Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/18f5e240-d7a0-3a1e-bf76-1443ce2d9d90.roa
File:                     18f5e240-d7a0-3a1e-bf76-1443ce2d9d90.roa (raw, json)
Hash identifier:          VFX3aZQjsf28Leg4rARuEv/FVY6XLJPNMtQgfi1If/8=
Subject key identifier:   64:D9:38:B1:5A:DC:9F:33:0C:60:6B:60:11:BA:71:CB:DB:7E:01:BA
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDA360EA004B92FC58BC980
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/18f5e240-d7a0-3a1e-bf76-1443ce2d9d90.roa
Signing time:             Tue 07 Apr 2026 16:24:21 +0000
ROA not before:           Tue 07 Apr 2026 16:24:21 +0000
ROA not after:            Mon 06 Jul 2026 16:24:21 +0000
asID:                     212238
IP address blocks:        45.39.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:da:36:0e:a0:04:b9:2f:c5:8b:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:24:21 2026 GMT
            Not After : Jul  6 16:24:21 2026 GMT
        Subject: CN=91e3fa99-ff22-456d-a033-333b2dd164d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8b:ea:40:ce:5b:00:62:e8:75:86:e0:a3:ac:
                    94:66:54:c6:23:19:e2:02:39:1d:68:ec:16:d1:85:
                    d9:44:f7:b3:2b:b9:fa:24:67:5b:ab:ce:78:eb:65:
                    dc:be:07:97:6d:29:ef:e9:e7:43:80:6d:16:d4:a0:
                    60:d5:2b:bd:f8:81:f6:37:b1:4e:38:f0:11:54:23:
                    f4:ba:31:d3:e4:f4:f4:a8:23:ad:fc:d6:b6:bd:8f:
                    5a:b2:73:91:e9:57:2d:ee:84:70:44:97:85:7b:00:
                    c3:e2:62:83:22:6c:5a:82:82:af:cc:eb:c5:90:1d:
                    21:21:02:f3:d5:07:e6:48:1f:0d:e5:fe:66:b8:bc:
                    0f:fd:9d:01:51:84:b9:b8:dc:d2:2a:db:83:51:24:
                    33:18:1e:f8:cf:1b:7f:20:9d:1f:eb:9b:40:50:32:
                    a0:be:ff:ac:b9:5a:16:2f:84:31:78:fc:39:d7:d5:
                    ef:38:1a:4a:0e:8e:2c:ed:4a:a6:fa:f7:a2:ac:52:
                    ec:38:45:16:05:2a:2c:5d:7b:4d:49:68:5f:5d:e7:
                    95:20:f3:4b:c2:90:7d:cf:a3:3d:0e:70:92:a4:34:
                    a4:ad:e4:16:9e:06:5e:22:6b:4c:ee:38:b2:9a:1e:
                    69:50:ba:65:18:6e:b5:8c:d7:4e:ad:52:e6:11:16:
                    5b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D9:38:B1:5A:DC:9F:33:0C:60:6B:60:11:BA:71:CB:DB:7E:01:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/18f5e240-d7a0-3a1e-bf76-1443ce2d9d90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:ca:41:15:49:8d:be:6a:16:05:80:4f:74:3c:6a:3d:35:16:
         09:65:a8:6c:b6:36:25:64:73:84:61:c7:34:58:8c:eb:b4:43:
         9c:2e:7d:4b:7d:60:d1:09:9c:fd:38:47:1b:bf:f8:29:88:30:
         92:fc:45:c8:f6:5f:ba:38:d3:f9:73:51:62:b5:bb:29:af:a6:
         8d:c7:ba:55:da:3d:bb:71:db:fc:a0:bd:50:83:5d:ab:5f:72:
         fb:8d:c8:75:22:8b:8d:f5:56:d0:3f:87:4a:83:f2:64:58:32:
         3c:a5:ad:bc:e9:7f:a9:2f:fd:82:f2:c5:2e:bf:da:6d:c8:6a:
         5a:74:f3:dd:27:57:ae:10:f4:f3:9c:12:76:57:8c:99:c7:b7:
         3d:96:39:ab:8c:cf:68:bd:51:5b:1e:2b:d7:33:9f:ef:4f:83:
         bf:bf:dc:8a:59:c5:39:b4:57:85:54:48:8c:99:13:48:a5:97:
         aa:bb:1a:ae:52:e2:c9:62:5b:c8:87:cd:09:e7:04:53:96:c4:
         27:0b:5f:92:13:9e:9e:af:af:fe:b4:7d:97:a4:c6:f1:11:a3:
         1e:80:87:06:ed:38:3d:9b:c8:01:05:2b:b2:ac:1e:fe:36:30:
         8c:83:a6:e4:fe:2a:56:e8:9e:fd:9f:aa:d0:fe:cb:0b:d2:97:
         c2:74:f8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:39:36 2026 by rpki-client