Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b1d7e69f-742c-381d-a08c-467d0c3be8eb.roa
File:                     b1d7e69f-742c-381d-a08c-467d0c3be8eb.roa (raw, json)
Hash identifier:          /3KhtX1u2FaiUDJG6Rb+x6+sv0sFfGnB5iVoXKBLV18=
Subject key identifier:   55:65:A6:1B:08:13:0C:EE:48:89:AC:0E:8A:38:E4:D7:DF:D4:44:63
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CE076DA9F7537A7584280
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b1d7e69f-742c-381d-a08c-467d0c3be8eb.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     400536
IP address blocks:        104.253.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:e0:76:da:9f:75:37:a7:58:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=7228029e-cc6b-4608-b65f-47ac64d03501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4b:56:25:98:42:0c:bc:20:b4:0c:0c:1f:70:
                    27:d9:17:5b:f2:b7:89:27:1a:c4:cd:f1:27:6c:e2:
                    7a:1a:d0:18:21:0c:53:a6:fe:2c:77:ac:ba:41:b3:
                    fa:81:d1:74:e3:9f:9a:42:09:74:ee:8c:22:fa:36:
                    8f:cf:8f:e6:23:47:43:b6:44:2e:1b:f8:27:31:d2:
                    c8:57:b8:14:07:ff:06:f8:35:5d:d2:9a:74:ca:ce:
                    60:a6:2f:85:bb:9b:5c:04:61:a7:f0:70:d3:39:71:
                    a9:a5:82:72:fd:93:e8:53:64:f2:9e:dd:1a:35:52:
                    ad:50:52:2d:7e:fe:c0:56:2e:0c:09:7b:9a:78:c1:
                    ab:63:82:f8:17:b3:5a:fe:d0:75:4f:a0:f8:88:ba:
                    4a:7b:e1:0e:f0:41:d9:18:be:64:fc:94:a5:d9:5d:
                    ac:84:8e:74:49:80:8e:5e:fd:10:c8:64:89:8c:f6:
                    3b:6f:bf:ec:87:b6:e6:a4:ca:c5:85:88:ae:6b:c3:
                    51:4c:49:1c:39:27:c2:90:20:c7:fb:8e:5b:f4:0c:
                    75:19:bb:db:ee:e2:13:7e:36:19:a2:6d:d0:7b:18:
                    42:07:82:ce:96:9a:a2:3b:75:51:10:c7:3b:8d:aa:
                    92:c0:84:1f:d9:0b:d6:b6:ee:4b:a9:20:80:0b:0c:
                    b0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:65:A6:1B:08:13:0C:EE:48:89:AC:0E:8A:38:E4:D7:DF:D4:44:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b1d7e69f-742c-381d-a08c-467d0c3be8eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:6e:29:7b:02:7d:9f:88:35:da:ae:4d:b3:8c:b9:39:7b:9b:
         3f:9c:f8:01:67:ba:c5:34:5b:35:20:49:dd:76:16:07:20:4a:
         e3:4f:48:4f:48:cd:55:44:9d:ae:49:ab:81:1f:67:eb:1e:96:
         dc:b0:7e:08:40:a5:9f:5c:58:fe:52:42:8e:97:3f:23:d8:ec:
         e4:bf:4b:82:eb:b6:50:4c:ff:2f:7c:ba:9a:91:1d:52:f9:d8:
         e7:8e:1c:4a:65:8f:1f:c2:3a:8e:a7:5f:bf:e3:2e:83:ce:bb:
         4b:88:23:73:3e:58:c3:ae:ee:9e:26:23:61:2a:68:4f:a9:67:
         0f:65:ce:57:3c:1d:79:bb:9f:da:72:9d:67:5c:55:b3:22:65:
         8c:7f:a5:86:0d:cd:2c:b0:9d:84:b3:6e:28:ab:36:36:cc:a4:
         c7:16:98:67:9f:d8:3d:4c:48:de:c0:a4:23:e2:e5:78:a0:2e:
         57:ec:0d:54:1a:85:39:f2:7a:7c:9f:9e:93:53:26:8c:28:b8:
         0a:06:4c:ca:f9:ed:a0:ae:c3:bb:a0:18:25:43:1b:ee:e9:f8:
         00:d4:17:df:30:0d:1b:58:81:19:16:e2:58:3b:0e:04:ba:d2:
         26:74:57:48:b8:00:1b:94:88:90:14:7e:99:b5:58:f7:11:6c:
         85:00:bf:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:12:50 2026 by rpki-client