Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d4bb212f-ab1e-3c1f-b1b6-c547b1d491f0.roa
File:                     d4bb212f-ab1e-3c1f-b1b6-c547b1d491f0.roa (raw, json)
Hash identifier:          Cx86BXphf6pSA+mo3RURjXnRw07LTjVkYI+ouuGGhBs=
Subject key identifier:   42:86:80:3A:BD:7D:36:AE:95:DA:94:18:DA:E4:AC:27:41:DE:14:6B
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E78FF73A5C7CC6F99ADB0E300
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d4bb212f-ab1e-3c1f-b1b6-c547b1d491f0.roa
Signing time:             Sun 12 Jul 2026 09:00:11 +0000
ROA not before:           Sun 12 Jul 2026 09:00:11 +0000
ROA not after:            Sat 10 Oct 2026 09:00:11 +0000
asID:                     400536
IP address blocks:        104.253.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:78:ff:73:a5:c7:cc:6f:99:ad:b0:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jul 12 09:00:11 2026 GMT
            Not After : Oct 10 09:00:11 2026 GMT
        Subject: CN=b85aacc0-42f3-4100-abd5-27f86151c472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8d:54:ba:20:82:fc:77:89:93:fd:65:81:ef:
                    86:12:9b:a6:08:34:05:0c:c1:c5:73:c2:24:ec:9e:
                    f2:27:bc:1f:2a:73:39:48:bd:5a:a8:97:85:5c:4c:
                    5a:db:60:f6:59:ce:68:fe:8b:18:0e:d9:d6:e1:c5:
                    c9:a9:69:b6:ca:54:b6:9c:e3:83:d4:b4:29:88:26:
                    d3:cb:49:69:95:a1:ad:8d:62:03:52:27:78:03:97:
                    fd:f0:1d:17:40:7c:3e:1f:54:46:cc:49:fc:12:70:
                    b4:b7:45:9b:e1:8a:72:aa:08:c5:5b:ca:b9:54:d9:
                    88:01:7a:b9:a5:54:b5:82:82:ff:b3:8b:4e:37:c2:
                    2d:2b:00:9b:06:99:20:0a:47:c7:35:14:d2:63:ae:
                    19:e3:7d:21:32:9d:8c:6a:d5:09:5e:b9:2a:3f:fa:
                    d3:4c:34:c7:a1:cc:eb:0e:fb:68:ba:76:45:d0:3d:
                    1d:23:4c:1e:b7:3d:8e:af:a6:a2:cb:0c:c7:f8:c1:
                    f4:5c:7b:15:0b:e0:98:85:2f:18:ba:6a:d3:13:22:
                    af:82:bb:5d:1b:1a:83:93:e7:43:27:a5:5f:09:cb:
                    00:a2:d3:54:e8:d1:b8:f7:44:b5:3b:a0:6b:ef:19:
                    83:d2:ad:4b:82:5d:d5:a3:ec:d6:3e:66:04:2a:af:
                    67:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:86:80:3A:BD:7D:36:AE:95:DA:94:18:DA:E4:AC:27:41:DE:14:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d4bb212f-ab1e-3c1f-b1b6-c547b1d491f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:9f:9b:b0:23:d5:79:1c:cc:30:b2:36:3e:9c:be:49:a6:5e:
         cd:f7:39:bc:8e:07:0b:00:f8:fd:5a:e6:ab:66:14:94:fb:31:
         0e:fb:4b:b7:33:3e:fa:05:11:cc:cd:d9:96:4b:9a:b7:b3:b4:
         d7:73:2f:0d:10:e0:5b:5e:83:4a:ee:c7:00:e9:1d:0f:f4:73:
         2f:30:41:17:ca:69:54:46:dd:05:c8:61:89:77:85:ad:a6:38:
         6e:8f:d6:dc:00:3f:31:ba:f1:cb:13:ff:0a:0c:6d:07:93:19:
         4b:4e:2c:cc:70:0c:58:48:05:50:b2:05:bd:b6:05:ef:c8:d6:
         d5:0c:ad:65:a1:5c:37:9c:01:d0:66:d4:fe:5a:75:dc:9b:9c:
         bb:ef:a2:62:43:b6:2c:a9:5d:1e:d7:a5:f3:69:cc:9c:be:bd:
         14:b6:21:26:d4:5c:7d:ed:e8:5a:57:2e:dc:ab:10:59:6a:89:
         67:3e:db:f3:ec:c2:50:6f:f2:01:0d:10:a7:a1:14:9b:7c:89:
         ba:4e:5a:45:39:96:ee:37:de:72:94:10:6b:62:e0:ac:a9:9c:
         34:5f:be:e1:f9:64:fc:b7:43:a7:c5:a8:dc:17:2c:ab:e3:d8:
         8c:fb:e4:a0:51:78:ab:bc:e3:36:5b:96:35:65:dd:b8:90:52:
         b3:d0:9a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:04:45 2026 by rpki-client