Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/03a63a75-5aca-3303-a669-05478a8759cb.roa
File:                     03a63a75-5aca-3303-a669-05478a8759cb.roa (raw, json)
Hash identifier:          +rEMx3vHAy8LNzGjbYwTKzMLh2Df713ljkbrc03gabk=
Subject key identifier:   11:6C:DC:AF:5F:3A:DE:DB:4A:32:81:7A:85:E0:47:FA:B5:F8:10:88
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DD6262F30A70A4068045C50
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/03a63a75-5aca-3303-a669-05478a8759cb.roa
Signing time:             Tue 07 Apr 2026 16:16:10 +0000
ROA not before:           Tue 07 Apr 2026 16:16:10 +0000
ROA not after:            Mon 06 Jul 2026 16:16:10 +0000
asID:                     18779
IP address blocks:        45.38.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:d6:26:2f:30:a7:0a:40:68:04:5c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:16:10 2026 GMT
            Not After : Jul  6 16:16:10 2026 GMT
        Subject: CN=dd839463-749f-4cf8-b538-0056e242d3c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:07:1a:3b:38:b3:0e:86:37:15:23:ff:de:85:
                    f2:88:a0:13:f9:f0:2c:c2:95:bd:2a:bf:cd:97:2e:
                    ed:51:e1:43:89:47:43:b1:b2:05:30:0b:4e:41:01:
                    29:d0:8c:48:21:ef:03:bf:23:b9:ef:c7:87:93:5c:
                    b4:b8:43:0c:22:e0:8f:40:7c:63:9a:da:e3:6d:77:
                    7c:ac:97:0d:30:ce:db:6e:0c:9e:4d:11:58:9d:82:
                    48:43:f2:32:c6:bc:40:c5:7a:23:4e:29:a5:11:00:
                    c0:02:ff:9f:c2:f5:64:10:ac:de:e9:0c:38:8e:76:
                    41:2c:c6:cb:14:fd:db:ba:4f:1c:7d:75:06:64:aa:
                    69:8e:70:8d:d1:1d:47:25:e2:ad:2d:0a:ee:23:91:
                    87:8b:96:c5:8c:28:47:fd:91:d9:4c:c0:49:6c:88:
                    3b:40:77:dc:66:99:a3:38:42:83:77:3f:e0:7e:4a:
                    13:37:82:7b:4f:9d:be:43:b1:a2:9f:a0:53:fe:17:
                    05:ff:c3:70:97:d4:16:4a:70:76:6d:fc:14:68:d0:
                    62:5e:4c:2f:a9:43:5c:29:1a:24:8d:04:f0:c3:19:
                    94:a6:96:93:c2:1d:1d:de:ec:f9:b0:60:1a:6a:06:
                    73:1c:5e:6e:e3:88:ef:f4:81:c9:50:73:78:c9:f3:
                    5b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:6C:DC:AF:5F:3A:DE:DB:4A:32:81:7A:85:E0:47:FA:B5:F8:10:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/03a63a75-5aca-3303-a669-05478a8759cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:6a:26:04:ff:9b:d0:8f:c0:23:4e:bc:f1:99:ce:85:85:ac:
         91:d8:ee:9f:f8:29:32:15:2a:5b:4e:3d:87:97:0b:2d:82:a5:
         ef:10:16:8b:90:f7:bd:df:e7:d3:be:69:fb:3f:0c:90:5a:4f:
         02:27:01:2b:e8:59:36:dd:ea:e6:ee:c9:69:02:aa:e5:6f:e3:
         29:1e:3f:b4:5a:1a:9c:cc:26:d4:17:3c:71:15:6c:d1:69:06:
         b8:3c:69:a7:06:35:e1:45:66:ce:2b:cc:4b:74:92:b8:72:ca:
         ca:e2:a9:98:04:d2:9e:b0:39:9f:70:b3:9a:31:6a:b5:7e:c3:
         b1:b6:94:76:26:0b:b8:38:1e:f8:6b:c7:33:39:7d:58:7c:3c:
         f4:4a:36:70:90:49:21:60:f3:a9:1b:41:b3:11:15:e5:4b:9e:
         19:22:d4:40:26:37:f7:8b:a1:3e:cf:32:a2:3f:34:3d:cc:00:
         81:b5:6b:c1:00:3b:d4:7f:19:c8:25:85:e3:76:b8:ef:3c:ff:
         96:6d:49:34:6b:45:65:16:9b:e3:2f:44:a4:19:9a:4e:9d:7d:
         47:f8:3a:1e:e3:08:96:81:29:18:ba:7d:b1:69:21:63:46:74:
         18:77:5a:6b:61:25:e7:a0:da:18:e2:74:b6:d0:8e:5c:3e:90:
         bd:ef:64:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:42:58 2026 by rpki-client