Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/99efe3f8-70ff-3668-b498-f569affbfd4a.roa
File:                     99efe3f8-70ff-3668-b498-f569affbfd4a.roa (raw, json)
Hash identifier:          bVcRObrO5wSaelWTipCnmB9T4BnaHfbFHeKPECkJouk=
Subject key identifier:   33:B4:CF:4C:45:5F:36:3E:56:F3:AE:29:60:9D:14:74:A8:0C:04:15
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA104F777CF0A2D3656B40
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/99efe3f8-70ff-3668-b498-f569affbfd4a.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     396356
IP address blocks:        104.252.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:10:4f:77:7c:f0:a2:d3:65:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=84540ad8-dee6-45ee-a800-a0564fb89791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:92:4e:f0:97:da:78:a1:7c:35:fd:93:59:b9:
                    03:a1:e8:e7:1d:5f:10:d6:26:63:a3:48:e5:b0:01:
                    af:76:e4:6e:5e:ea:2f:c4:f6:5f:69:9f:6c:aa:4e:
                    e5:e4:91:e6:c0:70:86:25:ad:46:7b:11:97:cf:6d:
                    a7:f5:68:c8:90:5d:29:f5:e6:b6:0e:fe:8a:17:d6:
                    11:59:ad:a2:0c:da:4b:68:79:44:b9:31:c6:2d:7d:
                    ef:a4:d9:4b:1c:86:bb:b9:f8:ca:dc:cd:8e:07:47:
                    16:25:ee:e6:a1:da:50:af:8e:cf:01:ba:28:93:15:
                    15:cf:bf:ac:cb:84:f8:4e:ad:80:cc:fb:19:65:93:
                    1d:3a:65:44:ee:3c:39:d4:91:1d:82:b2:4e:d9:48:
                    b5:9a:d4:dc:d5:19:96:88:0e:72:3a:ee:90:7e:18:
                    27:6f:1e:db:74:68:db:f9:5a:63:be:b2:80:18:de:
                    9e:b9:1b:68:12:77:24:d5:c5:83:02:70:9c:4b:cc:
                    b0:fa:20:78:e1:1b:ba:3a:aa:48:4d:c4:d0:94:9c:
                    db:79:f3:3e:c9:ce:f6:20:da:5a:0f:7b:c6:84:1d:
                    b0:8d:e3:61:59:67:0e:e5:f1:57:81:a0:c6:64:b0:
                    b7:b1:40:8a:22:b8:e4:af:50:a5:fe:54:0e:2e:52:
                    f8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B4:CF:4C:45:5F:36:3E:56:F3:AE:29:60:9D:14:74:A8:0C:04:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/99efe3f8-70ff-3668-b498-f569affbfd4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:11:32:ce:03:ab:bc:ff:0c:3d:55:e8:b7:8f:71:f8:04:24:
         7b:29:fa:48:44:99:8f:e9:0d:2e:7c:53:cb:25:85:75:18:97:
         56:ba:b9:d4:f4:73:53:8c:c5:46:c8:d1:7a:13:aa:71:83:43:
         3f:b1:bc:79:31:4c:fb:18:ef:3a:8b:de:71:6d:d6:d2:35:99:
         69:e0:35:55:c7:82:a4:93:10:18:c7:99:e7:67:59:e8:62:73:
         b1:19:31:c7:97:b7:c6:ce:74:75:05:b1:dc:28:cb:83:55:fa:
         e0:a0:20:52:1c:78:fc:bf:48:88:83:85:46:1c:c9:ea:5b:60:
         72:36:f3:56:77:65:87:86:42:ae:f2:a5:56:39:71:b2:fe:85:
         f8:2e:a2:ae:6c:8b:53:46:67:81:6e:cb:af:a6:df:9d:ea:e5:
         95:a6:d1:70:c8:09:0c:d8:bc:8b:bb:07:fa:59:fb:41:25:59:
         60:5f:5e:fb:60:45:7d:20:1d:bb:a5:21:ee:37:fe:42:4b:9e:
         61:a1:c4:c8:ac:18:69:c0:c0:65:94:6c:dc:76:ba:51:19:72:
         43:dc:99:ac:d1:a7:e5:a8:57:52:d0:9e:79:ad:97:ca:99:f0:
         11:1d:d0:ed:2a:45:59:99:b6:d5:74:4b:d8:63:9f:67:8e:99:
         f1:0c:42:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:56:23 2026 by rpki-client