Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/4220b95f-57bd-3793-9055-85fa1dfe7aec.roa
File:                     4220b95f-57bd-3793-9055-85fa1dfe7aec.roa (raw, json)
Hash identifier:          s8ZeLgVxV6fsFD+fAkJG4mUNexsJbaWU9eHHriqVp9M=
Subject key identifier:   2D:00:A9:17:DA:4A:04:5D:06:B1:4A:8F:95:BE:24:5F:E3:AB:A8:6D
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA293EB951328CC6993B00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/4220b95f-57bd-3793-9055-85fa1dfe7aec.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     6939
IP address blocks:        172.252.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:29:3e:b9:51:32:8c:c6:99:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=60d6e371-9e8c-4da7-8175-0324b80715bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7b:f2:b2:2e:2c:61:5b:52:ca:ab:6a:7f:88:
                    67:b8:5a:a5:cb:cd:e0:4e:32:db:c2:2f:a0:9d:3e:
                    e5:77:56:84:da:62:98:e5:37:63:a4:84:51:50:50:
                    df:49:ff:56:ea:10:70:b2:a8:f8:81:b7:4a:ff:4a:
                    0b:d3:f8:0b:32:83:43:15:ed:32:79:c2:da:08:51:
                    97:e8:94:37:0c:58:62:95:d2:1d:9d:d7:b0:22:b3:
                    01:57:b2:24:a1:de:cc:c0:f9:bf:f3:7a:91:90:59:
                    a6:84:17:07:ce:49:7a:5a:fb:33:8c:c7:11:80:a4:
                    91:42:b6:fb:65:e2:1a:c8:64:69:32:3f:c9:a5:48:
                    60:87:cf:36:cb:f0:36:04:90:58:57:93:a7:98:5c:
                    6c:15:5e:dc:bd:bc:a8:3d:62:47:e9:92:12:ea:7d:
                    e2:e7:d0:a1:b7:0b:fd:53:db:63:4a:f0:41:a5:a1:
                    25:49:ac:91:0d:a3:f4:66:c1:ca:06:c5:04:29:74:
                    af:bf:9d:b8:18:4e:e5:ef:b1:00:d3:48:bf:e5:fe:
                    88:40:e5:65:2c:58:f8:36:01:3c:a1:1b:e8:8e:09:
                    74:02:f0:b5:40:09:e8:ee:4b:41:73:f9:18:c5:7b:
                    a9:f6:fd:2d:46:d4:ef:12:73:19:0f:5e:39:b4:a3:
                    2c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:00:A9:17:DA:4A:04:5D:06:B1:4A:8F:95:BE:24:5F:E3:AB:A8:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/4220b95f-57bd-3793-9055-85fa1dfe7aec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:7d:6e:f1:e3:0c:a0:e2:91:3c:a8:8a:13:ff:32:48:bb:99:
         07:67:35:83:ce:e9:4e:b7:ea:76:ba:20:bf:97:16:07:26:c4:
         98:8c:bb:cb:b6:75:d3:2f:d6:d2:74:b6:36:4d:14:18:cc:91:
         77:18:c7:73:9b:8f:fa:21:de:ce:ab:c2:68:18:e6:03:e7:bf:
         f5:71:05:a2:4d:64:8b:e3:6c:4a:3c:78:b2:6d:d6:e6:ed:04:
         7a:a1:cf:ee:fa:b5:6e:df:f4:22:15:2e:d3:42:9d:27:a6:cb:
         7d:03:5e:85:ac:ed:33:7b:56:5b:00:7a:dc:59:2a:ee:50:32:
         87:67:f2:c5:05:fe:66:6b:e1:f7:4e:56:fd:49:cf:55:db:ba:
         06:79:cd:e8:a4:df:37:41:ce:de:22:3b:98:3d:37:91:ed:eb:
         9d:4e:9d:a9:ff:e5:89:78:32:e6:64:19:2d:97:fd:c1:59:7f:
         fe:83:1f:4d:46:9d:e6:a0:8f:f2:12:ad:a8:bc:09:ca:90:72:
         11:5d:5e:bb:1d:bc:b1:43:bb:6c:9e:50:77:c9:b0:e7:cb:28:
         98:d7:fc:06:29:19:4c:0c:fc:aa:00:38:60:17:71:8b:5b:22:
         44:e4:5d:e1:1f:49:d5:04:ca:5f:e6:95:17:7c:55:b4:08:66:
         8a:aa:83:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:54:07 2026 by rpki-client