Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/0768d209-90de-3cc5-9065-89722f865b4a.roa
File:                     0768d209-90de-3cc5-9065-89722f865b4a.roa (raw, json)
Hash identifier:          XUt+kx+mgsJLHzsp8Q87mCJlJEobwSezvhdtUGlYtfM=
Subject key identifier:   F4:DD:1E:FB:8A:98:4A:6A:0D:50:D3:FC:ED:0C:87:0A:7F:0A:83:F8
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDA00853D15BE3D206C9E00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/0768d209-90de-3cc5-9065-89722f865b4a.roa
Signing time:             Tue 07 Apr 2026 16:23:56 +0000
ROA not before:           Tue 07 Apr 2026 16:23:56 +0000
ROA not after:            Mon 06 Jul 2026 16:23:56 +0000
asID:                     11404
IP address blocks:        45.38.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:da:00:85:3d:15:be:3d:20:6c:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:23:56 2026 GMT
            Not After : Jul  6 16:23:56 2026 GMT
        Subject: CN=8f7bab08-ecc6-48b6-bcd8-858e3f8fd932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0f:a2:c8:45:af:cc:21:f2:90:d8:a9:84:54:
                    55:e8:2a:af:a6:dc:3f:4e:03:aa:5d:53:9f:84:5d:
                    55:6f:2f:da:fb:7c:76:56:65:07:3b:a0:af:2f:25:
                    b0:91:44:49:bd:ab:17:16:5a:2f:aa:b1:c8:80:5f:
                    8c:55:22:13:1a:9a:ed:28:06:7e:75:83:d2:9e:a0:
                    8d:d2:49:86:67:c6:5f:ac:09:63:e8:0e:97:13:be:
                    ba:7d:83:c7:b7:45:2d:4c:b9:15:17:27:49:7e:43:
                    52:ce:ac:97:4f:e7:24:d6:9c:f7:e3:74:5b:16:75:
                    22:a5:3c:5b:f5:e5:cc:e3:5f:1f:a8:f1:71:f8:b9:
                    56:c0:7c:97:08:bb:25:a6:15:75:97:ef:5c:36:66:
                    6a:62:f0:93:f0:2b:be:ed:06:3e:63:20:3e:7c:fb:
                    83:7a:18:6c:4c:49:0e:b3:6b:57:e1:e6:44:76:b0:
                    65:7d:96:1c:67:87:a2:77:94:7a:49:8e:f2:fd:74:
                    35:df:f0:ba:c2:c5:23:58:49:f2:88:6c:d5:7f:ad:
                    e5:7f:63:58:bf:a2:e8:9e:26:0b:18:82:92:e4:69:
                    5a:2c:26:32:45:2a:cb:be:76:03:e2:10:dc:61:70:
                    fb:d0:70:1a:68:16:67:34:70:7f:09:87:f2:f3:fa:
                    f5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:DD:1E:FB:8A:98:4A:6A:0D:50:D3:FC:ED:0C:87:0A:7F:0A:83:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/0768d209-90de-3cc5-9065-89722f865b4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:fc:74:3a:9a:06:27:24:95:60:59:83:a2:96:14:51:31:b0:
         30:46:aa:c9:5a:c1:97:8c:8f:17:2b:d6:11:fc:91:39:93:31:
         ae:05:96:10:91:d7:d1:ba:f5:f3:89:a6:6b:78:2d:07:2d:8e:
         f9:e7:38:d5:ac:14:05:22:bc:e1:3a:72:e2:06:6d:ff:37:5f:
         01:11:90:39:98:00:07:9a:8d:dd:43:20:9b:85:72:57:12:d3:
         e3:dd:84:3b:06:1e:13:f6:89:72:d1:d4:5b:a1:2f:01:e7:ea:
         02:08:90:c4:f5:22:db:57:a3:63:49:f8:2d:c4:d9:34:6f:6b:
         88:6e:ef:6a:16:d7:4d:e2:0e:ae:f5:dc:83:21:37:0a:d1:e0:
         18:f8:1c:1a:0e:35:9d:26:45:3c:7a:66:0c:91:43:f7:b4:9b:
         dc:a3:40:0e:30:cf:1a:08:66:12:47:89:52:4c:7f:ca:d0:b4:
         e5:9d:97:48:f6:f7:fa:98:c9:51:4e:fb:ec:a3:1a:3d:e7:ff:
         52:ed:3b:99:e1:1b:25:45:1e:1f:e4:78:ec:16:20:bb:ba:aa:
         96:85:d8:4d:f1:12:7c:4b:d6:9e:8b:da:35:8c:8c:de:69:79:
         e7:4d:a3:77:69:cf:66:0a:23:32:01:c2:f9:e1:d9:cb:00:89:
         a9:c8:3e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:42:35 2026 by rpki-client