Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d7639702-8d2b-3a93-bd7c-deb44b22d104.roa
File:                     d7639702-8d2b-3a93-bd7c-deb44b22d104.roa (raw, json)
Hash identifier:          BAnhuxqjqmdFwilbMU2hYAteRO9dvVAPHxSG+z0quv8=
Subject key identifier:   17:48:54:89:8B:D6:70:23:9D:A8:0D:6D:9A:7A:61:BE:DA:A0:27:8F
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA1DF3288E1A70A95E4580
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d7639702-8d2b-3a93-bd7c-deb44b22d104.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     398781
IP address blocks:        172.252.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:1d:f3:28:8e:1a:70:a9:5e:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=63b8b7cd-6e4b-4413-b2e4-8e166877e0f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:cd:85:fe:13:55:1b:b5:a6:09:91:f7:f9:08:
                    81:94:ff:68:08:66:01:95:23:e5:7b:f6:ec:d4:30:
                    f5:ab:e3:f2:16:1e:4d:e3:49:f0:06:c4:dc:98:ce:
                    82:5a:4e:ee:c9:21:ac:5c:aa:3f:fc:8e:99:82:94:
                    33:f5:36:3a:be:ef:46:44:6a:bd:ec:88:e6:df:0e:
                    12:b7:16:16:be:de:3f:04:8c:69:e6:6a:9b:aa:58:
                    9f:b3:6c:ad:dc:4b:51:37:d5:87:bd:aa:19:f2:b4:
                    cc:f6:cb:ac:b7:4c:f6:77:69:d5:c4:63:9c:36:59:
                    4a:77:c1:70:71:d8:d6:6c:97:ac:8a:dd:b8:78:88:
                    51:01:15:c8:f8:c1:86:12:ff:d5:40:b2:d0:46:e0:
                    0a:70:ec:d3:a6:6c:62:dc:df:25:f3:5b:be:e8:32:
                    8d:17:69:ff:c7:d9:28:80:4a:3e:1e:c3:ee:cd:83:
                    c6:cf:56:80:3c:5d:40:4e:57:12:eb:41:45:48:89:
                    ff:dc:75:47:62:60:96:c0:79:40:1a:75:2b:28:81:
                    9f:6a:a5:ce:53:50:3d:56:1d:22:c4:b7:11:a7:13:
                    03:8b:e0:9e:6a:78:a2:b5:29:c3:9a:47:fe:88:1f:
                    bb:10:e1:05:25:8a:90:7e:23:9b:86:71:e9:aa:0c:
                    d0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:48:54:89:8B:D6:70:23:9D:A8:0D:6D:9A:7A:61:BE:DA:A0:27:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d7639702-8d2b-3a93-bd7c-deb44b22d104.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:a1:23:b9:d8:0f:4f:2f:33:e1:2b:ab:99:ab:5c:2f:aa:b3:
         b7:ba:af:81:37:9e:39:b4:fb:94:26:0d:48:99:66:9f:42:8b:
         6a:c3:8d:ef:0f:7a:06:ac:7c:c6:2e:1c:5a:6c:62:45:78:9b:
         30:eb:6a:61:e8:b8:9a:f0:71:ba:a5:48:d5:1a:7f:8d:02:67:
         3c:fa:44:96:8a:d6:83:5a:05:08:b9:0d:f2:09:96:f0:3f:2a:
         20:c2:ad:fa:e3:b3:0f:d4:1a:df:d5:cf:3d:58:e6:3c:61:a0:
         5c:54:8f:69:bf:4b:ac:67:e8:42:94:92:0b:c4:c7:e3:53:3e:
         26:c9:6a:70:97:4e:76:07:a1:0a:02:4f:9f:de:e2:d5:3d:1c:
         ff:7b:2a:0d:4d:12:72:65:ac:33:53:ae:c5:f2:fc:ff:5b:64:
         19:45:cd:6c:75:2c:a0:14:bd:f4:f8:48:02:17:0e:03:e1:98:
         90:db:6b:74:87:62:d6:e8:6b:bc:d0:23:e0:25:44:47:e5:e1:
         17:65:fb:da:74:77:e2:5c:83:f9:ee:7a:34:57:2c:e5:f1:e1:
         f1:0b:8f:1e:c9:15:87:bb:ec:f3:39:d3:51:39:01:6e:cd:ca:
         91:c0:8e:99:1b:41:9a:30:63:f2:ca:45:74:2f:58:3c:3b:80:
         e1:38:01:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:52:40 2026 by rpki-client