Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/04e805e0-0ae8-388e-8233-140fed97d629.roa
File:                     04e805e0-0ae8-388e-8233-140fed97d629.roa (raw, json)
Hash identifier:          2pu7P8/FimA+TyPX64ga6Yts6X08APAVg4b7fg71qn8=
Subject key identifier:   D6:13:BF:AD:F3:2B:D3:AC:B2:6C:A2:D1:C6:71:0C:EE:FA:62:9E:1C
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CEC7C5612E0E9F6AA9480
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/04e805e0-0ae8-388e-8233-140fed97d629.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     18779
IP address blocks:        104.252.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:ec:7c:56:12:e0:e9:f6:aa:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=9be18ccc-7fb4-4651-840b-5512b3cae3ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6d:fc:44:b6:81:72:96:80:fd:5e:8e:81:9c:
                    17:79:15:34:5b:54:76:42:df:22:bc:ae:18:6f:e7:
                    97:ef:2e:00:1a:c7:27:a3:20:2e:d6:85:05:87:59:
                    48:3c:d4:c6:bb:d7:fe:e1:16:30:e7:45:f7:d2:1a:
                    54:d4:c7:13:a8:cf:5e:55:2b:c8:e5:3c:65:01:a8:
                    03:e0:51:23:e1:5b:21:2f:39:6d:90:3c:5e:46:96:
                    71:ee:2f:4d:1e:36:d3:2e:3b:d7:36:d0:1f:4e:65:
                    a0:08:09:2c:aa:03:88:71:fd:61:c1:2c:29:f2:c7:
                    82:c5:52:f2:b0:60:f8:e5:74:79:61:83:ad:1e:f4:
                    3f:b0:90:78:71:00:dc:37:fe:80:44:3e:85:e2:14:
                    20:97:e9:6b:1d:62:b1:eb:88:60:4c:c5:63:25:f8:
                    a1:6d:73:ac:bc:1c:e0:49:83:e8:58:fc:38:f3:5f:
                    f4:87:c3:cc:c7:c4:6c:f3:18:db:d4:55:99:60:a0:
                    09:03:85:5d:25:d3:d7:d9:77:99:5f:df:a2:3e:0a:
                    5c:2f:45:ef:67:59:ec:e9:66:4b:26:90:c8:77:38:
                    e3:b5:fd:46:4a:d9:5b:e6:5e:c4:7a:37:ec:47:b0:
                    88:22:b4:e6:cf:c9:cf:e1:b4:33:e2:e2:1e:58:fe:
                    e2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:13:BF:AD:F3:2B:D3:AC:B2:6C:A2:D1:C6:71:0C:EE:FA:62:9E:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/04e805e0-0ae8-388e-8233-140fed97d629.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:bd:11:80:ab:72:2e:cb:c7:2a:c4:86:29:4f:bf:0a:ea:e7:
         92:71:8b:9d:e4:a3:bd:66:a3:1d:ed:6c:3b:f6:9a:45:9c:2c:
         d3:dc:59:6b:76:15:b0:b4:e3:36:73:ee:c6:53:98:42:94:5f:
         51:d9:e8:83:8a:ea:b1:83:0e:e6:bd:21:d6:bd:9e:d1:81:34:
         31:1f:87:fb:ca:91:dc:14:8b:3b:c2:90:b1:01:2c:91:63:1c:
         79:ec:f0:90:14:90:cc:60:9e:a2:ad:ca:cf:96:a0:f9:68:a9:
         63:87:3f:b5:0f:14:4e:ee:8e:d5:79:0c:07:22:a2:ea:97:51:
         76:58:23:8e:92:f7:e6:8f:26:4b:98:27:7d:58:57:14:38:bf:
         2f:97:af:90:28:fd:2c:69:63:99:30:8d:0d:55:97:2d:f4:13:
         a0:9e:d6:bd:69:25:57:03:75:b0:a2:f2:87:c2:b9:66:99:dd:
         48:90:d9:a7:a4:14:fc:70:77:b7:4a:71:79:08:77:b2:05:87:
         6f:c0:f9:20:1b:ee:bf:ae:9e:b5:a0:fa:a3:9c:71:70:b7:3d:
         2e:24:02:b8:51:4e:13:0a:e1:34:a8:38:4c:d4:2c:cf:67:94:
         02:28:e7:7e:fb:0c:3d:08:a0:f7:4b:d9:1b:81:55:e6:5a:17:
         4f:21:0a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 11:00:53 2026 by rpki-client