Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/12212b74-afff-31ff-b371-5d4b8fa6e00f.roa
File:                     12212b74-afff-31ff-b371-5d4b8fa6e00f.roa (raw, json)
Hash identifier:          aiYQM5Pvrex1w97Mb68AdCEbjP7mTRztJl2rIKcaQGg=
Subject key identifier:   E3:E8:74:7E:3B:08:06:55:9D:83:22:C2:B9:F4:07:51:89:AA:3A:1F
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DD8D682401D15E5637CE2C0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/12212b74-afff-31ff-b371-5d4b8fa6e00f.roa
Signing time:             Tue 07 Apr 2026 16:21:35 +0000
ROA not before:           Tue 07 Apr 2026 16:21:35 +0000
ROA not after:            Mon 06 Jul 2026 16:21:35 +0000
asID:                     8881
IP address blocks:        45.38.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:d8:d6:82:40:1d:15:e5:63:7c:e2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:21:35 2026 GMT
            Not After : Jul  6 16:21:35 2026 GMT
        Subject: CN=5bb1c594-5743-41a3-bdfc-f3cf91ec9905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:57:31:58:7c:96:33:b2:46:e8:f9:4f:18:91:
                    8b:90:11:7c:d3:28:d2:54:38:73:b5:bc:c1:ea:b6:
                    73:4c:28:03:7e:1c:8b:21:29:f5:1d:84:da:bd:24:
                    ef:a5:62:ab:e4:47:6c:56:90:5b:64:cf:ed:db:c1:
                    43:4f:d0:e2:98:dc:83:e3:41:23:46:bc:51:27:ef:
                    fe:34:b7:57:60:9f:aa:0c:35:70:26:db:69:d9:e4:
                    f9:71:24:45:b9:28:a2:ce:f6:fc:8c:43:86:45:f6:
                    8b:e0:a8:10:de:31:d4:e6:30:f8:79:b9:b0:b4:aa:
                    3b:bf:19:95:6d:ff:08:9e:aa:b9:f6:2e:c2:46:14:
                    38:9a:11:3a:d4:8c:dc:0c:83:b0:27:76:a1:ee:c8:
                    57:9a:7b:ca:08:6c:c9:31:b5:0f:3f:d4:fd:0a:fd:
                    52:eb:aa:45:ca:45:07:0b:7a:03:4d:bb:2d:5c:69:
                    40:cb:0f:80:aa:94:c1:ff:03:a2:7b:f1:6c:f5:d7:
                    27:a6:4d:64:49:20:5f:10:9c:f6:32:b4:bf:7b:02:
                    a7:7b:2c:25:9b:da:8e:c0:db:6d:e8:2c:be:89:af:
                    e1:86:5f:b4:a6:74:2b:62:17:2e:20:01:6d:63:70:
                    a7:f6:3b:ba:32:4f:72:ad:b2:86:27:31:89:12:41:
                    9a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E8:74:7E:3B:08:06:55:9D:83:22:C2:B9:F4:07:51:89:AA:3A:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/12212b74-afff-31ff-b371-5d4b8fa6e00f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:54:9a:ec:20:ef:ca:40:7d:81:7f:e6:50:49:99:f3:5b:07:
         26:64:0d:af:6e:52:21:72:88:31:b9:d5:1c:57:a8:b5:42:37:
         52:4d:7c:8d:6f:42:09:c1:de:52:46:9c:d6:16:ea:b9:b7:e4:
         1c:46:1b:65:e5:f4:df:3d:e1:a5:9b:b7:03:10:03:55:6b:56:
         b2:bb:10:e2:5f:fa:31:ef:9c:02:61:c3:89:b5:2b:98:33:04:
         76:13:14:d3:b0:30:ac:43:df:be:da:09:6d:4d:a4:ec:fa:5b:
         da:98:df:79:b7:ea:ff:a6:0b:9d:f2:3e:76:d8:e5:6e:c6:d8:
         ac:14:43:ed:aa:55:64:84:7b:82:31:ed:7f:81:ea:09:64:02:
         eb:f1:ae:9d:34:ba:72:e7:5f:a6:5f:50:36:8f:40:63:26:c3:
         d6:13:2b:dd:28:ba:14:8e:0c:9d:2c:f4:90:7c:90:4b:38:62:
         ae:f1:d3:85:a8:a7:e3:2b:07:8d:67:6d:b2:1a:05:ff:76:3f:
         e6:6f:8a:1f:b5:49:68:15:e0:b5:dc:62:1e:93:77:78:0f:11:
         ba:e4:f3:7f:2c:cc:b6:62:d2:3c:b1:64:cf:bc:9e:9e:dd:e3:
         49:f1:4f:5d:30:8f:a4:ef:a0:d2:6d:b3:10:98:8a:65:4d:f4:
         b6:94:5f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:42:14 2026 by rpki-client