Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a5b39e8e-6735-3fff-86a9-5a0cce0617ba.roa
File:                     a5b39e8e-6735-3fff-86a9-5a0cce0617ba.roa (raw, json)
Hash identifier:          7DWAKsXIXFWXBxDn7Ea/52q1SQs/wvPNESO7jIMNHc8=
Subject key identifier:   C8:D3:EE:67:84:95:51:D3:6C:9B:B4:7A:CC:A6:DE:12:0A:61:9E:A9
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EE94C86CB87A014E4725AC400
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a5b39e8e-6735-3fff-86a9-5a0cce0617ba.roa
Signing time:             Fri 21 Aug 2026 14:26:03 +0000
ROA not before:           Fri 21 Aug 2026 14:26:03 +0000
ROA not after:            Thu 19 Nov 2026 15:26:03 +0000
asID:                     18779
IP address blocks:        104.252.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e9:4c:86:cb:87:a0:14:e4:72:5a:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 21 14:26:03 2026 GMT
            Not After : Nov 19 15:26:03 2026 GMT
        Subject: CN=ea7062b1-efad-49ee-902a-d877821daa12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:07:a7:ae:00:70:65:7c:24:b4:10:95:41:75:
                    bf:de:c2:90:f6:ef:d5:90:bb:57:2d:4d:ce:9f:a1:
                    f8:23:2c:f2:2b:2c:aa:f9:14:83:3f:ef:69:8a:41:
                    a3:b9:0e:bd:dc:ce:ef:17:c2:5f:80:e9:32:4b:b6:
                    4b:5d:35:fb:f1:79:04:ac:97:94:e2:b3:ea:32:aa:
                    be:db:c7:86:23:18:ad:60:7c:c9:ed:fb:e5:64:19:
                    aa:af:fc:31:14:5d:c7:85:04:1b:bc:5a:06:9c:54:
                    78:b6:aa:2d:b0:e6:87:d9:18:20:d3:64:81:fb:67:
                    54:30:e2:27:a9:77:a9:13:43:bf:7e:c9:f4:e7:e0:
                    19:74:6b:40:71:d5:e4:62:5b:55:75:df:de:c7:79:
                    6c:ce:52:9e:59:0c:e6:18:44:1e:61:8a:3b:83:47:
                    dd:29:87:9d:67:15:64:fb:ea:43:9c:80:95:fc:c1:
                    47:71:ca:e9:4a:e2:69:f7:ff:9e:cd:da:b3:7a:e5:
                    3f:42:31:f4:a3:55:3d:fe:66:02:33:89:56:c1:fe:
                    2b:89:d1:d5:21:b0:86:37:a6:1f:3e:2c:91:92:29:
                    0e:e5:39:94:f0:bd:b5:0d:b8:bb:c7:1d:c8:ce:29:
                    ea:2c:d4:44:56:0e:4e:fa:84:8d:e9:2d:cf:4a:20:
                    42:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D3:EE:67:84:95:51:D3:6C:9B:B4:7A:CC:A6:DE:12:0A:61:9E:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a5b39e8e-6735-3fff-86a9-5a0cce0617ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:52:98:0e:0d:64:24:53:2b:47:61:82:12:65:b1:74:94:fb:
         c6:79:6f:29:16:72:e3:b5:99:20:ff:9c:43:ff:35:ec:d0:d7:
         99:bf:90:04:0b:4e:78:c7:7a:25:b1:a1:c0:81:8a:9e:12:c5:
         14:62:d5:56:99:3d:38:32:38:b5:75:46:23:c5:d5:07:bd:5f:
         bd:f9:13:d7:55:7b:1f:38:1d:28:01:b3:da:33:f1:c6:05:fa:
         b8:a4:da:70:09:e2:b1:db:2d:d0:b5:a5:33:f0:65:9c:51:d0:
         0d:9a:03:1c:22:5d:8e:4b:df:74:01:8a:b9:fd:6a:ce:b3:5d:
         e2:5f:a5:55:6b:f7:6d:20:63:99:92:3d:c2:36:c6:08:62:eb:
         90:50:b5:06:05:49:45:16:cf:62:b9:19:92:18:7d:30:ca:18:
         4b:19:b7:28:c8:b7:1f:97:e2:56:c4:b1:2c:8f:bb:b6:01:40:
         a2:21:8e:8e:c6:38:6c:00:78:31:b5:bf:ae:7e:b8:61:7a:55:
         95:e1:c7:e0:d3:64:eb:04:95:05:53:a2:ac:df:98:89:44:c7:
         53:b9:b1:36:5a:86:fc:c1:1f:71:df:7f:9c:9c:2a:76:6d:95:
         1a:21:25:c4:1e:5d:84:0f:c8:94:a4:1b:b2:a0:4c:1e:ea:b6:
         2f:38:7c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 01:38:57 2026 by rpki-client