Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/56766d8c-1054-3ea2-85b3-5170cc0b0444.roa
File:                     56766d8c-1054-3ea2-85b3-5170cc0b0444.roa (raw, json)
Hash identifier:          GG/JRePzFmcwddj1t52Gycz3aWiZYdEWDuTUkL3gZOE=
Subject key identifier:   2B:D4:04:A1:B9:86:0B:46:4A:68:F5:2F:07:8E:61:57:C5:04:1F:3F
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584DE96D379BC8151C71AA2B1E40
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/56766d8c-1054-3ea2-85b3-5170cc0b0444.roa
Signing time:             Thu 21 May 2026 22:44:59 +0000
ROA not before:           Thu 21 May 2026 22:44:59 +0000
ROA not after:            Wed 19 Aug 2026 22:44:59 +0000
asID:                     10753
IP address blocks:        104.252.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:6d:37:9b:c8:15:1c:71:aa:2b:1e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: May 21 22:44:59 2026 GMT
            Not After : Aug 19 22:44:59 2026 GMT
        Subject: CN=9deee12f-ebfb-4514-aa52-bcd11517c096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:91:98:dc:70:30:6f:c8:f3:c9:d6:41:33:b6:
                    68:7a:f5:58:88:72:6b:d1:5c:8a:a1:f5:7f:bc:d3:
                    34:3a:db:30:c1:fd:73:da:46:b2:84:f1:11:51:98:
                    2c:8e:c5:f8:cb:e4:51:d8:7b:71:fa:0e:f6:3c:41:
                    47:e8:a9:73:b7:a2:67:ae:25:96:26:f7:dc:86:1e:
                    7e:21:81:ce:3c:c8:5b:1d:88:a3:d1:f9:da:1d:15:
                    06:35:ea:bb:83:1c:b0:a2:53:6b:39:d7:37:a3:dd:
                    90:7c:d6:e6:5a:e6:fa:75:ca:03:36:36:8c:2c:a9:
                    1a:a5:f3:d1:76:e3:96:ce:99:b4:ef:85:cb:17:dc:
                    7f:40:58:2b:21:cd:c3:80:b8:67:8e:a0:8f:9f:8e:
                    c1:a2:77:66:bd:e7:ef:37:01:6c:76:d5:6c:b7:fc:
                    2c:4d:3e:50:d7:e9:e5:63:25:86:4c:d1:7e:a7:c6:
                    11:7e:1f:93:f2:9e:19:93:b0:e3:e2:df:61:07:41:
                    6f:17:b8:a4:74:f7:62:c5:70:0d:cd:ee:3b:d4:9f:
                    bf:6f:d0:42:c8:9a:39:fd:97:d5:48:71:df:cc:f7:
                    34:aa:33:8c:97:2a:ee:55:df:58:14:f4:7b:85:bf:
                    d7:34:99:0f:ef:c2:26:a5:8e:00:a6:bf:27:fd:f7:
                    9c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D4:04:A1:B9:86:0B:46:4A:68:F5:2F:07:8E:61:57:C5:04:1F:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/56766d8c-1054-3ea2-85b3-5170cc0b0444.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:6e:a3:17:aa:22:eb:24:b0:46:a5:7d:eb:06:d9:5a:cd:3b:
         f8:63:a4:1b:fa:bd:44:e0:3d:01:02:6e:38:ab:11:c0:b2:45:
         33:19:ef:5d:58:fc:ac:e1:46:15:2f:51:35:3e:09:3b:22:97:
         e6:9a:31:34:96:48:58:a4:f7:49:44:3c:f1:84:26:c6:7d:43:
         c9:29:55:8c:8c:3e:67:48:87:10:58:11:a0:25:dd:c9:1f:b5:
         99:b6:31:81:88:ce:a0:ee:cf:ff:83:b3:58:b7:5e:ff:a6:87:
         e2:c9:78:7e:4b:f2:2d:37:08:3a:51:04:09:99:66:ef:79:7f:
         ef:e0:6c:08:09:84:30:4d:4e:35:ba:7a:cb:b7:ed:98:86:68:
         f9:c3:60:a6:dc:d9:42:fb:54:33:a4:a8:a3:5b:5e:45:69:d7:
         7e:02:83:d8:2a:96:60:94:43:cc:e3:5f:65:3a:77:5f:34:b2:
         30:9d:07:d0:10:7b:5c:b8:32:ca:36:d2:82:02:6d:27:4a:22:
         eb:c9:db:42:68:c1:a3:36:e8:aa:14:52:7b:1c:28:b0:43:0f:
         9f:15:37:45:de:0f:81:6d:ac:fd:20:c1:2e:55:fe:5d:9b:f4:
         34:5c:e7:5d:7b:f9:3c:55:29:9b:f1:7a:95:9d:3a:f3:04:c9:
         6b:97:fd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 04:26:01 2026 by rpki-client