Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/4ad18ee8-7c55-33e0-94d6-3bbe9bdc5fa9.roa
File:                     4ad18ee8-7c55-33e0-94d6-3bbe9bdc5fa9.roa (raw, json)
Hash identifier:          rybnq1uvZWr2iaCP0sPzF+7LdbYMdAXwQ7B5CDOawqY=
Subject key identifier:   76:30:DE:70:42:D4:34:CD:11:64:08:8B:52:6C:83:CE:51:45:EA:4A
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDA35609E9B2E0BBBE5EA80
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/4ad18ee8-7c55-33e0-94d6-3bbe9bdc5fa9.roa
Signing time:             Tue 07 Apr 2026 16:24:21 +0000
ROA not before:           Tue 07 Apr 2026 16:24:21 +0000
ROA not after:            Mon 06 Jul 2026 16:24:21 +0000
asID:                     18779
IP address blocks:        45.39.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:da:35:60:9e:9b:2e:0b:bb:e5:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:24:21 2026 GMT
            Not After : Jul  6 16:24:21 2026 GMT
        Subject: CN=31845e70-0b59-4cb5-a1f3-d3b4adad111b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:50:30:e1:75:5b:a9:35:77:eb:78:3c:fb:77:
                    c1:1b:5a:90:14:e5:01:7f:03:d8:49:00:3d:d7:40:
                    a0:25:b9:18:a0:29:fa:12:9a:0c:ec:ea:bd:4d:5d:
                    16:89:c5:9b:df:ea:c4:59:94:f7:c6:db:5b:cc:7c:
                    2e:df:c4:dd:d7:b9:9e:79:e3:24:52:22:72:c3:db:
                    e1:51:e5:af:9b:ee:d7:86:89:4d:e9:2a:0f:68:1b:
                    2b:ab:1f:2a:67:f5:0f:a3:37:55:f3:36:58:7e:04:
                    36:e5:2b:e1:68:da:19:bd:57:60:09:a1:cc:1f:f0:
                    a6:7e:3e:aa:6e:f8:fa:c1:87:65:d7:ee:fa:c9:f9:
                    b5:82:91:09:f1:72:99:12:75:2b:bf:f6:1e:e4:fa:
                    70:ae:be:91:87:76:b7:d0:18:00:93:10:fd:c6:b5:
                    e6:12:94:bd:17:98:3a:d0:16:b9:5f:a7:87:5e:47:
                    f8:54:64:05:e6:03:7b:bf:8c:a2:0e:37:74:dd:95:
                    5e:a9:ea:6a:3b:02:fb:b5:31:0c:2f:b4:2b:a4:8c:
                    cf:11:71:54:c1:f0:86:69:8c:17:a4:1b:54:ea:0d:
                    65:ec:d4:cc:87:95:88:54:b7:85:de:ec:3d:83:bb:
                    db:bc:e1:c5:b0:2d:1c:30:f7:9f:df:5f:91:c3:8f:
                    78:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:30:DE:70:42:D4:34:CD:11:64:08:8B:52:6C:83:CE:51:45:EA:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/4ad18ee8-7c55-33e0-94d6-3bbe9bdc5fa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:12:34:f2:ff:12:0c:f1:2e:01:18:90:56:00:db:2e:0c:81:
         46:ba:a3:23:70:ed:be:bf:7d:09:fd:bb:7a:d5:f5:16:4c:3e:
         1e:c6:f0:57:11:7a:16:41:6f:a5:35:25:52:24:49:04:5d:b7:
         33:03:5a:2f:c4:2f:17:a3:50:a6:43:6e:8d:7a:ee:e0:47:38:
         4b:73:1d:69:66:bf:0b:0b:d8:69:3d:75:bc:e6:59:03:f1:3d:
         ec:ca:da:4d:7e:be:1d:65:25:0c:78:07:49:84:32:75:d9:aa:
         76:69:28:91:49:bd:83:d1:56:e0:d7:dd:b0:e3:6a:1c:4f:b0:
         cd:65:5f:76:9d:da:11:a5:ba:82:00:da:24:08:91:c5:1b:0a:
         b4:31:f2:db:1a:e8:94:1d:7e:d3:49:b5:38:1c:4d:70:02:26:
         8d:e4:dd:d9:de:1e:a2:77:9c:68:62:34:4b:55:aa:76:2d:33:
         90:1c:9f:d3:05:a7:9a:01:dd:3e:1c:34:2d:4f:bc:8d:76:8f:
         a1:1c:75:fe:79:c5:ff:cd:1b:56:88:27:5a:e6:29:4e:e4:b7:
         3e:a3:e0:a9:ad:b5:c1:1e:64:7d:87:74:f6:26:90:d2:19:ac:
         fc:a0:67:10:98:31:7a:8b:1a:03:1d:fd:f3:46:02:08:a8:2f:
         2c:7b:28:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1t2jVgnpsuC7vl6oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDQwNzE2MjQyMVoXDTI2MDcwNjE2MjQyMVowLzEtMCsGA1UEAxMk
MzE4NDVlNzAtMGI1OS00Y2I1LWExZjMtZDNiNGFkYWQxMTFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FAw4XVbqTV363g8+3fBG1qQFOUBfwPYSQA9
10CgJbkYoCn6EpoM7Oq9TV0WicWb3+rEWZT3xttbzHwu38Td17meeeMkUiJyw9vh
UeWvm+7XholN6SoPaBsrqx8qZ/UPozdV8zZYfgQ25SvhaNoZvVdgCaHMH/Cmfj6q
bvj6wYdl1+76yfm1gpEJ8XKZEnUrv/Ye5Ppwrr6Rh3a30BgAkxD9xrXmEpS9F5g6
0Ba5X6eHXkf4VGQF5gN7v4yiDjd03ZVeqepqOwL7tTEML7QrpIzPEXFUwfCGaYwX
pBtU6g1l7NTMh5WIVLeF3uw9g7vbvOHFsC0cMPef31+Rw494mwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHYw3nBC1DTNEWQIi1Jsg85RRepKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvNGFkMThlZTgtN2M1NS0z
M2UwLTk0ZDYtM2JiZTliZGM1ZmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSctMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABwSNPL/EgzxLgEYkFYA2y4MgUa6oyNw7b6/fQn9u3rV9RZMPh7G8FcR
ehZBb6U1JVIkSQRdtzMDWi/ELxejUKZDbo167uBHOEtzHWlmvwsL2Gk9dbzmWQPx
PezK2k1+vh1lJQx4B0mEMnXZqnZpKJFJvYPRVuDX3bDjahxPsM1lX3ad2hGluoIA
2iQIkcUbCrQx8tsa6JQdftNJtTgcTXACJo3k3dneHqJ3nGhiNEtVqnYtM5Acn9MF
p5oB3T4cNC1PvI12j6Ecdf55xf/NG1aIJ1rmKU7ktz6j4KmttcEeZH2HdPYmkNIZ
rPygZxCYMXqLGgMd/fNGAgioLyx7KCI=
-----END CERTIFICATE-----
Generated at Wed Apr 8 01:40:42 2026 by rpki-client