Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/30188b52-5645-38eb-8061-cba216fbd594.roa
File:                     30188b52-5645-38eb-8061-cba216fbd594.roa (raw, json)
Hash identifier:          QcGRYcQ1u4uhjPkma4MUjt//G71qICU5/4L+f+fEJeY=
Subject key identifier:   1D:31:F8:8C:BB:47:3E:66:44:7B:67:3D:01:D9:B8:6C:21:8E:4E:14
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584F4974FAFB376335E28B8F40C0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/30188b52-5645-38eb-8061-cba216fbd594.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     212238
IP address blocks:        104.252.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:fa:fb:37:63:35:e2:8b:8f:40:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6e48692d-4fac-4269-b714-46f25d6fee8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:70:70:50:83:28:6d:81:82:ae:97:e0:93:54:
                    f9:4b:e1:4b:55:2a:81:52:67:56:b6:ac:84:87:a4:
                    f8:7d:f4:1b:45:44:8f:5c:c1:dd:10:c7:e0:83:a5:
                    e7:af:b1:f2:29:68:38:47:65:57:13:9b:bb:37:ba:
                    fd:22:4b:5e:db:10:75:ae:cb:0e:95:e5:a8:91:38:
                    83:60:88:8a:29:30:5d:2f:e7:47:9d:b3:dd:e1:ff:
                    f0:80:37:e8:81:f0:d3:9b:2b:9a:29:96:8c:da:b5:
                    61:95:3e:bb:3b:1c:c7:6f:85:5f:69:a9:52:50:69:
                    d8:98:c7:df:d1:fd:bc:ff:15:8c:95:05:7f:60:69:
                    ef:b4:fe:82:f2:71:aa:9d:ba:7b:77:ab:75:27:4e:
                    93:42:06:55:db:60:73:6c:69:8e:26:cb:6d:41:2c:
                    71:c1:d4:a1:d4:0b:bd:fe:fc:61:ac:36:3b:74:31:
                    95:93:f5:fa:c0:cf:5a:75:db:bf:64:03:d9:22:a7:
                    3d:bb:d4:ff:98:b6:2f:fb:1d:e5:cd:e5:c9:c4:78:
                    35:43:54:d9:a2:f5:67:1b:08:b9:13:0b:35:fd:79:
                    a7:00:97:0d:c1:09:88:ac:aa:10:12:47:54:36:fa:
                    26:43:ce:81:d0:5c:9c:56:d8:fd:5d:fa:41:3b:aa:
                    8b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:31:F8:8C:BB:47:3E:66:44:7B:67:3D:01:D9:B8:6C:21:8E:4E:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/30188b52-5645-38eb-8061-cba216fbd594.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:03:68:37:8b:fb:7e:f5:75:0c:70:39:48:8f:11:4d:ca:e4:
         ac:0b:bf:bd:48:6e:19:c8:91:65:50:ca:fc:c3:a9:ee:9e:9b:
         93:56:8e:58:55:a6:c9:ec:04:53:5a:49:95:3a:22:d8:3e:a9:
         47:ac:7f:bb:b0:aa:4e:e5:6e:2e:24:17:66:33:41:92:1a:18:
         e2:d9:02:c4:b8:f4:53:9b:02:84:13:57:e0:d4:15:29:94:fc:
         4b:64:cf:7d:49:fe:34:95:e2:8e:74:8f:b7:43:af:74:98:d2:
         af:bf:1e:02:65:9a:17:e7:16:ed:54:5b:68:3c:ef:8a:a0:25:
         9b:7a:f0:96:a9:8a:93:7b:71:a9:ad:98:4e:46:b0:62:2e:ef:
         36:e2:5e:20:14:52:3a:f3:45:38:ec:44:8d:79:17:8e:67:2e:
         0a:d0:df:4a:e6:96:92:f0:5a:7e:50:b9:bc:4e:3e:59:e7:a1:
         48:29:fa:88:1b:e2:66:93:e3:98:f6:61:f9:5b:cd:5c:e5:32:
         b2:82:13:a8:88:51:75:41:06:be:6a:ac:87:92:6d:fa:67:cb:
         ce:4b:71:74:06:c7:35:73:ea:08:44:2f:c3:d7:52:fe:d3:36:
         db:36:31:77:23:c9:e0:9b:bc:03:3c:e6:37:b9:4e:5e:88:08:
         7f:e9:f5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:48:37 2026 by rpki-client