Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a66fc26d-dccc-3ec4-b6e1-c4b07c2a2b35.roa
File:                     a66fc26d-dccc-3ec4-b6e1-c4b07c2a2b35.roa (raw, json)
Hash identifier:          ICVo7QkC1D7B3zxAFJ76B1FLmdNFzQLgbqP8uSLIJYY=
Subject key identifier:   06:AA:B8:9A:59:03:6D:A1:58:C7:A5:BA:41:9A:0A:1A:CC:29:07:38
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DB9F75C6F709DD98265F8C0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a66fc26d-dccc-3ec4-b6e1-c4b07c2a2b35.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     834
IP address blocks:        104.253.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:b9:f7:5c:6f:70:9d:d9:82:65:f8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=f5289de5-ab96-4f1c-9832-7d894e2b6555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5d:d8:d9:32:12:db:ec:2a:9e:2b:8b:1e:55:
                    20:7b:1d:95:af:74:b8:68:a7:56:b2:17:5e:41:ac:
                    50:30:a2:ae:cf:45:21:d4:72:75:24:31:5a:dc:03:
                    c1:1b:d1:c3:5e:cd:96:ff:62:d4:fc:b9:5e:f4:f1:
                    5f:27:f4:e1:c6:fc:0c:5f:1e:33:e1:a2:31:62:3f:
                    02:45:d2:a0:c1:0c:da:ad:93:5e:e7:17:bb:50:33:
                    52:8e:d3:d7:6a:2a:38:03:97:58:9b:62:2f:ed:84:
                    af:53:23:7f:49:89:73:3d:8f:cf:6d:57:57:88:a9:
                    a4:3b:1b:b5:48:92:12:70:79:9f:0b:9e:39:64:15:
                    d9:fd:18:39:5a:7e:22:aa:30:27:93:97:cb:56:9d:
                    6b:19:f6:f3:00:47:c9:ba:93:03:dd:62:20:d7:79:
                    39:13:7b:d6:18:16:77:6f:5c:f8:da:4a:96:46:52:
                    24:a3:21:a9:63:7e:9e:c2:81:e5:18:d5:01:1d:7e:
                    9d:46:20:8c:a8:d5:9e:12:a9:57:14:28:a7:5a:27:
                    1a:5a:28:59:6e:ed:d4:09:68:49:a2:e1:d5:6f:6d:
                    53:0c:4e:09:93:7a:2b:63:03:10:17:6a:9e:ec:e5:
                    89:e1:f9:64:9c:1c:76:d7:4d:45:4f:99:76:2e:8d:
                    5a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AA:B8:9A:59:03:6D:A1:58:C7:A5:BA:41:9A:0A:1A:CC:29:07:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a66fc26d-dccc-3ec4-b6e1-c4b07c2a2b35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:e5:bc:88:fb:c6:5a:69:14:f4:43:eb:eb:a9:83:5d:2e:08:
         61:29:84:ec:bd:50:df:f8:c6:82:fc:8b:ea:3a:bc:84:20:a7:
         d9:09:26:db:5e:b2:e3:03:ed:39:e4:85:7c:2a:03:bb:b7:33:
         49:10:e9:7e:62:ec:c9:37:15:3b:c0:c3:59:24:05:0b:77:e0:
         d6:d4:11:77:77:39:34:52:18:e2:10:66:ee:a1:33:68:f3:94:
         ca:53:9f:6f:24:c6:ec:eb:e2:f1:06:46:49:e2:5e:52:d5:cd:
         a2:49:92:ec:c4:51:92:2e:2d:8e:d3:34:e8:51:dc:0d:31:64:
         6f:eb:d4:9b:af:43:d7:d4:05:be:55:7a:2a:3b:37:a6:dc:d1:
         29:45:9b:ce:8e:37:8c:46:d2:a9:fa:a9:1b:3a:e8:d5:31:0d:
         e4:12:e8:93:04:ec:fc:16:af:2f:50:4c:9e:78:04:d3:43:b4:
         e9:ee:c8:77:46:2b:fa:00:be:30:4c:04:cb:ad:14:ca:8c:e6:
         79:fa:05:9b:a7:44:d2:75:e0:ff:10:32:ad:6d:00:5b:35:ca:
         fd:07:fe:a2:a7:19:3a:4e:9e:b0:76:0f:9c:f2:a1:f2:ac:30:
         ee:f3:a1:ef:0e:30:16:39:11:51:8d:3f:d0:ae:fb:33:56:48:
         f0:6d:43:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:51:44 2026 by rpki-client