Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/97340030-1b9e-3f67-af1f-b6a7d52c65d2.roa
File:                     97340030-1b9e-3f67-af1f-b6a7d52c65d2.roa (raw, json)
Hash identifier:          2NAkTBqaQFRVas6cV/p1q8iRp78Kj5dqUmBI9GQ/gpQ=
Subject key identifier:   A1:FE:95:B9:0C:B6:C6:0E:00:E9:69:4F:1B:94:EC:6C:75:F6:38:AB
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E51EA000CBE9B67AAC6588900
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/97340030-1b9e-3f67-af1f-b6a7d52c65d2.roa
Signing time:             Sun 28 Jun 2026 09:00:11 +0000
ROA not before:           Sun 28 Jun 2026 09:00:11 +0000
ROA not after:            Sat 26 Sep 2026 09:00:11 +0000
asID:                     211273
IP address blocks:        104.252.53.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:51:ea:00:0c:be:9b:67:aa:c6:58:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 28 09:00:11 2026 GMT
            Not After : Sep 26 09:00:11 2026 GMT
        Subject: CN=53e57aaf-01e2-4ece-86bb-8fd4d2d32ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c6:47:d6:bf:f1:1f:fa:0d:a3:4e:77:8e:79:
                    28:78:e0:27:80:23:38:77:cb:4f:91:9a:1c:4a:0a:
                    0d:d5:72:f4:74:91:41:8c:cb:2b:d6:05:4f:03:aa:
                    b3:e6:58:cf:0a:3e:24:18:16:89:4e:25:4f:d4:3d:
                    d7:49:7f:42:87:e0:68:48:4a:d9:54:34:4d:53:1f:
                    e3:e5:20:5c:b5:24:37:af:cb:83:a1:74:b5:f4:f4:
                    73:7c:71:79:9b:3f:ff:d0:f7:aa:d6:4a:f4:50:4c:
                    32:25:6c:ea:1e:42:91:7c:e1:f3:b2:0b:88:71:58:
                    06:46:e6:c6:db:b9:9f:d9:1a:38:ee:e9:b9:b3:56:
                    b7:7d:76:cd:24:4c:b4:46:33:51:39:6b:47:6d:7f:
                    c0:07:70:a5:2b:89:ca:a6:5b:eb:8c:64:c1:63:b2:
                    e6:d2:dd:93:69:8d:35:ac:cc:d6:60:d6:5a:6c:49:
                    93:a3:89:86:54:63:c4:28:16:9f:03:08:29:42:fd:
                    c2:93:fd:c6:31:d8:93:78:5b:ff:5b:50:62:6e:c3:
                    ca:59:c7:70:88:da:3c:14:50:63:bc:55:fa:b8:90:
                    61:e0:77:65:5c:6d:2d:8b:f0:89:1a:02:80:e5:74:
                    5e:6e:43:79:17:b2:3c:69:10:11:bc:ef:36:72:d3:
                    0e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:FE:95:B9:0C:B6:C6:0E:00:E9:69:4F:1B:94:EC:6C:75:F6:38:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/97340030-1b9e-3f67-af1f-b6a7d52c65d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:92:6f:f7:9d:4a:13:90:6c:6d:9b:6d:85:d7:a1:d8:59:ed:
         20:7b:f6:93:7f:b2:51:7c:02:5f:36:44:30:40:df:ff:8b:fc:
         3d:9f:6d:a6:73:a9:0d:e2:07:ca:30:16:df:76:93:a2:ba:2d:
         9f:62:df:2b:4a:5a:95:5e:75:af:73:77:9c:27:20:de:37:f8:
         88:99:26:e2:8e:55:96:ce:5c:1d:db:25:bb:f9:ae:ef:ea:47:
         bc:73:a1:de:4d:81:ea:bf:d9:d2:d0:fd:b9:41:9b:75:14:78:
         fd:07:1a:2c:c0:33:52:e8:49:53:ab:bf:19:0d:d0:a0:e3:f0:
         2c:69:0d:7f:d3:f7:a4:aa:18:df:83:28:c8:0f:a9:c5:11:41:
         f1:3c:9f:f7:d2:d6:7d:26:38:f2:c7:ac:cd:72:2f:44:a2:a9:
         21:a2:c6:e0:ca:46:54:b0:ff:e2:05:fa:59:8a:16:00:5d:45:
         a0:63:5e:47:a5:1d:f3:91:c2:1d:ff:02:22:0e:e4:dc:6c:e8:
         89:55:f2:40:30:89:50:98:30:fa:96:d0:bb:75:fb:bf:90:d7:
         f3:ad:8c:9c:3f:9a:11:8e:1b:e2:32:4b:36:10:34:72:37:63:
         eb:89:32:b6:c8:5d:b2:eb:ce:38:db:da:89:9d:14:b7:31:12:
         26:3d:4c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:48:22 2026 by rpki-client