Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/bb2679ed-bcb5-3944-ae7b-2e2706ebc802.roa
File:                     bb2679ed-bcb5-3944-ae7b-2e2706ebc802.roa (raw, json)
Hash identifier:          FKPgRxadmHlpFaz54IpKuMuGP5EsuU/XbmUa5fJvxNo=
Subject key identifier:   E5:08:E5:93:24:A2:6E:B8:8F:A9:C0:36:60:80:57:0A:8E:3F:6F:7F
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CC4DA665584434FF03B80
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/bb2679ed-bcb5-3944-ae7b-2e2706ebc802.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     18779
IP address blocks:        104.252.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:c4:da:66:55:84:43:4f:f0:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=a563047b-7cd3-4eaa-8979-9b4a29cef660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bd:19:63:ff:88:ca:d6:c6:75:9b:1b:3d:3f:
                    6c:1b:db:6f:8f:5a:45:f5:be:af:d3:20:ad:6d:df:
                    be:5d:75:16:2e:9b:7d:c2:a8:2d:30:42:c4:62:6d:
                    30:04:70:3d:93:d5:8a:0c:c0:99:8e:48:0b:a6:71:
                    55:2c:e1:84:a0:15:dc:12:be:be:af:b4:c8:58:75:
                    db:dc:d7:ec:49:32:56:fe:0f:b5:81:ee:dc:d9:a8:
                    a4:7b:cd:b1:47:62:17:72:f5:b8:75:15:a0:14:26:
                    e1:af:df:63:bf:6b:63:39:f5:14:8d:1c:5d:59:72:
                    f2:b7:96:d0:de:87:c1:d6:17:f0:5f:f0:9c:47:a4:
                    55:a6:7a:43:b8:d2:cc:69:a7:80:19:55:5d:79:44:
                    b9:f6:b9:42:4e:6e:56:b3:34:f0:ec:c0:58:a5:53:
                    f5:43:11:01:b7:ff:1f:34:25:5f:78:0f:4b:02:6b:
                    6b:d8:fc:a0:ce:da:3e:81:d4:80:c5:97:f0:90:23:
                    e7:66:a8:3f:ff:77:f5:20:90:22:56:e9:ad:e2:b2:
                    7b:1b:28:a8:79:e5:94:a8:6d:33:7e:95:03:91:5f:
                    7b:0f:99:35:5c:02:a0:b9:92:af:10:39:56:3a:52:
                    3e:47:dc:e9:d0:0b:71:29:5f:df:09:dd:ed:d3:c2:
                    27:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:08:E5:93:24:A2:6E:B8:8F:A9:C0:36:60:80:57:0A:8E:3F:6F:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/bb2679ed-bcb5-3944-ae7b-2e2706ebc802.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:bd:e8:e6:8d:2c:b8:1f:96:c5:f9:31:2d:e0:09:d4:77:0f:
         1c:cc:bd:96:3d:2f:ef:e0:39:ba:a3:6c:3e:a5:c7:9f:49:db:
         45:d5:19:90:68:ab:c0:73:9a:25:37:8d:58:6a:17:d5:55:56:
         97:aa:f1:b5:e1:a5:8d:3d:6b:b5:1a:49:e3:7d:df:5c:0a:06:
         1e:f6:a2:94:e2:ce:72:be:00:f9:8a:f6:4c:16:79:a0:cc:e9:
         b6:8f:38:5e:c9:50:cc:6d:84:8d:6d:e6:5c:a0:11:19:c4:4a:
         99:dd:1a:38:86:f2:f2:c7:59:ce:40:3b:dd:ce:19:14:f8:d6:
         57:36:de:a7:f5:19:c4:1f:2d:ed:94:ed:4d:a5:59:0d:62:84:
         fd:5d:a6:a9:5d:df:44:7d:c7:c5:65:30:f5:bc:84:02:c3:ae:
         08:9c:f6:fc:9b:df:c6:a7:a9:9a:6f:07:b3:1c:a3:5b:1f:58:
         8f:95:09:d4:f3:99:cc:fe:8e:29:da:a1:db:b3:b0:c7:e3:80:
         8d:7b:51:f8:03:ad:91:b7:ac:e2:c0:4a:2e:6a:d8:66:3c:77:
         14:6a:9b:6e:57:d2:8c:11:e1:7d:11:05:84:eb:ec:3b:16:14:
         92:40:b1:1c:09:34:bc:d0:bf:c7:a8:d3:f5:db:ca:88:29:22:
         93:ab:44:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:06:59 2026 by rpki-client