Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/4aa4778d-d22a-3dc4-93d5-095df029a273.roa
File:                     4aa4778d-d22a-3dc4-93d5-095df029a273.roa (raw, json)
Hash identifier:          ZpRtyhbrfGoDofOU+aVh1r63UUK8JGQNtpqcRBT4wYo=
Subject key identifier:   C4:E9:72:EA:86:FF:B3:03:36:B5:8D:32:65:EB:D0:E0:AF:E3:90:5A
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E0CBEC42FFC4CA3306176C780
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/4aa4778d-d22a-3dc4-93d5-095df029a273.roa
Signing time:             Wed 03 Jun 2026 14:22:35 +0000
ROA not before:           Wed 03 Jun 2026 14:22:35 +0000
ROA not after:            Tue 01 Sep 2026 14:22:35 +0000
asID:                     3561
IP address blocks:        104.253.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0c:be:c4:2f:fc:4c:a3:30:61:76:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun  3 14:22:35 2026 GMT
            Not After : Sep  1 14:22:35 2026 GMT
        Subject: CN=f61210b3-a883-4dc6-8f49-afd3b6205929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:93:4b:3a:b1:63:09:64:67:67:c4:b8:53:11:
                    d3:a9:89:c8:93:6d:f6:b4:60:e6:f7:66:04:99:f5:
                    d9:f5:90:61:4b:b9:81:36:7c:73:38:c1:11:38:32:
                    6b:0f:c2:4a:f4:be:f9:39:ec:15:bd:41:48:79:f6:
                    eb:39:5e:b0:82:c7:74:16:1d:2c:35:9e:95:e2:2a:
                    83:21:17:b6:ca:14:d6:ff:bb:fc:4f:00:e0:35:8e:
                    01:67:ba:bf:3d:f0:69:17:da:d0:1a:52:bf:ea:1c:
                    19:56:1b:08:30:08:00:27:3e:f6:11:c4:05:a4:f6:
                    d4:98:db:2e:5e:ee:95:6a:e6:62:07:7f:21:43:b7:
                    4b:9a:4c:b8:4a:8b:0b:41:e5:c2:2d:b3:d4:2e:42:
                    9f:7b:b7:01:f7:8b:5c:c8:63:bd:c7:16:4e:54:23:
                    33:ec:d6:89:11:aa:3e:85:36:23:b2:40:b7:14:48:
                    e2:41:e6:3a:79:fc:63:64:3a:93:f0:41:d2:55:a9:
                    f1:33:b8:01:07:98:a3:f0:5d:45:4f:53:f7:fb:ce:
                    2d:c9:a2:2d:86:da:d7:0c:6e:41:68:aa:9d:1f:a9:
                    16:78:06:fe:4d:ea:7e:37:f2:88:52:8e:19:43:6a:
                    8a:63:e9:48:57:a0:64:07:ad:70:87:ff:41:61:06:
                    d7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E9:72:EA:86:FF:B3:03:36:B5:8D:32:65:EB:D0:E0:AF:E3:90:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/4aa4778d-d22a-3dc4-93d5-095df029a273.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:f2:1e:41:d5:10:76:f5:63:d5:ea:88:eb:ab:2f:e9:2d:86:
         e6:3d:78:53:ca:d7:68:bb:8c:31:34:c5:1c:3f:3d:d2:44:ed:
         0c:aa:ea:d1:e7:83:8f:97:e3:c5:59:eb:c2:0e:95:e6:00:96:
         40:b2:8f:5f:df:43:d3:62:a2:60:1f:3e:63:0f:68:68:72:69:
         03:e3:15:43:0e:7a:52:5d:eb:48:22:8f:0a:9b:85:03:04:34:
         6e:98:2f:d6:f2:37:de:39:58:53:80:20:ac:7e:ef:66:7c:73:
         90:02:07:2e:db:aa:ce:5d:cf:fc:45:f9:22:d5:a9:37:f5:05:
         bd:75:1b:7f:60:ce:4e:3d:2f:9d:ca:5d:f4:ea:66:c8:77:6f:
         57:ac:e2:29:7e:3f:52:68:6c:5c:c6:73:5b:96:d9:ef:f0:59:
         13:73:68:3e:24:b3:87:79:b5:ec:93:14:f6:49:84:e2:54:4b:
         69:1b:07:a8:06:98:5d:f2:4a:20:e8:82:f0:d2:c5:7e:f8:80:
         b9:10:7b:57:09:17:c1:1e:2c:f1:97:2c:e0:74:8c:ae:55:ba:
         c6:26:6b:47:7f:08:26:26:1a:1c:49:cd:cf:18:ed:5b:51:93:
         51:16:18:32:ce:14:5e:bc:9e:5b:45:da:e2:53:13:eb:26:26:
         f0:af:0b:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MvsQv/EyjMGF2x4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDYwMzE0MjIzNVoXDTI2MDkwMTE0MjIzNVowLzEtMCsGA1UEAxMk
ZjYxMjEwYjMtYTg4My00ZGM2LThmNDktYWZkM2I2MjA1OTI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZNLOrFjCWRnZ8S4UxHTqYnIk232tGDm92YE
mfXZ9ZBhS7mBNnxzOMERODJrD8JK9L75OewVvUFIefbrOV6wgsd0Fh0sNZ6V4iqD
IRe2yhTW/7v8TwDgNY4BZ7q/PfBpF9rQGlK/6hwZVhsIMAgAJz72EcQFpPbUmNsu
Xu6VauZiB38hQ7dLmky4SosLQeXCLbPULkKfe7cB94tcyGO9xxZOVCMz7NaJEao+
hTYjskC3FEjiQeY6efxjZDqT8EHSVanxM7gBB5ij8F1FT1P3+84tyaIthtrXDG5B
aKqdH6kWeAb+Tep+N/KIUo4ZQ2qKY+lIV6BkB61wh/9BYQbXCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMTpcuqG/7MDNrWNMmXr0OCv45BaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvNGFhNDc3OGQtZDIyYS0z
ZGM0LTkzZDUtMDk1ZGYwMjlhMjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP09MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADHyHkHVEHb1Y9XqiOurL+kthuY9eFPK12i7jDE0xRw/PdJE7Qyq6tHn
g4+X48VZ68IOleYAlkCyj1/fQ9NiomAfPmMPaGhyaQPjFUMOelJd60gijwqbhQME
NG6YL9byN945WFOAIKx+72Z8c5ACBy7bqs5dz/xF+SLVqTf1Bb11G39gzk49L53K
XfTqZsh3b1es4il+P1JobFzGc1uW2e/wWRNzaD4ks4d5teyTFPZJhOJUS2kbB6gG
mF3ySiDogvDSxX74gLkQe1cJF8EeLPGXLOB0jK5VusYma0d/CCYmGhxJzc8Y7VtR
k1EWGDLOFF68nltF2uJTE+smJvCvC/A=
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:55:41 2026 by rpki-client