Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/504dac2e-4f45-3660-9977-d8a82efcc1aa.roa
File:                     504dac2e-4f45-3660-9977-d8a82efcc1aa.roa (raw, json)
Hash identifier:          Xj1eQe/6GyoKcEwqZlLZ4rHPHt5HI9H6EZSf0mK05tw=
Subject key identifier:   93:05:4C:12:D9:35:EB:EA:17:D0:2A:DB:F6:17:AD:8D:79:38:16:A4
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DD8D68F42030C954824D600
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/504dac2e-4f45-3660-9977-d8a82efcc1aa.roa
Signing time:             Tue 07 Apr 2026 16:21:35 +0000
ROA not before:           Tue 07 Apr 2026 16:21:35 +0000
ROA not after:            Mon 06 Jul 2026 16:21:35 +0000
asID:                     22427
IP address blocks:        45.38.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:d8:d6:8f:42:03:0c:95:48:24:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:21:35 2026 GMT
            Not After : Jul  6 16:21:35 2026 GMT
        Subject: CN=8ddca90b-78d9-4c41-abd6-c651263cfd1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b2:83:40:13:21:d0:2d:09:65:f1:3a:86:67:
                    60:da:0f:7c:dd:5d:a1:52:2c:13:35:a4:3f:2e:19:
                    ac:a9:68:2e:34:82:70:f5:b9:78:c0:26:30:6b:04:
                    ad:57:ea:a3:4b:a1:f9:b7:9f:c1:9f:ec:8c:5c:a0:
                    81:f7:84:ab:79:79:20:47:de:17:6d:13:b9:e6:75:
                    a7:af:46:73:63:f7:e9:6d:35:2c:85:9f:64:a5:e4:
                    b5:0d:9d:b0:74:2f:e0:7d:f5:45:73:71:6b:77:4a:
                    cc:28:98:f0:1b:95:26:86:cc:00:c1:c6:fe:a9:1f:
                    d9:a4:d2:3d:8a:23:2a:1d:84:2a:56:46:19:ab:51:
                    48:66:ff:75:55:90:8f:20:22:f1:33:3a:87:f7:d7:
                    23:1a:3d:96:f8:db:ab:c2:c3:c5:62:75:50:f0:55:
                    69:6a:e9:f0:17:a7:b0:81:28:a8:aa:bf:97:72:a9:
                    5c:8e:39:1f:80:68:ad:d0:69:e4:a6:0e:25:43:70:
                    59:19:72:61:5e:ba:0e:b2:ee:25:73:e8:c0:68:fa:
                    ac:8a:fe:55:e3:eb:3b:35:f7:10:dd:eb:d1:68:fb:
                    47:5b:68:a3:e5:0a:74:7f:d5:dc:82:18:76:8d:95:
                    8d:e7:dc:e6:94:ea:96:df:6d:71:02:c5:eb:d5:61:
                    49:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:05:4C:12:D9:35:EB:EA:17:D0:2A:DB:F6:17:AD:8D:79:38:16:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/504dac2e-4f45-3660-9977-d8a82efcc1aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:14:8d:8e:aa:40:13:27:8e:79:87:7d:55:e6:cc:ab:cb:47:
         17:bf:5d:18:ba:c9:39:4b:3e:79:94:76:89:0e:27:e1:42:97:
         00:78:2a:16:78:ff:0f:be:bc:7f:60:05:98:c3:53:d0:a9:ec:
         3d:3f:0f:8e:c8:03:36:ca:65:ce:3c:cb:5b:c3:ac:e9:92:78:
         01:bd:70:32:d4:35:0b:bd:48:2b:f3:45:c7:d1:0a:19:06:72:
         3c:94:19:9e:4c:10:14:72:83:2e:88:af:da:4a:08:5e:f5:6a:
         d2:9b:4b:1f:e7:2e:6d:69:cb:05:5f:97:31:90:7e:99:64:73:
         cd:00:0c:02:23:f1:7a:d5:80:1b:43:27:d7:18:93:7f:c3:79:
         ad:91:73:64:0a:a1:b2:1d:fa:70:6c:96:85:9c:a4:31:67:43:
         da:9e:ad:2c:92:8e:11:2d:96:50:ef:c6:77:cb:9e:84:f6:1b:
         89:2a:82:ea:91:5e:2c:02:fb:21:b5:c6:7a:b3:ea:16:b0:61:
         36:23:6a:7e:75:ad:5b:bd:cb:06:b1:6a:20:a8:b0:e5:db:7c:
         e5:31:99:95:5d:5d:5a:5a:c8:f3:8f:c9:f3:f8:08:a1:0e:a5:
         d6:15:b7:54:14:ea:60:f7:2b:be:3f:4b:81:ce:5e:f5:c8:08:
         52:58:7b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:39:16 2026 by rpki-client