Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/73b42db1-8b7e-3de3-b15c-a7a1b1499f76.roa
File:                     73b42db1-8b7e-3de3-b15c-a7a1b1499f76.roa (raw, json)
Hash identifier:          26sug9dhEqZX8HvglQOMicVo+m/Csh0s7gWrUVfSlAg=
Subject key identifier:   10:60:E0:75:2C:10:45:F5:FB:38:15:43:84:1A:6A:46:27:49:E1:2C
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584DE9396C9C3049DFB915795C80
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/73b42db1-8b7e-3de3-b15c-a7a1b1499f76.roa
Signing time:             Thu 21 May 2026 21:00:37 +0000
ROA not before:           Thu 21 May 2026 21:00:37 +0000
ROA not after:            Wed 19 Aug 2026 21:00:37 +0000
asID:                     212238
IP address blocks:        172.252.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:39:6c:9c:30:49:df:b9:15:79:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: May 21 21:00:37 2026 GMT
            Not After : Aug 19 21:00:37 2026 GMT
        Subject: CN=8953db32-e414-41dd-9b61-d43883a83656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ed:2a:fe:76:b8:ae:67:27:63:cd:79:c1:48:
                    a6:4f:d6:1b:04:da:af:e6:e5:4f:67:8d:03:9c:a0:
                    34:02:81:d7:31:4b:ef:e4:b6:1f:2b:2f:1e:ec:85:
                    20:dc:73:d5:a8:4d:7f:d2:4b:bd:80:e9:25:e3:0a:
                    80:91:09:8f:cf:52:f1:c7:e1:49:5f:af:69:c1:9d:
                    91:e5:4b:67:de:fd:fd:50:4a:1b:d5:eb:e6:0f:89:
                    bc:30:fe:f9:24:58:6d:1a:80:7b:1a:02:5b:8b:b9:
                    87:93:66:8c:bf:49:04:a4:0b:a0:12:c1:f5:7d:3b:
                    e4:b3:42:86:00:70:86:db:c5:fd:a0:ce:d4:03:3d:
                    73:96:d4:80:76:76:e9:96:01:c1:6a:c4:9f:a1:c4:
                    d0:b5:7c:46:8f:45:be:82:ec:cf:40:e7:2b:08:43:
                    2b:3f:1a:5f:bf:74:91:87:bf:e4:f6:b0:49:5a:e0:
                    f9:73:8d:fa:b0:ed:56:93:64:d7:48:de:76:34:60:
                    88:49:c2:db:85:1f:84:0e:4d:89:81:c2:32:ac:05:
                    c3:6c:6b:52:39:70:30:98:38:5d:16:52:92:84:58:
                    76:2e:ae:1e:5f:b9:c5:6c:de:bb:fe:82:c5:65:a0:
                    7b:e3:56:db:87:4d:d9:17:06:e1:c5:68:12:41:0a:
                    e4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:60:E0:75:2C:10:45:F5:FB:38:15:43:84:1A:6A:46:27:49:E1:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/73b42db1-8b7e-3de3-b15c-a7a1b1499f76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:de:84:b6:9a:c3:65:da:9a:2a:fe:ef:fd:65:8e:ec:6b:06:
         a1:7a:ed:8f:95:da:05:1b:18:1d:b9:92:59:e3:b7:fc:a1:1c:
         13:db:ae:01:73:c0:45:86:62:c3:2e:79:87:58:8d:81:d3:c5:
         ee:31:3e:59:f1:f2:5b:10:20:45:dc:ae:45:f3:cc:bd:81:37:
         d7:05:fa:83:d6:0f:7e:80:bd:dc:3b:cb:47:d4:08:b5:9a:d0:
         3f:30:a5:03:86:d4:0e:70:1f:4a:9b:ef:9e:d7:59:45:9a:68:
         f0:68:0b:8c:3b:6e:04:07:32:09:ec:1a:dd:34:d1:16:02:e0:
         fe:db:7e:61:ae:c9:77:35:ed:1a:2f:dc:0f:be:8e:f5:89:0c:
         c2:e1:2c:44:91:00:29:0f:40:53:7e:e8:52:cf:75:35:49:a8:
         1b:ef:c9:48:41:c8:9d:b4:7f:3d:ca:a4:5c:dc:6f:8e:26:92:
         0a:d4:8d:16:68:7e:28:33:71:76:94:d6:23:20:f3:40:d0:ed:
         f8:11:e9:b5:7e:06:ef:1b:55:a7:c0:ed:17:e1:9d:7e:be:56:
         f4:9e:d0:35:76:62:d8:b9:da:bc:e0:d7:53:4a:4b:b4:03:f9:
         d0:fd:f1:ef:68:2c:a2:3a:40:66:b3:47:2d:07:39:78:22:c4:
         63:59:6d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 04:25:45 2026 by rpki-client