Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/bf282b0a-053e-322f-86ec-a2f3b39fcef5.roa
File:                     bf282b0a-053e-322f-86ec-a2f3b39fcef5.roa (raw, json)
Hash identifier:          R6H9+ratiRzr+GjY7TLtoxIVcBg3m8IzZu1WpHG/Gm8=
Subject key identifier:   A7:25:27:2C:F8:34:90:98:83:73:E9:FE:09:65:79:1E:C4:CA:AE:50
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584DE93162B1E47A1F38C810D700
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/bf282b0a-053e-322f-86ec-a2f3b39fcef5.roa
Signing time:             Thu 21 May 2026 20:44:26 +0000
ROA not before:           Thu 21 May 2026 20:44:26 +0000
ROA not after:            Wed 19 Aug 2026 20:44:26 +0000
asID:                     9009
IP address blocks:        104.253.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:31:62:b1:e4:7a:1f:38:c8:10:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: May 21 20:44:26 2026 GMT
            Not After : Aug 19 20:44:26 2026 GMT
        Subject: CN=c210cbea-e23f-46ea-b27b-ecd850f6e6a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:87:c2:51:30:b4:01:0c:4b:aa:87:a1:34:8b:
                    73:6c:05:88:8e:a0:4b:29:6c:9e:ad:1d:06:ef:ac:
                    0c:b3:a9:49:e2:a6:e2:f7:dc:59:c5:69:de:f2:61:
                    48:fc:91:eb:d1:87:e0:97:37:41:f7:bd:03:67:8c:
                    ba:86:c8:69:7c:01:dd:b4:e0:8c:c3:6b:9d:d5:19:
                    86:67:e7:77:7c:9e:68:e2:63:8a:50:15:ce:1f:85:
                    28:5f:52:e6:29:f6:d8:a6:42:66:29:38:0d:ce:cf:
                    18:92:44:eb:72:86:99:1d:bc:8c:b3:29:67:62:7f:
                    24:05:6e:1a:0e:dd:be:e2:2d:22:ee:20:2a:d9:f5:
                    51:3c:90:6a:38:05:b2:2f:6a:c2:1c:eb:de:b2:9c:
                    44:e1:ee:d6:9a:24:09:4d:43:86:18:1b:3d:c9:8b:
                    8b:14:97:be:92:d7:03:9e:fe:2e:76:6a:ef:31:c4:
                    9f:90:11:62:38:99:a7:b4:3a:16:b4:7d:16:0f:9a:
                    f9:37:f9:9d:3c:00:16:d4:f9:ec:e1:0a:17:21:e5:
                    d8:1b:99:13:6e:1c:97:dc:9c:f0:ea:cb:dd:fa:3b:
                    90:af:08:4f:c2:a7:a1:0a:20:14:1d:62:bd:51:71:
                    34:2a:be:a8:d6:c6:31:d0:3f:b4:b2:9d:92:22:a2:
                    c4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:25:27:2C:F8:34:90:98:83:73:E9:FE:09:65:79:1E:C4:CA:AE:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/bf282b0a-053e-322f-86ec-a2f3b39fcef5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:d3:14:0e:2c:d9:58:f4:12:b0:4d:f7:e0:79:23:4e:c1:4a:
         5f:c9:8b:20:3e:ff:67:86:c7:63:b1:dd:63:fe:bc:5a:7e:8c:
         60:8d:0f:58:0f:f2:da:ba:05:1e:51:07:13:c6:a6:ec:cb:3b:
         71:15:b5:98:26:1c:f3:56:bf:36:ff:2b:62:22:c1:ad:ea:ee:
         1e:86:4d:3a:0d:d8:a9:48:40:36:b5:f9:10:48:82:b1:f3:4f:
         e9:96:11:09:3c:b5:04:05:cf:a3:60:30:97:45:72:83:78:6d:
         f0:43:9e:77:95:ce:35:a5:6a:9d:d5:01:1c:66:6f:0e:cc:82:
         f0:30:7e:bf:eb:bb:a5:45:40:d8:1d:8e:c3:59:e6:48:cf:9b:
         94:ea:4b:b9:86:d7:d1:99:05:f3:48:00:97:38:6c:7a:7e:74:
         af:2f:34:bf:9a:7e:67:90:f9:12:27:d3:00:82:85:23:93:25:
         67:76:12:0b:df:be:7a:09:94:b3:b0:45:7f:71:37:e9:65:a0:
         55:42:94:0a:f0:e3:d2:45:3a:2b:62:da:c3:ba:ca:99:c5:0e:
         ac:36:10:1e:32:3f:88:a4:47:98:70:f3:9c:c8:1b:a9:b0:e7:
         5d:5e:5f:74:87:8b:07:6f:24:f5:35:a9:8c:99:a6:ed:95:6a:
         e7:db:87:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 04:25:51 2026 by rpki-client