Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2c023d94-446a-36b5-afc1-90bb1a735f4f.roa
File:                     2c023d94-446a-36b5-afc1-90bb1a735f4f.roa (raw, json)
Hash identifier:          VxkpuAzQifkEJiOQxNvslpqBq0MP4BRygY/Z7w9O/tA=
Subject key identifier:   70:9D:B9:8E:56:D2:CE:49:44:79:96:9C:92:3D:47:75:3F:3D:6B:B7
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DD9BC9E37A6C21B0CE42A80
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2c023d94-446a-36b5-afc1-90bb1a735f4f.roa
Signing time:             Tue 07 Apr 2026 16:23:24 +0000
ROA not before:           Tue 07 Apr 2026 16:23:24 +0000
ROA not after:            Mon 06 Jul 2026 16:23:24 +0000
asID:                     205220
IP address blocks:        45.38.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:d9:bc:9e:37:a6:c2:1b:0c:e4:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:23:24 2026 GMT
            Not After : Jul  6 16:23:24 2026 GMT
        Subject: CN=173a73e6-990e-46d8-90e3-ce18d1466c58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:58:87:ca:7d:04:56:4c:3b:5a:7e:56:33:64:
                    ec:3a:0a:98:11:64:df:a7:87:a7:ef:a7:61:6c:0d:
                    c7:7b:07:11:93:d9:54:7d:21:a1:79:59:29:c3:71:
                    8c:84:c7:a4:b4:2a:e4:27:47:59:cb:2f:c5:b2:cf:
                    e2:0f:67:c6:d8:a3:93:f3:4e:ff:39:63:09:5b:1f:
                    da:18:53:33:8e:7e:57:a1:96:49:b6:cc:53:dd:9e:
                    54:83:49:f6:48:95:ef:5d:6a:5b:cf:98:7e:21:19:
                    fb:0f:ec:45:10:47:ae:8d:03:a9:e9:da:ff:1b:f8:
                    91:90:c8:9d:7c:e1:2b:fa:4c:c7:56:ab:4c:02:a2:
                    a5:65:ae:35:c2:9e:f2:a5:f7:72:09:e6:ea:67:74:
                    2d:e9:3e:8a:75:53:07:31:f4:0a:09:06:7f:27:df:
                    5c:39:ae:91:48:2e:9f:70:cf:40:d1:8a:2e:7f:69:
                    98:cf:fb:ab:e1:c8:b0:cc:73:bc:1d:61:19:9a:42:
                    37:9a:36:23:2b:a3:62:24:c0:71:5b:09:97:2c:b1:
                    5a:c4:85:df:4a:3a:30:12:4f:02:ad:32:65:39:de:
                    7d:89:29:09:14:b7:ae:41:82:6d:f3:78:9f:1e:a6:
                    d4:6a:48:f7:42:ee:54:d6:af:db:93:5c:b2:7f:f2:
                    b2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:9D:B9:8E:56:D2:CE:49:44:79:96:9C:92:3D:47:75:3F:3D:6B:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2c023d94-446a-36b5-afc1-90bb1a735f4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:a0:fd:6e:42:b7:df:da:37:11:1c:1d:63:cc:15:04:50:25:
         ee:96:a2:e4:9d:d6:6e:b4:79:86:84:a1:a8:6c:08:8a:b1:7a:
         66:b4:c0:a9:c6:41:0c:2f:3f:af:d0:58:30:06:72:d0:2e:c6:
         86:43:8b:6b:e8:0b:e3:07:0e:b9:cb:df:f6:b9:4b:3a:86:1a:
         14:00:da:f0:be:52:92:8f:3f:3f:9e:ea:2a:6f:14:d1:0d:ab:
         b1:58:84:6d:04:06:8d:f4:64:00:af:59:9c:dc:de:e8:34:9f:
         99:22:d1:1e:92:54:50:47:ee:75:b2:29:a3:5a:06:37:65:fa:
         03:b5:0e:e6:8a:d1:3c:83:ba:24:62:1b:d0:68:e6:df:d2:4c:
         34:bb:4b:c0:b6:90:6d:19:16:cd:a4:7d:0d:71:7e:a7:67:45:
         18:67:5d:6d:c7:35:e8:e4:e0:1c:a0:84:e7:d4:cc:28:f2:b5:
         33:7c:2e:f1:c6:6f:4e:be:c5:c0:c8:f6:7c:47:a9:26:a4:cc:
         15:99:2f:f9:87:e9:d9:02:23:ac:98:38:7e:72:54:28:40:93:
         7b:42:64:65:e9:d3:9a:ae:6b:94:e6:79:cb:c8:ab:c1:eb:95:
         48:b4:6f:87:da:70:8e:1c:bf:7e:91:b7:d8:90:f3:fe:95:eb:
         10:c4:83:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1t2byeN6bCGwzkKoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDQwNzE2MjMyNFoXDTI2MDcwNjE2MjMyNFowLzEtMCsGA1UEAxMk
MTczYTczZTYtOTkwZS00NmQ4LTkwZTMtY2UxOGQxNDY2YzU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvliHyn0EVkw7Wn5WM2TsOgqYEWTfp4en76dh
bA3HewcRk9lUfSGheVkpw3GMhMektCrkJ0dZyy/Fss/iD2fG2KOT807/OWMJWx/a
GFMzjn5XoZZJtsxT3Z5Ug0n2SJXvXWpbz5h+IRn7D+xFEEeujQOp6dr/G/iRkMid
fOEr+kzHVqtMAqKlZa41wp7ypfdyCebqZ3Qt6T6KdVMHMfQKCQZ/J99cOa6RSC6f
cM9A0Youf2mYz/ur4ciwzHO8HWEZmkI3mjYjK6NiJMBxWwmXLLFaxIXfSjowEk8C
rTJlOd59iSkJFLeuQYJt83ifHqbUakj3Qu5U1q/bk1yyf/KywQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHCduY5W0s5JRHmWnJI9R3U/PWu3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvMmMwMjNkOTQtNDQ2YS0z
NmI1LWFmYzEtOTBiYjFhNzM1ZjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSaZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACig/W5Ct9/aNxEcHWPMFQRQJe6WouSd1m60eYaEoahsCIqxema0wKnG
QQwvP6/QWDAGctAuxoZDi2voC+MHDrnL3/a5SzqGGhQA2vC+UpKPPz+e6ipvFNEN
q7FYhG0EBo30ZACvWZzc3ug0n5ki0R6SVFBH7nWyKaNaBjdl+gO1DuaK0TyDuiRi
G9Bo5t/STDS7S8C2kG0ZFs2kfQ1xfqdnRRhnXW3HNejk4ByghOfUzCjytTN8LvHG
b06+xcDI9nxHqSakzBWZL/mH6dkCI6yYOH5yVChAk3tCZGXp05qua5TmecvIq8Hr
lUi0b4facI4cv36Rt9iQ8/6V6xDEg3g=
-----END CERTIFICATE-----
Generated at Wed Apr 8 01:42:59 2026 by rpki-client