Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/1e6c9893-29c0-35fc-9525-b15e685faa85.roa
File:                     1e6c9893-29c0-35fc-9525-b15e685faa85.roa (raw, json)
Hash identifier:          84OXPpHfgzsmlmhZ5nMgqudIoQxu1cBgESAVRBc2H1M=
Subject key identifier:   9C:7F:B9:2E:CE:93:AB:19:AC:02:92:B0:E8:2F:BD:A2:62:9F:1D:80
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA25F92F3D211CD7673780
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/1e6c9893-29c0-35fc-9525-b15e685faa85.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     174
IP address blocks:        172.252.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:25:f9:2f:3d:21:1c:d7:67:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=6bc6fbd6-893b-4ff1-a391-1b0e894a6aa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:31:5f:43:b5:5a:98:b8:ad:0a:44:f5:4f:e2:
                    0c:0f:6e:76:28:b5:96:d7:6e:aa:67:80:db:f1:81:
                    b5:6a:a0:a4:8e:9b:fa:0e:7b:93:6a:7e:e2:5a:0f:
                    c5:99:a7:23:8b:b7:cf:79:17:9a:8d:1b:4c:2b:43:
                    ff:ef:32:16:4c:b2:6f:c4:5a:1b:59:22:83:e6:8a:
                    46:a3:58:8c:75:08:31:e7:60:5f:6d:87:c5:b7:bc:
                    59:0e:23:db:5d:7c:b2:1c:a3:72:24:10:0f:d3:fa:
                    8f:8e:27:bc:72:0a:0f:ce:08:dc:31:91:c9:f4:f5:
                    9d:9f:6b:60:cd:ab:f0:4a:49:66:82:e3:73:49:d8:
                    e0:6d:c0:10:72:97:e9:ab:67:ed:dc:f7:d4:e5:71:
                    7a:27:1d:fa:82:02:6c:77:23:64:2f:b7:30:c1:5a:
                    af:3f:d8:c2:de:21:bd:49:1e:c7:4f:74:f9:17:c4:
                    46:9d:66:e9:f3:43:e9:d4:7c:7e:00:1b:f2:e8:e0:
                    e5:37:89:1f:85:58:aa:a8:41:1b:dd:88:cf:c2:57:
                    eb:54:e7:76:d0:28:a9:8d:d5:74:c1:38:02:b4:53:
                    bf:fc:c0:10:ba:a0:81:84:7e:ea:58:27:ea:cd:02:
                    64:19:2c:2b:62:03:f7:cb:4a:1e:7c:ae:c3:a0:f6:
                    49:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:7F:B9:2E:CE:93:AB:19:AC:02:92:B0:E8:2F:BD:A2:62:9F:1D:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/1e6c9893-29c0-35fc-9525-b15e685faa85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:8f:23:94:ce:af:5c:89:ec:34:9d:43:2d:e9:ef:45:0d:76:
         4d:ad:83:77:34:8d:e6:f4:3c:03:7a:a5:28:71:74:0f:36:fc:
         f4:01:09:bd:a8:bf:76:6e:99:d5:4f:8f:7e:e6:24:00:9c:13:
         bc:62:da:78:7b:82:0d:2b:8f:fa:f8:70:77:04:32:ed:6a:03:
         33:37:d0:bb:08:e7:2c:ca:9c:66:0b:de:e2:4a:b3:e9:21:ea:
         b4:31:d0:bc:0e:a9:46:ce:ce:03:ef:b3:4c:3c:21:0a:00:ea:
         f9:a4:13:51:d7:e6:a8:5d:f5:51:8c:a8:83:63:fd:bf:25:01:
         c2:ca:87:7c:d7:57:ae:5c:6c:90:fc:f3:cc:1e:f1:9c:38:cf:
         17:ed:86:ba:e7:bc:35:38:e4:3e:f2:a8:d6:89:13:e3:5c:4d:
         55:22:9f:7b:51:bc:dd:e6:1d:f0:f1:0f:87:cd:47:67:5f:c2:
         42:5e:63:b1:0b:11:1b:29:af:a9:6e:43:52:ba:38:bb:ac:ac:
         4c:ce:79:7b:5a:62:99:f4:0e:e5:5e:c5:5b:2a:31:b1:ea:23:
         61:f3:74:a2:95:6c:c1:ce:ca:45:7c:95:a4:60:8c:0e:2d:40:
         e8:05:3b:80:0a:16:f9:1b:35:a8:5f:e8:87:da:ed:cd:98:84:
         d9:13:6c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:54:28 2026 by rpki-client