Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/1d757db0-7795-354f-be7f-30d664eb00ca.roa
File:                     1d757db0-7795-354f-be7f-30d664eb00ca.roa (raw, json)
Hash identifier:          lqNXNpm3LD3oOyYsRyGGYL630OIZGfadCoW+eTnCmQQ=
Subject key identifier:   5B:9E:47:E2:6D:5A:E7:38:80:5B:46:53:36:4A:71:E2:23:FB:7B:1D
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E147EFAC55EB29E9CBA0E73C0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/1d757db0-7795-354f-be7f-30d664eb00ca.roa
Signing time:             Sat 06 Jun 2026 09:00:32 +0000
ROA not before:           Sat 06 Jun 2026 09:00:32 +0000
ROA not after:            Fri 04 Sep 2026 09:00:32 +0000
asID:                     44559
IP address blocks:        172.252.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:14:7e:fa:c5:5e:b2:9e:9c:ba:0e:73:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun  6 09:00:32 2026 GMT
            Not After : Sep  4 09:00:32 2026 GMT
        Subject: CN=694371fb-e1e0-47e0-8b63-0b0efa331760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ef:0a:01:73:ab:78:88:d9:3c:fd:2b:df:33:
                    7d:eb:88:47:68:a0:25:a2:b2:e5:f0:1a:4e:43:f5:
                    de:d8:a0:de:ec:c8:e2:2f:40:3d:19:78:ca:8e:6f:
                    ca:8a:2e:ba:aa:65:91:ab:4a:9b:98:7a:e8:4a:12:
                    8f:70:24:01:46:27:eb:1b:99:24:22:e7:e5:d2:85:
                    85:24:eb:d0:8e:01:dd:19:82:7d:9f:70:96:95:51:
                    b6:fe:29:59:90:48:21:e9:06:54:ff:2e:33:05:55:
                    b8:41:3b:e9:a5:59:dd:2a:b8:e1:2d:75:ab:2e:88:
                    12:89:b9:23:d8:61:9d:f0:39:d2:e6:98:85:65:c4:
                    f2:83:3e:0c:7f:36:ee:ce:80:6b:8e:90:54:51:f8:
                    bb:7b:84:48:b9:e2:fa:80:c4:97:ca:3b:db:e5:b2:
                    8b:1f:35:83:1e:06:12:01:a0:4d:79:61:12:5d:fa:
                    7e:88:f3:22:c6:7c:51:e8:fb:d9:c6:88:29:20:60:
                    6b:8d:69:b0:16:a5:d4:7e:83:68:2e:13:f4:50:df:
                    73:00:10:3f:23:48:10:4a:71:26:2e:0a:8b:51:ec:
                    fd:5c:d4:c1:6a:77:60:0d:f0:d9:1a:2e:56:b1:1b:
                    df:61:d2:cb:98:2f:83:d3:4b:34:01:82:7e:e0:14:
                    22:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:9E:47:E2:6D:5A:E7:38:80:5B:46:53:36:4A:71:E2:23:FB:7B:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/1d757db0-7795-354f-be7f-30d664eb00ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:2d:52:7e:b8:28:6c:c9:c5:a2:c6:33:74:3e:64:fe:cd:76:
         b4:f3:15:04:ba:df:13:ef:10:07:50:5d:99:be:c9:81:01:08:
         8f:ca:12:26:32:12:e6:c9:f3:7b:ed:31:c7:cf:51:be:4d:2a:
         3c:33:3e:0d:97:81:62:ef:1b:68:19:7a:e0:bd:52:62:6b:2c:
         1a:13:67:f3:28:c5:56:12:12:81:16:15:32:3b:dc:53:85:eb:
         a5:31:fd:fe:ab:63:2e:c8:7e:3f:4b:48:9d:0a:46:31:8d:f2:
         38:da:d8:1e:32:ca:d7:8b:be:d2:ac:8e:48:a0:47:50:a9:7f:
         96:bf:f8:95:36:87:dc:26:05:24:10:ce:2a:53:78:44:d5:e0:
         48:cf:19:f3:a9:fb:b2:46:c6:e2:7f:4e:1a:16:ce:e2:87:a6:
         78:c8:d5:e8:f1:9b:0e:28:c1:29:21:80:af:4b:1e:81:97:b9:
         c7:20:11:19:30:7d:31:7e:36:39:f9:fd:97:76:49:fe:37:3b:
         53:8f:41:09:3e:04:1f:31:b5:5f:73:32:fb:a7:1d:42:82:07:
         da:8a:64:73:d5:71:d9:6e:7c:83:53:67:cd:50:6e:7e:9f:04:
         72:e6:7d:12:ca:c2:43:4a:7f:aa:12:73:5d:63:c2:0d:25:e7:
         db:35:9c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:14:53 2026 by rpki-client