Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2a222b9e-c5fc-3a6b-af8b-76a8db1080b9.roa
File:                     2a222b9e-c5fc-3a6b-af8b-76a8db1080b9.roa (raw, json)
Hash identifier:          kgmdNiSCLkHGV1bzHWT4Nxx1c3SLULkNHNSgnFJh0bA=
Subject key identifier:   8A:44:DD:ED:DE:00:5B:5A:EE:9E:A2:85:FF:0B:E5:7E:8A:DE:61:A3
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DD8D60734FB0A3A31545080
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2a222b9e-c5fc-3a6b-af8b-76a8db1080b9.roa
Signing time:             Tue 07 Apr 2026 16:21:35 +0000
ROA not before:           Tue 07 Apr 2026 16:21:35 +0000
ROA not after:            Mon 06 Jul 2026 16:21:35 +0000
asID:                     59711
IP address blocks:        45.38.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:d8:d6:07:34:fb:0a:3a:31:54:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:21:35 2026 GMT
            Not After : Jul  6 16:21:35 2026 GMT
        Subject: CN=22e774e7-8b43-443f-ab51-e80a09309e24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f4:f4:bf:bd:5f:29:70:d7:88:25:20:2c:e8:
                    23:d9:8a:ff:34:f3:61:78:58:e7:36:e4:7d:73:69:
                    ba:40:d7:ce:60:87:17:21:85:90:36:68:8f:4c:7d:
                    2e:86:cf:35:28:da:84:5e:e3:fd:92:3f:36:f9:24:
                    8b:bc:f8:ce:c8:5b:d3:23:58:e2:b0:da:68:0c:75:
                    79:2f:47:34:7c:02:c7:2f:38:d2:ee:b0:0d:f4:8e:
                    91:2c:5d:d9:6a:5b:6d:1b:56:14:d9:56:c8:80:dc:
                    66:47:41:25:36:ab:c3:f8:38:8b:7b:6b:de:0f:47:
                    40:06:70:f8:72:65:a3:90:a2:8e:69:a2:ce:84:f4:
                    ec:c9:2c:71:4b:ad:8a:31:90:17:90:9d:59:41:a6:
                    c4:0a:2e:49:a5:26:a1:df:c1:7a:0f:52:1a:ac:ed:
                    78:96:7b:fd:2c:61:bb:9c:88:5c:42:37:41:65:84:
                    c3:f8:2f:f0:bb:8e:0f:a3:f3:9e:2d:a4:63:5e:d0:
                    7e:4f:c6:b2:cb:54:4c:5e:79:3a:21:f6:e2:97:25:
                    47:2a:ac:51:8f:ca:b0:b3:b3:58:8d:e6:2b:b8:46:
                    31:db:3a:4d:3f:df:9f:90:d7:55:df:05:98:10:ab:
                    be:94:72:19:93:a7:ae:0d:15:fb:e1:ba:b1:b3:84:
                    9b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:44:DD:ED:DE:00:5B:5A:EE:9E:A2:85:FF:0B:E5:7E:8A:DE:61:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2a222b9e-c5fc-3a6b-af8b-76a8db1080b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:fe:49:d8:1f:6d:32:b5:6e:0b:b9:65:e1:b2:01:b3:d0:ce:
         50:e3:9b:1b:bf:0d:61:94:c4:a6:61:b8:0b:ec:9c:cb:fc:0f:
         e5:c1:c9:28:86:52:b1:db:3a:7a:55:36:53:18:ca:54:81:aa:
         e8:ef:dd:e2:37:2f:79:3c:b7:56:31:e0:a6:09:f1:de:8f:af:
         50:b4:92:73:ac:b4:67:6e:90:bb:cc:db:44:14:15:a7:15:f0:
         ea:4b:3f:c9:a7:5b:de:21:3b:05:07:21:b2:e0:20:a6:dc:8d:
         7d:94:e9:93:d8:f5:2a:b8:2f:ea:b7:91:20:ff:9f:5e:3a:d6:
         7d:10:64:b9:32:cc:3c:74:18:37:69:b0:85:17:6e:c9:d2:34:
         e5:67:75:01:ec:6f:ba:15:cf:8d:99:bd:09:13:87:23:47:ff:
         0c:55:50:e1:31:c2:96:eb:0f:7e:ab:99:a6:bf:cd:09:dd:e8:
         0b:98:cb:46:10:db:2a:2a:9a:5a:67:ab:cb:20:f2:83:09:d1:
         16:17:c0:1f:54:bc:fc:eb:2b:c4:00:50:cf:33:b5:00:47:01:
         8f:55:27:4f:12:36:1a:4e:e7:6a:09:c3:7e:72:22:20:14:da:
         1c:ce:63:c9:12:6f:b2:ca:70:ab:c9:a8:af:d6:6c:6e:91:62:
         ea:32:30:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:39:39 2026 by rpki-client