Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/657f1ad7-5be3-3704-a419-dc1b28b09bf0.roa
File:                     657f1ad7-5be3-3704-a419-dc1b28b09bf0.roa (raw, json)
Hash identifier:          LqUqUMtOIgO9q1gxaD/y0QxlGliXr7sgeu/QEUkAKKE=
Subject key identifier:   77:ED:43:44:30:EA:00:2A:5C:52:6F:5F:D6:C2:30:07:40:04:36:E9
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584F4989371AC7DB69EE8E5C7A80
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/657f1ad7-5be3-3704-a419-dc1b28b09bf0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     212238
IP address blocks:        104.252.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:37:1a:c7:db:69:ee:8e:5c:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=90b7267d-e1cf-4f22-a968-883b5ec74b33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b5:c3:3a:16:c6:23:2d:64:c6:cc:b3:0e:b2:
                    05:e3:0e:f9:07:76:ba:26:23:f9:da:1e:4c:01:4f:
                    c9:1f:19:48:98:ad:bf:7c:c5:03:d0:58:70:bd:57:
                    ca:e3:19:0d:9e:6f:ba:75:38:be:ff:30:5d:50:92:
                    72:15:04:d5:a0:21:71:0e:4b:9c:36:3a:67:16:fb:
                    88:71:5c:78:39:36:96:97:94:24:0c:5d:2d:af:0f:
                    c8:5e:e7:3c:e5:59:3b:5b:cd:29:00:8f:48:49:52:
                    4d:86:06:a9:29:65:0a:1a:c6:54:35:eb:f1:35:7e:
                    66:16:e6:a2:cb:27:07:a6:16:3d:1d:76:f2:7c:79:
                    fe:6e:00:a8:53:69:ab:12:fa:b1:6b:78:fb:80:ad:
                    3b:36:70:a5:86:ad:94:db:a3:81:a0:04:6e:1d:54:
                    47:dc:15:a5:df:dc:6f:22:4b:8e:9a:d1:83:bd:b0:
                    88:ef:ea:4a:f7:5f:0c:e8:60:8b:d4:c7:9d:e1:c3:
                    2a:57:de:15:f9:72:19:d6:b7:81:51:02:27:58:ca:
                    4d:94:b2:71:e7:4f:e3:06:4d:7f:38:c5:1c:be:25:
                    a5:b2:bc:a9:b5:e7:c7:79:bf:c0:aa:25:a3:1a:92:
                    07:2d:75:63:de:7f:32:20:ac:77:d2:d6:fb:15:e8:
                    50:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:ED:43:44:30:EA:00:2A:5C:52:6F:5F:D6:C2:30:07:40:04:36:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/657f1ad7-5be3-3704-a419-dc1b28b09bf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:c6:92:34:0a:99:4d:32:e9:ef:64:2b:1f:f7:ed:26:10:a4:
         0d:b1:7f:52:28:ae:17:43:d9:af:7e:29:b6:e2:b7:45:e6:a8:
         09:2f:ce:18:1b:5c:a8:01:75:a4:1f:67:0e:88:4e:b7:eb:12:
         0d:3b:a1:71:c9:8a:7f:13:9e:63:09:e4:91:c3:c7:2f:f9:27:
         c6:42:24:05:44:27:1b:4c:e7:81:af:3c:2b:fe:0d:8e:2d:99:
         e5:2f:68:7f:b5:b5:d7:e8:f6:1f:b0:92:a4:6a:0d:95:2c:13:
         9e:68:fa:06:ca:e1:81:8f:50:a0:c3:8f:54:9e:97:8d:72:05:
         07:0f:3f:a2:ec:d5:47:69:c7:33:91:e3:12:09:2a:00:bb:05:
         37:eb:b8:11:21:ae:ce:52:2f:28:0e:31:7c:bf:19:76:e0:6b:
         45:98:26:6d:ef:9a:9e:34:19:44:43:78:c1:d1:f3:c3:e3:0e:
         cb:72:45:ab:5f:51:c0:4a:84:4e:a2:46:9a:ea:b2:36:d2:47:
         f0:c2:2b:ff:d5:63:1a:4d:35:d4:0d:f8:cc:a8:56:2e:e7:83:
         a8:79:27:9a:27:1b:45:3e:a7:e5:14:fa:77:41:57:5a:57:11:
         46:19:a0:24:0c:2d:77:4a:b6:f6:93:44:c0:7e:b0:68:80:39:
         12:a2:2f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:34:19 2026 by rpki-client