Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/3e2060f0-8bed-3a3b-87c8-f57f3140bfcf.roa
File:                     3e2060f0-8bed-3a3b-87c8-f57f3140bfcf.roa (raw, json)
Hash identifier:          JEYdXDPAvpaiNjM5YqjvFOIl0CydT2dV6GSJHII5V/c=
Subject key identifier:   C7:E4:19:D9:D8:FF:C2:A4:55:A4:E9:29:2F:77:EE:3E:8D:5C:89:03
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDB15D75455F709E8B15700
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/3e2060f0-8bed-3a3b-87c8-f57f3140bfcf.roa
Signing time:             Tue 07 Apr 2026 16:26:07 +0000
ROA not before:           Tue 07 Apr 2026 16:26:07 +0000
ROA not after:            Mon 06 Jul 2026 16:26:07 +0000
asID:                     3257
IP address blocks:        45.39.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:db:15:d7:54:55:f7:09:e8:b1:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:26:07 2026 GMT
            Not After : Jul  6 16:26:07 2026 GMT
        Subject: CN=1c2d3a6c-ed19-4088-9ab0-639f7fc49bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a2:78:42:73:b8:09:20:8a:f5:91:85:d8:48:
                    1f:79:7c:e9:e2:3d:33:1a:eb:c8:92:4d:e3:4d:e4:
                    e3:32:16:30:bc:c4:1f:a3:8e:b1:2e:39:9d:c5:9c:
                    34:04:ef:9e:e0:24:a3:6b:b9:b4:b1:2d:3a:98:c8:
                    65:c6:25:00:c5:18:39:ee:6d:65:d7:17:52:8d:15:
                    57:12:fc:1c:53:49:88:66:ea:10:c8:db:bd:dc:0d:
                    3f:83:04:27:a8:85:42:bc:46:9c:73:e1:5b:df:dc:
                    15:47:04:b9:78:57:6d:8f:fe:b7:9a:4f:7a:26:e3:
                    84:85:2d:08:4d:cc:91:56:49:ca:5b:72:2f:c0:d7:
                    27:1d:fe:fa:63:b3:68:30:ec:c1:d6:19:48:1c:0b:
                    e1:5b:87:fd:65:25:b2:d6:4d:79:5d:1e:06:0a:5d:
                    05:7f:03:b9:46:0e:da:f4:b7:27:1e:5f:6c:ef:43:
                    28:16:d0:ba:8f:5b:09:39:00:e2:8a:7c:34:8d:90:
                    10:2d:91:d9:0e:a7:3d:fe:17:5f:24:f6:c5:8a:3f:
                    73:c3:3e:0a:eb:1c:a4:7d:2a:a5:fe:09:70:e8:aa:
                    d3:d4:64:a6:44:66:1d:99:af:3b:a8:22:ee:18:b1:
                    2d:0c:bf:7d:60:4a:da:a6:ae:6e:df:e8:16:08:4a:
                    ca:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E4:19:D9:D8:FF:C2:A4:55:A4:E9:29:2F:77:EE:3E:8D:5C:89:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/3e2060f0-8bed-3a3b-87c8-f57f3140bfcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:3f:91:e4:f9:58:23:1b:4f:49:f1:30:ef:8a:44:d0:02:d2:
         3e:39:25:42:d1:64:55:2a:47:8c:93:6b:9e:11:03:20:a9:6e:
         e5:70:e4:a7:fc:54:6d:6c:07:1f:97:e3:a8:d1:e1:db:83:11:
         80:e1:76:04:9a:e7:07:62:de:17:40:f1:ae:81:dc:80:4c:72:
         3f:e7:0f:41:67:a5:78:10:ec:fd:43:b8:89:cb:bc:b6:39:68:
         0b:93:50:3b:d8:69:f4:9e:35:b2:0d:15:e6:4f:1f:42:68:8f:
         6a:6c:08:b6:21:9c:2f:44:e7:0f:19:a0:6b:3d:5a:70:ef:8c:
         1d:d1:86:ed:a3:32:69:3a:11:34:ee:65:77:91:68:2f:f1:4a:
         cf:75:f0:5b:fa:20:ac:1f:7e:8d:b7:b6:d2:8c:c8:a3:b5:d9:
         51:d9:42:da:74:67:c2:88:a6:d0:fa:b5:cf:3e:67:29:cb:1c:
         05:7b:cf:cf:54:12:7f:35:83:6e:0f:98:68:84:00:94:70:44:
         13:e9:8a:cc:19:be:bf:ef:bb:30:ae:3f:1b:d1:a3:ad:57:19:
         81:03:29:22:50:99:7c:ba:3f:16:fb:72:bd:6f:1b:c0:80:f9:
         0e:35:24:38:d4:6f:ca:63:73:e4:fd:9d:6c:e1:18:80:de:32:
         45:59:2d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:42:38 2026 by rpki-client