Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/38d15859-0f2b-37cf-a921-477911171e1f.roa
File:                     38d15859-0f2b-37cf-a921-477911171e1f.roa (raw, json)
Hash identifier:          ufGcE/36uvuFqLSlR4X1vzGwz4AkmKPUKb7pRS+WlIU=
Subject key identifier:   73:6A:6E:C9:94:8B:07:50:87:DC:77:E3:12:88:3E:6A:8D:2F:1F:9E
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDAFE17181CC283FCE99A90
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/38d15859-0f2b-37cf-a921-477911171e1f.roa
Signing time:             Tue 07 Apr 2026 16:25:56 +0000
ROA not before:           Tue 07 Apr 2026 16:25:56 +0000
ROA not after:            Mon 06 Jul 2026 16:25:56 +0000
asID:                     9009
IP address blocks:        45.39.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:da:fe:17:18:1c:c2:83:fc:e9:9a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:25:56 2026 GMT
            Not After : Jul  6 16:25:56 2026 GMT
        Subject: CN=d166db01-a00e-4a82-bac7-3888eb922f11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d5:91:3f:d9:0a:5b:43:76:1e:d2:d7:0a:19:
                    ab:e1:3e:03:2e:aa:1e:10:f2:06:c6:37:ee:fe:24:
                    d1:a2:db:d1:4c:95:63:4d:55:6a:63:1e:19:ef:71:
                    6b:fd:e6:a4:18:9c:16:81:1b:25:00:51:f2:7d:c4:
                    e2:fb:68:3b:93:63:70:d1:d6:05:f6:4a:b3:a6:80:
                    5d:90:58:f7:14:df:d7:b4:36:ba:ff:95:62:92:b1:
                    a1:90:d5:71:c1:fd:2f:73:54:3b:a1:8a:dd:41:34:
                    77:b3:06:86:2f:8e:ea:c5:a0:90:d9:44:64:77:ae:
                    dd:82:63:4b:a9:7e:73:3f:6d:0c:71:25:5a:2b:7e:
                    d5:76:e4:da:6f:fa:d3:b9:3b:74:fb:be:65:26:8e:
                    09:f5:85:31:8d:73:c8:64:38:40:43:71:dc:99:fc:
                    97:d9:1b:a4:29:3d:22:d4:9b:3e:3e:ab:8a:06:96:
                    49:0f:12:3e:46:ea:db:99:d1:2c:a2:f6:b2:9b:7a:
                    b9:ea:87:5f:4e:11:a9:62:85:e0:0e:88:b0:e4:c9:
                    1d:63:75:3f:2f:2c:fa:ba:cb:ae:0c:e1:75:3d:44:
                    9f:90:40:02:a2:81:7c:34:99:e8:1f:29:68:9a:d7:
                    31:6f:51:28:36:6c:96:0f:17:8a:0b:51:c3:b7:79:
                    ad:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:6A:6E:C9:94:8B:07:50:87:DC:77:E3:12:88:3E:6A:8D:2F:1F:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/38d15859-0f2b-37cf-a921-477911171e1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:c0:06:30:60:bf:63:40:ff:fc:9d:df:2c:3a:2b:5b:e7:39:
         c1:22:3f:80:40:a3:04:37:8b:a2:f2:b7:8d:a2:60:56:17:ec:
         9c:7a:ea:aa:19:04:6b:97:19:f3:92:dd:a2:0a:88:0d:b8:de:
         f1:da:4f:a2:34:33:c7:a3:0f:0b:69:4e:8c:69:fb:23:ab:8e:
         db:51:97:53:00:b7:c8:f2:9d:13:e1:bd:ec:1b:bf:04:32:bc:
         82:02:74:27:c5:21:4c:c8:ad:fe:a1:52:34:98:52:e6:97:ee:
         7b:30:98:3b:f4:6a:b5:c1:b1:78:10:01:04:29:99:3c:e6:02:
         2d:dd:ac:55:46:68:e4:f6:fc:86:41:02:41:d1:e6:de:15:29:
         da:fe:62:9b:ed:9d:0f:e6:4c:e0:32:bb:d0:07:4b:0a:56:14:
         32:73:09:3b:48:89:cb:81:b2:29:bd:6c:eb:5f:2d:f9:f8:c9:
         04:39:6f:53:32:2d:1c:e9:ae:d4:1f:35:84:f8:4a:d6:31:3f:
         61:34:31:f2:e6:9a:4f:bd:36:fc:5e:9d:95:17:cc:a4:81:3d:
         ac:79:e0:47:30:f8:52:43:29:8d:7c:7f:dd:2d:62:d7:a5:9a:
         d5:0f:13:93:7b:4c:17:f0:1d:14:74:32:52:26:46:bd:19:d3:
         31:f1:ee:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:42:58 2026 by rpki-client