Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/da44fc55-a6d7-3377-b66c-1bd508a77be9.roa
File:                     da44fc55-a6d7-3377-b66c-1bd508a77be9.roa (raw, json)
Hash identifier:          zg6c0LfS6bTO/neWwqVWVZQxYk/Y9S9Xj3XEcLUGjuA=
Subject key identifier:   7F:B2:B1:A3:35:19:40:06:E9:91:8C:2B:6E:73:F7:01:E2:C0:A3:E9
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CC846687D4517AE562CE0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/da44fc55-a6d7-3377-b66c-1bd508a77be9.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     18779
IP address blocks:        104.253.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:c8:46:68:7d:45:17:ae:56:2c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=65c2c113-4b37-463f-885b-17e9d40d2dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:16:03:b3:0b:58:e7:60:db:92:d3:c9:32:f9:
                    dd:a8:ee:40:2b:6c:0d:69:8d:60:63:1d:b2:ee:0e:
                    9e:be:b9:de:3b:18:25:d0:28:d1:24:7c:65:02:32:
                    a7:7a:ec:4d:5c:d6:65:4a:ed:03:0d:e3:ee:1e:7d:
                    d8:69:48:3c:4f:6c:a9:36:23:26:8a:60:e0:89:be:
                    a9:fb:76:f0:fd:21:21:36:c1:66:f3:8b:87:cd:fe:
                    95:40:01:a7:bb:ed:cd:00:a9:56:a9:ff:ab:7a:64:
                    2f:d0:8e:2b:9d:4a:56:5f:9b:5b:44:20:19:a1:02:
                    6c:ad:0e:30:4f:1a:f5:f5:67:68:3c:ea:80:ef:30:
                    44:3c:49:3b:f7:fb:50:12:b8:62:50:56:cd:57:14:
                    42:7d:cf:fa:fd:5f:7a:b1:03:7e:67:13:ba:3c:28:
                    b9:0d:ac:53:94:82:e1:01:38:7e:4d:79:bb:01:17:
                    aa:c0:bc:f5:79:54:92:30:2b:f7:84:54:a4:e6:25:
                    2c:1c:4c:a6:81:2a:c7:10:03:09:30:2b:7d:33:fa:
                    e5:b4:f7:d8:ab:ba:ae:8e:dd:76:a0:6f:c4:55:a2:
                    85:2c:f0:d8:c8:7b:14:37:4a:76:c3:e5:36:27:90:
                    8f:8d:ef:ee:cb:76:6f:5d:17:3c:41:3f:7f:7b:56:
                    34:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B2:B1:A3:35:19:40:06:E9:91:8C:2B:6E:73:F7:01:E2:C0:A3:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/da44fc55-a6d7-3377-b66c-1bd508a77be9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:0a:53:5e:16:65:e7:db:15:4a:88:e2:2d:2e:90:11:18:47:
         fc:77:3a:2f:96:ff:d9:52:25:56:29:90:10:b8:76:c5:37:7f:
         e2:4d:f5:c2:60:41:46:ac:5f:39:da:7f:83:44:f9:44:79:1e:
         28:27:dc:29:68:81:40:41:e9:35:fb:c5:5c:4a:6f:ae:b2:78:
         1c:37:56:aa:50:e1:f5:bd:61:08:10:02:44:df:64:69:3c:b5:
         d3:d1:2b:bd:2c:a3:57:67:1b:5a:02:dc:d1:e4:d3:80:90:5a:
         4b:f0:7c:cf:47:f2:47:69:69:89:76:0a:28:e9:aa:43:e5:ab:
         9b:98:3d:6f:fe:72:ed:be:a0:ec:3d:e3:ce:10:ed:0b:21:67:
         99:cd:28:d5:3c:36:dd:73:94:be:c7:5a:a2:12:3a:b3:41:5c:
         82:6f:86:27:51:f7:5a:88:62:e3:83:97:13:48:ed:bf:98:26:
         c0:42:95:4d:97:c5:84:50:b2:09:e9:8b:f9:00:73:61:d8:d8:
         0f:63:7b:4b:87:ee:03:35:04:51:1d:34:a5:87:23:39:f3:0c:
         ab:56:5f:ce:54:00:1b:d7:76:9a:13:c6:04:5f:6a:ec:1d:6b:
         0b:c3:a9:83:ed:b7:6c:78:f8:38:4b:f6:f7:ce:b1:b4:a3:bb:
         f1:7a:25:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:48:00 2026 by rpki-client