Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/94bb68d6-758b-37b5-b069-e9d252b45b58.roa
File:                     94bb68d6-758b-37b5-b069-e9d252b45b58.roa (raw, json)
Hash identifier:          M1qQYjHgsHkaKSwhySgDgP2UsTXFpCdOYVSib3vwuOs=
Subject key identifier:   7C:E5:04:34:BA:1A:57:3B:92:63:A1:E3:C5:1A:6D:FF:43:86:4C:76
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E6C778AAE2ECF53B121567000
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/94bb68d6-758b-37b5-b069-e9d252b45b58.roa
Signing time:             Tue 07 Jul 2026 21:16:41 +0000
ROA not before:           Tue 07 Jul 2026 21:16:41 +0000
ROA not after:            Mon 05 Oct 2026 21:16:41 +0000
asID:                     29802
IP address blocks:        172.252.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:77:8a:ae:2e:cf:53:b1:21:56:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jul  7 21:16:41 2026 GMT
            Not After : Oct  5 21:16:41 2026 GMT
        Subject: CN=f23afdb6-06bd-467d-9800-4a78fc364160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:2d:ab:d6:2c:5c:c1:37:35:f0:1c:16:cc:80:
                    67:56:09:6a:47:a4:f4:2d:35:77:11:d9:75:d8:17:
                    67:03:7f:a1:a7:bc:33:bb:5d:ba:11:18:38:6f:a1:
                    0f:e3:c4:e6:59:70:ad:b7:d9:eb:36:7b:39:b5:fe:
                    67:89:fd:0b:e6:ca:e8:9a:a2:8e:49:60:80:e2:18:
                    42:2d:bf:ad:d0:f6:57:30:89:6f:5a:98:fb:ca:f5:
                    80:69:15:76:7c:dc:14:01:20:ec:8a:ab:dc:6c:58:
                    e9:96:5f:5e:75:4a:8d:b2:49:7a:f0:af:78:ed:de:
                    a1:a2:7b:e7:bf:3e:41:cc:10:e3:94:be:93:c9:6c:
                    d7:76:5a:43:a3:b4:6d:a8:fd:ba:0c:d7:b5:01:ed:
                    82:24:75:59:62:c8:a7:9f:c5:bf:ca:ff:6a:8b:4c:
                    fc:c2:96:d0:5d:0b:43:a5:7c:29:40:0b:e5:10:00:
                    ba:eb:cd:c7:39:45:39:4f:d1:12:5d:b2:33:2c:bf:
                    f0:0c:7d:44:43:ee:ec:68:9a:8b:dd:b1:5a:13:bb:
                    83:1a:6d:3b:02:d4:11:44:ce:69:52:4b:88:42:1f:
                    35:72:78:a2:bb:26:48:1b:8f:10:80:da:8e:53:d9:
                    2c:74:36:73:b8:32:32:1d:10:33:cb:68:ec:fe:6b:
                    9a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E5:04:34:BA:1A:57:3B:92:63:A1:E3:C5:1A:6D:FF:43:86:4C:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/94bb68d6-758b-37b5-b069-e9d252b45b58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:5f:f0:ad:83:ef:79:23:53:93:f8:8c:ee:c1:78:25:dd:1d:
         71:5b:ca:d7:f3:c8:f0:25:63:15:b9:86:54:b2:ef:3a:52:08:
         0d:43:94:36:4b:3a:50:fd:94:bc:74:f3:d3:9f:54:c2:c6:b3:
         27:39:cc:4f:57:b8:42:14:51:37:74:90:92:77:53:7f:ed:a5:
         d2:c8:94:71:b0:05:e7:fe:b0:37:e7:58:f2:10:01:10:69:f4:
         8b:11:e1:18:c6:6f:3f:f9:c2:1a:a8:1a:9c:0c:4e:20:ba:bc:
         1d:49:67:22:e7:ff:1f:2e:2e:c6:9a:33:4d:bf:f2:e7:08:71:
         1a:ff:66:44:e6:f0:e2:63:a8:eb:80:28:48:f4:1f:8b:8b:4e:
         27:54:1e:b3:3c:14:34:78:58:bd:e1:9a:1b:c3:f9:ea:d3:6c:
         7f:2b:48:c0:2d:60:25:8e:93:cc:43:c7:8e:8f:f8:62:62:07:
         8c:63:1d:33:89:57:38:17:64:b0:c8:da:6c:8c:d2:5b:ce:27:
         cd:cb:0c:cd:58:c4:22:ef:ea:95:9a:0d:2c:21:35:cd:09:00:
         35:0d:37:22:49:b2:12:f3:b2:88:b7:75:28:d6:90:a2:0e:71:
         89:13:9e:20:94:c6:03:5c:98:3b:7e:b0:c6:f7:b1:67:40:f2:
         77:f9:75:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:25:17 2026 by rpki-client