Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/09c07d11-116c-37a9-9af7-9057a9db484c.roa
File:                     09c07d11-116c-37a9-9af7-9057a9db484c.roa (raw, json)
Hash identifier:          LjFkyQLHA0JWXIp3O5FJM90+PgnczJz1ky9FkY6Hs28=
Subject key identifier:   73:3A:5C:08:DB:F8:D5:5F:C2:EF:2E:72:50:CD:63:9B:B1:49:7B:98
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDA670F694BA3C31EC06080
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/09c07d11-116c-37a9-9af7-9057a9db484c.roa
Signing time:             Tue 07 Apr 2026 16:24:44 +0000
ROA not before:           Tue 07 Apr 2026 16:24:44 +0000
ROA not after:            Mon 06 Jul 2026 16:24:44 +0000
asID:                     18779
IP address blocks:        45.39.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:da:67:0f:69:4b:a3:c3:1e:c0:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:24:44 2026 GMT
            Not After : Jul  6 16:24:44 2026 GMT
        Subject: CN=3c094f06-97fd-455a-991a-c9e65cba4d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e6:3f:17:88:d6:ab:84:f4:f0:41:e0:0f:7d:
                    8f:80:81:64:1e:dc:c4:09:2d:f5:4c:83:05:8b:26:
                    ce:6e:dd:3c:95:8c:a9:d2:d3:3b:50:42:95:a9:2e:
                    aa:27:c6:89:8a:3f:2e:71:60:94:12:fb:2f:f6:a9:
                    50:35:a5:89:2c:f7:fd:e8:9b:4d:3f:d8:fc:0e:b8:
                    84:aa:5f:6e:53:6b:87:87:aa:22:81:77:63:c9:97:
                    fb:a1:e3:08:0d:76:73:d0:6f:90:d0:e6:4f:4c:98:
                    20:92:36:95:1f:f2:1c:3e:e5:5b:9e:a9:7d:28:cf:
                    79:82:59:68:f1:81:8e:58:c4:c8:1a:8f:20:7f:d4:
                    e4:e3:b9:c1:a8:a4:0b:0b:bc:aa:af:86:27:9b:fd:
                    23:de:e6:d7:d2:99:d1:79:0c:77:61:bf:cc:be:ca:
                    7a:c7:a7:18:21:f1:0f:c8:7e:b0:6e:c4:c8:59:7b:
                    ec:9e:2f:b9:d8:45:25:92:75:8e:54:d2:6c:52:14:
                    14:e3:3e:96:05:ab:36:00:7e:e4:50:a9:91:33:59:
                    cb:b2:da:f9:69:77:82:4c:73:6a:d7:0c:3a:72:27:
                    64:c8:f9:65:93:46:e3:64:bd:76:65:7c:47:5c:2e:
                    18:84:51:a3:1c:5a:2f:bc:87:f8:3f:8b:99:4f:1a:
                    88:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3A:5C:08:DB:F8:D5:5F:C2:EF:2E:72:50:CD:63:9B:B1:49:7B:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/09c07d11-116c-37a9-9af7-9057a9db484c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:31:b7:74:0b:43:a4:ce:b1:e0:26:36:a6:48:36:90:42:28:
         e1:04:69:9b:e4:c5:47:44:99:a2:5b:64:18:ea:63:31:1e:cf:
         14:c3:cd:5a:8e:5d:a1:02:76:6d:20:cf:3d:75:eb:8e:7b:f3:
         eb:a4:1c:10:ca:9e:7a:2e:4a:b6:7e:6d:d3:8e:0c:39:39:85:
         e5:7e:ef:d8:0d:34:e4:33:80:c5:78:ce:a3:84:c2:f4:b9:48:
         57:53:3d:1e:7b:88:1c:e5:8b:8d:6d:12:46:e1:ac:60:bc:d0:
         44:d0:90:2e:d0:c9:f2:ab:5a:78:f2:83:c2:83:d8:a1:ad:d1:
         ce:70:b6:45:da:f9:1d:d8:cd:5a:c5:1d:12:28:70:4c:e2:1b:
         7f:2e:53:42:4b:24:a0:17:0e:0d:42:22:4e:da:92:5e:90:cc:
         c4:38:59:53:00:08:18:e8:c0:b8:13:fa:80:ef:f0:b3:36:d8:
         22:28:40:a4:db:4a:a7:5a:ef:1d:e7:d2:6e:47:91:f9:c2:92:
         10:b9:00:d1:de:67:f6:72:0f:f0:6a:f4:f5:ec:da:eb:2c:75:
         59:e6:96:d8:d7:72:b2:ba:e1:9d:96:55:5b:0a:ef:d1:51:f8:
         12:57:27:dc:d8:a6:ae:04:7d:66:95:22:dd:9c:2f:a1:a6:7d:
         01:dc:b1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:42:54 2026 by rpki-client