Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/297af2be-56e0-314f-96d9-dbfdf1e34a29.roa
File:                     297af2be-56e0-314f-96d9-dbfdf1e34a29.roa (raw, json)
Hash identifier:          a7g8wDJLrKVmg0hl053UCEwOyj1Cct98Hu07JnCwbq0=
Subject key identifier:   2D:D1:CA:4F:A4:75:27:99:CD:FD:57:4E:43:6D:EA:62:DB:24:AC:DA
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DD7A30AD0A19A3E219B5200
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/297af2be-56e0-314f-96d9-dbfdf1e34a29.roa
Signing time:             Tue 07 Apr 2026 16:19:10 +0000
ROA not before:           Tue 07 Apr 2026 16:19:10 +0000
ROA not after:            Mon 06 Jul 2026 16:19:10 +0000
asID:                     834
IP address blocks:        45.38.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:d7:a3:0a:d0:a1:9a:3e:21:9b:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:19:10 2026 GMT
            Not After : Jul  6 16:19:10 2026 GMT
        Subject: CN=f4373e49-22ca-4943-a546-4bea18f03b03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cb:94:74:ce:ae:bb:6d:82:33:42:a2:18:cf:
                    05:07:45:f7:a4:f5:82:0b:fa:f9:0e:a2:91:d6:9c:
                    83:36:fe:29:ed:0b:70:11:5f:2f:be:33:2f:0d:60:
                    68:f0:f8:a0:26:20:ee:a7:06:7f:b5:d3:dd:eb:dd:
                    59:bd:5e:bd:5b:85:56:46:38:cd:36:bf:3a:f0:2b:
                    bd:63:67:17:12:be:64:7d:4b:9e:ea:fd:6f:f5:fc:
                    83:43:d9:3f:17:26:ca:a0:5e:5c:83:c6:92:fc:93:
                    d0:5c:58:8d:ef:bf:f3:f8:a0:a1:e1:7d:9d:c7:a4:
                    f1:88:b7:a5:b3:59:60:0c:d9:15:21:89:9a:e8:f8:
                    88:99:15:f1:3d:4c:8a:15:ac:c9:bf:83:e3:58:0a:
                    0e:c0:58:a1:5b:f9:5e:20:34:13:6d:8b:57:f4:c2:
                    4d:bc:39:0c:b5:b7:3f:4f:8e:6b:bb:1e:65:2b:25:
                    ed:7f:02:c0:15:d1:e8:42:26:a6:74:56:62:1f:35:
                    83:c0:c6:57:f2:bd:0d:42:e4:d5:ec:95:f5:e8:65:
                    37:47:e1:b5:40:f9:bc:80:04:78:4c:a4:80:8c:31:
                    d6:d7:46:a0:69:3c:12:c5:1f:f7:38:55:23:0c:0b:
                    c5:52:01:40:12:e5:4d:ed:17:ca:8f:6b:4e:6d:64:
                    bf:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D1:CA:4F:A4:75:27:99:CD:FD:57:4E:43:6D:EA:62:DB:24:AC:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/297af2be-56e0-314f-96d9-dbfdf1e34a29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:e3:95:59:7f:e3:61:1c:d4:9a:e5:be:75:b2:ad:74:ba:55:
         1a:72:01:26:af:bd:0c:bb:a1:e3:36:87:ea:04:9b:6d:79:29:
         1a:f7:6b:82:c3:00:c4:79:d0:5d:5b:29:e0:cd:cc:b7:58:84:
         6d:d6:10:7b:b8:10:22:18:fa:9a:e8:ac:fb:cc:dd:00:57:91:
         d7:64:1f:a6:df:f1:b4:c3:b1:65:2c:13:43:81:fc:ac:e7:ad:
         38:47:66:b1:44:5e:50:fb:d1:cb:d3:12:d8:02:b8:d5:b8:7a:
         74:9c:fc:9e:18:dc:79:02:3a:b4:77:e1:85:34:53:26:65:67:
         a3:0d:d5:81:1e:6d:c1:2f:48:c0:fc:3e:9c:06:d5:d4:1e:77:
         35:0e:45:be:30:99:c7:9f:95:a7:1c:b9:79:fb:5a:af:30:96:
         57:a7:c8:69:7c:7e:73:4f:c4:7e:f3:6d:6d:fa:a9:a0:91:50:
         8a:05:f2:68:e0:86:06:d7:c8:92:90:69:93:d5:16:fe:cb:4b:
         1c:63:1c:86:75:96:f9:bb:60:f3:04:fa:7a:9a:f3:f4:8b:a2:
         55:1f:37:d1:18:6b:ad:8e:7c:79:10:b3:cf:dd:78:22:cb:2d:
         56:b9:6e:92:ca:1e:d3:25:ec:bd:e2:a3:62:92:5a:ca:1f:bb:
         08:51:cb:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1t16MK0KGaPiGbUgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDQwNzE2MTkxMFoXDTI2MDcwNjE2MTkxMFowLzEtMCsGA1UEAxMk
ZjQzNzNlNDktMjJjYS00OTQzLWE1NDYtNGJlYTE4ZjAzYjAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8uUdM6uu22CM0KiGM8FB0X3pPWCC/r5DqKR
1pyDNv4p7QtwEV8vvjMvDWBo8PigJiDupwZ/tdPd691ZvV69W4VWRjjNNr868Cu9
Y2cXEr5kfUue6v1v9fyDQ9k/FybKoF5cg8aS/JPQXFiN77/z+KCh4X2dx6TxiLel
s1lgDNkVIYma6PiImRXxPUyKFazJv4PjWAoOwFihW/leIDQTbYtX9MJNvDkMtbc/
T45rux5lKyXtfwLAFdHoQiamdFZiHzWDwMZX8r0NQuTV7JX16GU3R+G1QPm8gAR4
TKSAjDHW10agaTwSxR/3OFUjDAvFUgFAEuVN7RfKj2tObWS/1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC3Ryk+kdSeZzf1XTkNt6mLbJKzaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvMjk3YWYyYmUtNTZlMC0z
MTRmLTk2ZDktZGJmZGYxZTM0YTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSZTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAHjlVl/42Ec1JrlvnWyrXS6VRpyASavvQy7oeM2h+oEm215KRr3a4LD
AMR50F1bKeDNzLdYhG3WEHu4ECIY+prorPvM3QBXkddkH6bf8bTDsWUsE0OB/Kzn
rThHZrFEXlD70cvTEtgCuNW4enSc/J4Y3HkCOrR34YU0UyZlZ6MN1YEebcEvSMD8
PpwG1dQedzUORb4wmceflaccuXn7Wq8wllenyGl8fnNPxH7zbW36qaCRUIoF8mjg
hgbXyJKQaZPVFv7LSxxjHIZ1lvm7YPME+nqa8/SLolUfN9EYa62OfHkQs8/deCLL
LVa5bpLKHtMl7L3io2KSWsofuwhRy4g=
-----END CERTIFICATE-----
Generated at Wed Apr 8 01:39:27 2026 by rpki-client