Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/110171c2-5296-370e-a937-69eb4c5c816b.roa
File:                     110171c2-5296-370e-a937-69eb4c5c816b.roa (raw, json)
Hash identifier:          s5nZ+AgwfTn+7d1l6Q2Me7vYU46Eqvi5LsvIVmL01Mo=
Subject key identifier:   3C:DC:F0:03:EE:27:4A:DA:06:FD:08:85:44:9B:E7:B5:30:50:BB:01
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DD93CE6750D10FC9FB48200
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/110171c2-5296-370e-a937-69eb4c5c816b.roa
Signing time:             Tue 07 Apr 2026 16:22:24 +0000
ROA not before:           Tue 07 Apr 2026 16:22:24 +0000
ROA not after:            Mon 06 Jul 2026 16:22:24 +0000
asID:                     7922
IP address blocks:        45.38.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:d9:3c:e6:75:0d:10:fc:9f:b4:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:22:24 2026 GMT
            Not After : Jul  6 16:22:24 2026 GMT
        Subject: CN=0aed4086-f881-4382-883e-51814b85a08e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:68:33:f9:d4:6a:ed:7c:4e:84:46:23:84:ba:
                    4c:7d:f2:83:96:56:93:1b:f3:e5:53:bb:0b:a1:94:
                    52:29:42:f8:98:41:ae:77:f3:6a:dc:63:b7:e0:ca:
                    36:66:c2:36:1c:e4:3a:16:b0:af:ed:2c:35:6d:fc:
                    dd:2b:6d:11:af:97:06:ba:80:c9:11:d3:2b:5e:9f:
                    cf:a9:ba:a9:b9:42:dc:82:9b:a7:8d:9f:d6:97:3a:
                    b9:cf:19:ea:57:16:63:a1:0b:93:3a:e4:a2:32:59:
                    86:28:14:ac:c3:fc:d6:de:7e:85:69:81:25:f4:93:
                    5c:ed:14:a6:27:74:ac:01:85:f9:30:3e:a8:d8:14:
                    ce:59:fd:16:ca:2a:dd:74:79:03:83:8b:3a:bb:24:
                    cb:3e:4b:a0:ae:f4:8f:d9:f0:37:9e:3d:36:cd:65:
                    fb:79:48:77:cb:78:cd:e0:46:8c:bb:34:28:a2:d1:
                    87:b3:da:dd:35:87:67:fd:e0:12:61:2c:ee:28:3b:
                    ba:c4:7c:1d:52:5d:39:2a:96:c7:a4:f8:f9:95:2f:
                    1f:8f:06:ed:d8:d2:e1:34:c5:3a:fc:6b:45:a1:82:
                    ac:e4:2c:7f:50:8e:66:63:cd:8b:8a:bd:86:b1:4c:
                    c6:ba:cb:b5:05:a1:4e:1e:06:30:8e:3b:d0:3c:99:
                    9e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:DC:F0:03:EE:27:4A:DA:06:FD:08:85:44:9B:E7:B5:30:50:BB:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/110171c2-5296-370e-a937-69eb4c5c816b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:54:ba:ef:cd:a9:52:5e:4c:e5:d0:19:cf:86:03:81:34:1c:
         fa:47:7b:de:17:f5:71:22:27:bd:02:4b:fd:d4:16:67:3b:09:
         28:82:d8:af:d8:94:ec:55:81:7f:9f:2e:0e:41:79:c7:b7:c4:
         1b:3e:ec:d6:ba:4b:61:c1:7d:8b:2c:d8:12:30:77:77:e6:b2:
         8a:b6:da:72:4c:ca:6b:19:bd:39:46:97:4f:06:f5:95:cc:e5:
         30:56:24:8a:df:6a:02:ed:3c:b5:d0:3f:f7:21:7d:9b:cc:2a:
         bd:99:0f:a1:f5:8f:ef:18:68:15:fa:c4:ec:c3:43:a5:26:42:
         45:76:cc:c4:57:ff:32:a7:73:ef:a6:92:5f:66:d1:32:50:c9:
         92:75:13:09:40:00:cb:9d:2e:d6:4b:42:32:07:c0:e8:00:1e:
         3d:ce:91:b8:c6:98:55:ba:55:8e:e6:76:cb:32:3e:5b:3b:0a:
         64:d3:f4:b4:37:9b:04:d4:16:2d:d0:8e:07:10:13:a5:9d:9a:
         c0:0c:76:6e:f4:09:20:c9:33:ca:f9:58:c8:f9:2d:52:b7:17:
         01:1e:8c:7f:1d:3d:bf:ac:58:dc:c0:a0:93:24:29:34:0e:8a:
         12:6e:8b:1c:96:07:ef:8b:ec:79:d6:27:26:e0:f3:c7:55:01:
         16:a6:79:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:43:00 2026 by rpki-client