Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/8bcf6b88-9de7-3075-abe6-aa420f504aa6.roa
File:                     8bcf6b88-9de7-3075-abe6-aa420f504aa6.roa (raw, json)
Hash identifier:          NceAPoFJ9YAjyGXD6QC9oZQH0MxzLkZG8gBTuyGw8ZM=
Subject key identifier:   BD:84:3F:3A:F3:3B:EB:12:7C:56:9C:2A:ED:D1:D4:B2:E9:A9:AB:A0
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA1D59342DCF9001E46B80
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/8bcf6b88-9de7-3075-abe6-aa420f504aa6.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     398781
IP address blocks:        172.252.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:1d:59:34:2d:cf:90:01:e4:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=9986766d-0cdf-428c-b4da-38b29a53bda1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:fe:fb:9f:b3:ec:bc:6b:78:aa:15:c9:d7:a4:
                    66:79:b1:fb:75:bb:d8:75:32:4d:63:e3:82:0d:4a:
                    47:f2:4e:88:c5:22:57:86:8a:a8:9b:95:c1:19:33:
                    3c:13:29:d8:77:95:fe:16:f8:21:45:49:16:10:24:
                    e2:cb:76:ed:cb:99:34:94:24:7d:56:cd:d3:5f:59:
                    5f:4f:99:79:40:19:80:fd:99:02:42:98:c6:7c:9c:
                    dd:63:f1:a7:c6:4d:dc:0b:cd:20:c7:53:a9:01:7e:
                    a0:65:0a:1e:1a:e5:fe:8a:b2:0d:3b:53:84:ed:92:
                    78:ac:4d:7c:ef:7f:72:dd:18:0c:2c:d3:8f:1c:7e:
                    74:0f:7e:c1:12:2d:42:42:d9:8a:b7:83:00:c1:2f:
                    1b:8b:38:28:fe:57:a6:75:aa:0b:77:1b:a3:14:18:
                    ba:b8:9a:ce:2a:6b:0d:9d:58:7c:f3:00:f7:04:0e:
                    96:27:8b:0b:fc:25:33:a2:14:3c:51:37:d0:0a:04:
                    df:4c:1b:e0:98:e7:e1:34:9b:41:c3:a2:d1:0c:53:
                    74:d6:80:a0:bb:e1:01:1c:7b:c1:00:f8:fb:c9:06:
                    a5:48:db:3f:51:47:bd:11:00:dd:08:18:5f:68:61:
                    ff:37:6b:ea:8f:6b:dd:93:7d:cb:5f:42:67:5f:a3:
                    97:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:84:3F:3A:F3:3B:EB:12:7C:56:9C:2A:ED:D1:D4:B2:E9:A9:AB:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/8bcf6b88-9de7-3075-abe6-aa420f504aa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:82:ff:2b:80:e3:66:31:ec:b7:d0:28:ae:41:c5:fe:64:52:
         b0:cf:1f:2d:9e:43:fb:3c:fd:78:d6:8a:23:a7:fb:6e:fd:2c:
         75:63:89:c8:52:fc:00:d1:f0:a2:d1:cf:83:fe:27:e6:5d:41:
         39:78:2d:ee:61:97:62:9d:9d:73:d5:f5:57:66:d3:b0:da:07:
         d1:45:06:f2:b4:61:7d:61:bf:0b:4c:c5:ed:85:f1:53:df:70:
         48:d3:da:14:7b:70:93:b0:14:c7:23:4d:37:10:b9:eb:24:fc:
         b9:8c:4b:dd:be:da:1a:a5:64:5f:71:c1:00:c2:df:7d:81:3e:
         b5:87:80:ba:e6:a0:e2:e0:c8:89:6c:68:dc:7e:d2:33:d6:78:
         ac:df:23:c7:9b:be:ea:7c:77:64:74:e5:8f:aa:14:31:bd:70:
         1d:30:2f:b2:d8:7b:d8:9a:ed:1f:8e:8b:d1:19:c0:9d:16:89:
         d5:f5:5f:8b:2a:e0:84:e4:82:f3:7d:b3:a3:bd:da:a1:a8:b1:
         59:c6:19:6b:b2:5f:53:80:e4:e1:04:3f:7c:67:d0:6d:ba:c6:
         58:24:77:9f:2d:4c:5d:39:f9:7e:f9:1c:89:e9:39:a7:0f:a8:
         69:cb:78:01:18:31:b8:a5:cf:55:cf:2c:db:41:89:34:fc:22:
         35:17:5c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:53:31 2026 by rpki-client