:bd:0d:08:
                    6f:4e:62:36:5a:74:b3:c0:28:f4:a7:1b:97:32:7a:
                    4b:9d:e6:1a:89:4f:c6:cb:4d:77:56:b0:08:ce:23:
                    64:e1:fb:95:fc:35:ab:71:37:3e:e2:ec:19:3d:2c:
                    de:ce:fb:56:2c:05:bb:b4:22:0a:9d:0d:4c:f0:25:
                    26:32:72:bb:ab:ab:b5:11:53:62:76:df:81:b0:09:
                    43:8a:dd:e7:58:43:b7:aa:ab:19:fc:26:3d:ce:8a:
                    20:bf:62:76:f0:68:e8:2c:3c:10:7f:9a:03:db:55:
                    0e:d4:a7:34:9c:b4:75:36:cf:9c:f4:ab:33:97:e9:
                    0b:89:32:68:2c:7d:5f:71:bc:4b:4f:bb:81:93:43:
                    31:61:eb:44:6f:8d:2d:b1:77:4a:92:30:a9:87:d4:
                    3e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:8E:36:CB:A0:10:D3:AA:D5:2B:0B:44:B0:06:58:52:CF:F6:E3:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/197cdca1-3741-3ff7-a98f-77d599a89d38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:dc:11:12:41:e6:61:f5:de:af:d5:86:31:ec:05:5a:c4:4d:
         69:3f:c8:d2:c7:be:d9:91:23:17:90:ae:41:dc:08:96:de:9a:
         bd:c3:0d:0f:6b:fe:26:a2:18:5d:fd:cb:8e:8c:62:4c:6e:f0:
         a0:c4:ed:06:bb:88:ae:1b:ba:59:8b:58:a8:52:d0:27:12:0d:
         6e:12:c9:db:64:42:cf:5f:af:8a:24:73:1d:59:8e:e1:63:29:
         b7:80:42:35:ba:3f:10:3b:eb:7e:58:7b:ef:13:7e:39:d3:2e:
         a2:cd:c3:a2:37:9b:ef:95:e7:9b:b3:5a:2d:87:6f:de:bf:1b:
         e2:95:d1:97:6b:83:83:04:20:d4:4a:54:31:13:a7:89:ce:cd:
         c0:96:32:a6:1b:6e:ba:f1:94:7e:d1:89:a9:d7:31:21:b9:8d:
         bc:cd:ea:af:ee:09:70:c1:59:f6:ed:01:19:f4:82:72:39:1c:
         f6:25:db:63:9f:93:4f:01:99:ed:f5:bb:4b:a2:84:d0:41:d1:
         87:b8:0a:16:88:4d:9b:eb:1e:76:23:40:83:14:b1:e1:29:e0:
         d4:f2:3b:0e:c6:61:c7:ef:ad:b6:e5:98:6b:eb:dd:16:07:46:
         50:77:55:60:11:7c:1d:32:ce:f1:e7:88:11:5d:52:02:28:01:
         c0:bd:f0:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkjD1g4Sa6rBiVQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MTA2YmFlZjMtMmY4OC00YzdlLThmZTUtOTJjOWUxNDA1ZjVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswR6D/pg9ZfWevLT7NJnk0c+tCh/4/vuUjvE
fHj+MPRDBjMfQJtnGzAJLudXRqgy8FR7grq61kb/wVFuhTDbNKCx5d6z7Ubz+0B0
w9PXqBloUzcbUwl7uVXydLuN2ESJphI9ULi9DQhvTmI2WnSzwCj0pxuXMnpLneYa
iU/Gy013VrAIziNk4fuV/DWrcTc+4uwZPSzezvtWLAW7tCIKnQ1M8CUmMnK7q6u1
EVNidt+BsAlDit3nWEO3qqsZ/CY9zoogv2J28GjoLDwQf5oD21UO1Kc0nLR1Ns+c
9Kszl+kLiTJoLH1fcbxLT7uBk0MxYetEb40tsXdKkjCph9Q+iQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFOONsugENOq1SsLRLAGWFLP9uOwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvMTk3Y2RjYTEtMzc0MS0z
ZmY3LWE5OGYtNzdkNTk5YTg5ZDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP2LMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGPcERJB5mH13q/VhjHsBVrETWk/yNLHvtmRIxeQrkHcCJbemr3DDQ9r
/iaiGF39y46MYkxu8KDE7Qa7iK4bulmLWKhS0CcSDW4SydtkQs9fr4okcx1ZjuFj
KbeAQjW6PxA7635Ye+8TfjnTLqLNw6I3m++V55uzWi2Hb96/G+KV0Zdrg4MEINRK
VDETp4nOzcCWMqYbbrrxlH7RianXMSG5jbzN6q/uCXDBWfbtARn0gnI5HPYl22Of
k08Bme31u0uihNBB0Ye4ChaITZvrHnYjQIMUseEp4NTyOw7GYcfvrbblmGvr3RYH
RlB3VWARfB0yzvHniBFdUgIoAcC98Jk=
-----END CERTIFICATE-----
Generated at Sat Aug 22 03:37:02 2026 by rpki-client