Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d4bb212f-ab1e-3c1f-b1b6-c547b1d491f0.roa
File:                     d4bb212f-ab1e-3c1f-b1b6-c547b1d491f0.roa (raw, json)
Hash identifier:          1cJ930VQCE6Aj+vRl7nNscngVIT/w88gSoCp4OuzYeA=
Subject key identifier:   27:72:8D:6F:3E:B4:60:36:49:A6:2F:A3:77:B7:0D:B8:F9:CE:A1:EA
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D9863967541E69B48FDD97900
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d4bb212f-ab1e-3c1f-b1b6-c547b1d491f0.roa
Signing time:             Wed 22 Apr 2026 22:05:06 +0000
ROA not before:           Wed 22 Apr 2026 22:05:06 +0000
ROA not after:            Tue 21 Jul 2026 22:05:06 +0000
asID:                     400536
IP address blocks:        104.253.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:98:63:96:75:41:e6:9b:48:fd:d9:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr 22 22:05:06 2026 GMT
            Not After : Jul 21 22:05:06 2026 GMT
        Subject: CN=ff3ba14b-be47-4570-ab01-4462ac211ca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:de:66:7e:9d:45:05:e0:71:5e:53:55:6e:39:
                    3c:d1:df:58:a3:79:43:f7:f6:28:3f:66:f4:6d:85:
                    8b:c5:16:39:db:52:f0:ae:4e:cd:f8:22:f3:75:02:
                    4f:c3:95:b7:5c:de:19:d3:e0:7b:e8:2e:48:7c:bb:
                    d4:19:fe:73:8d:85:7a:2b:89:8d:9b:f7:73:82:e0:
                    42:46:73:59:76:c7:34:91:51:e5:0b:16:00:be:9b:
                    52:81:aa:a1:5b:0b:23:ab:2f:ed:3d:70:4e:75:ca:
                    ca:40:50:50:58:11:64:68:da:6b:9d:82:84:a3:bd:
                    3d:51:0c:0f:18:01:07:86:04:f3:4a:0f:b7:24:54:
                    b7:17:8e:31:08:ec:4f:49:c1:e3:6c:57:1e:5b:a6:
                    51:eb:c7:24:c8:94:56:e4:39:0e:fa:24:ab:62:74:
                    4a:83:b5:bb:6c:22:97:6c:8c:f5:d5:fe:e1:ef:9a:
                    29:8d:8d:ef:5e:99:f5:05:86:28:99:e2:dd:c6:9c:
                    36:68:0c:03:03:16:ea:b1:71:c9:52:7d:2f:f5:67:
                    ae:6d:e6:4f:e5:1a:a7:ab:bb:20:f9:ab:c9:8b:5a:
                    9f:c2:24:e9:c3:97:ef:6c:89:22:ba:df:d0:b7:43:
                    d9:5b:2c:3e:c0:32:df:34:ee:79:1c:ba:f3:0c:6e:
                    1b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:72:8D:6F:3E:B4:60:36:49:A6:2F:A3:77:B7:0D:B8:F9:CE:A1:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d4bb212f-ab1e-3c1f-b1b6-c547b1d491f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:2a:b6:ae:80:92:85:f2:b2:a3:55:72:90:b8:1d:12:92:e5:
         91:94:f0:d7:e3:4c:10:bb:61:e3:9d:51:f4:1d:88:e8:53:81:
         f9:d2:eb:da:23:29:1f:0f:56:e0:24:da:8f:34:bc:66:45:b3:
         22:f5:af:fe:a7:a3:d8:b5:58:08:1f:85:96:7c:c9:e3:eb:53:
         54:f6:29:a0:61:60:84:06:2c:36:80:83:6a:9a:08:a5:d6:15:
         cd:6c:52:c0:90:5f:43:59:5c:b2:be:5c:0d:2f:68:98:44:37:
         d4:4a:f3:e7:26:55:2c:28:79:2f:68:93:72:93:cf:15:78:77:
         7b:af:d8:50:4a:18:e3:01:7e:f9:1b:bb:2c:64:36:09:a0:f1:
         5b:ef:2a:f5:bd:ef:2f:8b:a5:80:22:b0:66:71:b8:02:31:31:
         9f:6e:55:e3:22:b9:b4:ce:f6:ac:c3:73:01:38:c7:25:c4:9f:
         c8:96:62:03:87:b4:92:66:d4:2b:80:82:94:3a:07:56:0a:8c:
         1c:c0:cc:5f:f2:fc:54:33:ad:ad:b7:e3:e4:d7:ce:74:f8:be:
         eb:d4:91:8e:28:41:37:49:9f:43:c3:4e:fd:35:f6:e6:cc:38:
         cd:3f:54:4d:9a:75:d3:00:a9:1a:59:40:eb:92:03:dd:d7:70:
         55:85:50:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YY5Z1QeabSP3ZeQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDQyMjIyMDUwNloXDTI2MDcyMTIyMDUwNlowLzEtMCsGA1UEAxMk
ZmYzYmExNGItYmU0Ny00NTcwLWFiMDEtNDQ2MmFjMjExY2E5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn95mfp1FBeBxXlNVbjk80d9Yo3lD9/YoP2b0
bYWLxRY521Lwrk7N+CLzdQJPw5W3XN4Z0+B76C5IfLvUGf5zjYV6K4mNm/dzguBC
RnNZdsc0kVHlCxYAvptSgaqhWwsjqy/tPXBOdcrKQFBQWBFkaNprnYKEo709UQwP
GAEHhgTzSg+3JFS3F44xCOxPScHjbFceW6ZR68ckyJRW5DkO+iSrYnRKg7W7bCKX
bIz11f7h75opjY3vXpn1BYYomeLdxpw2aAwDAxbqsXHJUn0v9WeubeZP5Rqnq7sg
+avJi1qfwiTpw5fvbIkiut/Qt0PZWyw+wDLfNO55HLrzDG4bNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCdyjW8+tGA2SaYvo3e3Dbj5zqHqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvZDRiYjIxMmYtYWIxZS0z
YzFmLWIxYjYtYzU0N2IxZDQ5MWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP3DMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACEqtq6AkoXysqNVcpC4HRKS5ZGU8NfjTBC7YeOdUfQdiOhTgfnS69oj
KR8PVuAk2o80vGZFsyL1r/6no9i1WAgfhZZ8yePrU1T2KaBhYIQGLDaAg2qaCKXW
Fc1sUsCQX0NZXLK+XA0vaJhEN9RK8+cmVSwoeS9ok3KTzxV4d3uv2FBKGOMBfvkb
uyxkNgmg8VvvKvW97y+LpYAisGZxuAIxMZ9uVeMiubTO9qzDcwE4xyXEn8iWYgOH
tJJm1CuAgpQ6B1YKjBzAzF/y/FQzra234+TXznT4vuvUkY4oQTdJn0PDTv019ubM
OM0/VE2addMAqRpZQOuSA93XcFWFUM8=
-----END CERTIFICATE-----
Generated at Wed May 13 07:39:11 2026 by rpki-client