Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/ac35a6dc-9b6a-3e74-b46d-3d5bca8a49e0.roa
File:                     ac35a6dc-9b6a-3e74-b46d-3d5bca8a49e0.roa (raw, json)
Hash identifier:          Qfcpa6VRgh6FYOiRwX4pz9f1adi8icNLy4BDblxOgkI=
Subject key identifier:   4A:D5:59:FD:20:2B:C4:0F:09:36:D8:26:72:95:D0:81:EE:2A:AF:92
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EA79145814AD8C52C518E47C0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/ac35a6dc-9b6a-3e74-b46d-3d5bca8a49e0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12741
IP address blocks:        172.252.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:45:81:4a:d8:c5:2c:51:8e:47:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1ac723a0-002d-4d63-b91d-e3159252371a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:28:c4:09:59:8a:8a:ae:4e:81:74:af:09:16:
                    3b:b6:a9:b9:ce:0f:68:a8:c3:63:6e:a6:29:c3:7b:
                    37:e3:d3:7d:26:6e:72:73:ea:6a:d6:e0:20:07:df:
                    56:cd:e1:ed:42:d5:37:99:dc:b8:8e:2b:63:9f:f0:
                    2f:9f:01:12:02:39:af:57:eb:61:a3:d3:5e:2b:6c:
                    64:be:a4:5a:a8:0f:e8:cf:ee:e7:ad:ac:da:e8:bd:
                    ab:27:04:94:af:c2:40:e9:5f:aa:b8:c6:15:d2:d8:
                    e3:ee:cc:83:62:ad:89:ae:12:34:32:1f:7f:26:4d:
                    2f:6a:68:f1:db:e5:84:0d:d6:7f:06:e3:a0:83:94:
                    63:f1:5c:9d:9d:f9:57:93:2b:a5:77:a2:7d:1c:bd:
                    c9:90:ad:ed:9c:93:46:3f:34:f8:80:37:a3:c0:36:
                    cd:67:2f:c0:cf:b0:a4:5e:cf:b0:69:16:7b:fe:56:
                    2a:51:b9:8f:ed:fe:ed:a5:bf:c1:45:dc:fa:5d:49:
                    1b:1e:7e:e7:84:d2:88:19:83:51:51:e9:38:5d:72:
                    69:d2:1b:b7:96:4b:28:85:e5:04:83:1b:cc:2e:ba:
                    22:c7:8b:7e:01:aa:90:a6:41:c1:d4:d4:47:b2:15:
                    54:79:55:e8:76:0a:b4:04:9b:7a:66:ec:66:c8:86:
                    af:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D5:59:FD:20:2B:C4:0F:09:36:D8:26:72:95:D0:81:EE:2A:AF:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/ac35a6dc-9b6a-3e74-b46d-3d5bca8a49e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:58:2c:af:aa:65:6b:72:e8:7c:02:69:17:60:3e:92:b8:c2:
         d1:ff:92:12:20:b3:80:20:6a:a0:90:1c:b5:ab:ae:45:63:e7:
         59:48:88:75:2b:1e:96:1f:11:3f:7a:52:00:8e:01:68:26:1c:
         7d:f9:e7:49:88:9b:39:b2:fa:90:bd:03:76:ff:1a:dd:ed:bf:
         0f:80:e7:09:b6:56:21:e3:81:5b:48:a1:99:29:1a:4b:54:de:
         1f:aa:b3:3b:87:14:0f:c3:4a:cd:97:df:4d:5d:b5:24:42:f8:
         51:0e:86:62:d6:29:bd:e1:1d:39:4a:89:5e:40:c2:26:2d:34:
         f5:8a:cb:61:3b:57:8a:57:5d:b4:43:95:8c:06:a6:09:73:83:
         c7:1b:f1:d3:58:57:8c:b7:c5:80:a5:df:38:ca:da:d3:29:ab:
         d1:8b:62:7d:76:ec:f2:91:d1:d4:d8:bb:dd:09:d7:e5:be:73:
         29:00:e4:17:18:8e:e9:90:7c:f6:34:c3:a4:ca:9c:20:7c:4b:
         56:36:0f:89:f1:09:26:74:4b:4b:a6:7d:08:5b:b5:a2:62:c0:
         f4:74:55:58:c4:b8:ab:85:9f:22:71:b2:82:d3:4e:3f:f8:44:
         10:f7:7c:ee:4e:71:5a:7e:5b:a6:2f:59:0d:82:58:9d:06:fa:
         55:f4:0e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 09:26:44 2026 by rpki-client