Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/534b2a24-cfa0-3883-9898-ddc922d5c963.roa
File:                     534b2a24-cfa0-3883-9898-ddc922d5c963.roa (raw, json)
Hash identifier:          2DyHED2It6LC07F5xsCBnwsjqZ9nCKkuD8dOZzCEVco=
Subject key identifier:   28:F1:0E:41:EA:01:5A:09:E4:8C:82:99:CF:73:9C:C5:7C:ED:D3:1F
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DD7CBE137EF53BA78965A40
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/534b2a24-cfa0-3883-9898-ddc922d5c963.roa
Signing time:             Tue 07 Apr 2026 16:19:29 +0000
ROA not before:           Tue 07 Apr 2026 16:19:29 +0000
ROA not after:            Mon 06 Jul 2026 16:19:29 +0000
asID:                     834
IP address blocks:        45.39.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:d7:cb:e1:37:ef:53:ba:78:96:5a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:19:29 2026 GMT
            Not After : Jul  6 16:19:29 2026 GMT
        Subject: CN=99121a0e-f162-42bc-9f56-b2a068a3421e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:60:ed:d3:4f:34:bb:05:1b:ed:c3:02:24:ea:
                    ea:74:26:11:07:4f:93:f9:30:71:8f:ee:95:25:10:
                    38:62:83:40:40:da:a9:10:14:ea:eb:2e:b9:ca:36:
                    de:7a:29:04:6d:95:e1:d5:e0:81:94:b1:8f:f7:b4:
                    b2:ab:58:a1:b5:65:fb:cd:50:d2:d6:39:4a:48:84:
                    5b:7f:78:b6:0e:cb:1d:8e:2a:5b:bc:76:1d:65:e8:
                    79:ea:a5:87:b4:e4:ae:1c:6b:65:4b:58:fd:bd:94:
                    a6:f6:92:92:fc:00:da:2c:81:cc:ad:f0:70:33:e6:
                    ec:7e:f7:42:7a:d8:28:15:de:b4:38:3a:7f:91:ed:
                    e6:b0:47:9b:df:69:c6:b5:70:ff:47:9a:dc:5a:1c:
                    2c:ec:c5:b6:fe:1c:5a:0e:54:f3:bc:84:2a:09:c0:
                    95:2d:bd:a3:31:ba:9a:69:bb:d7:18:06:af:fa:ad:
                    6d:e2:5b:ec:f9:a8:db:76:66:8a:4e:1d:9e:c6:f8:
                    23:75:c6:4a:f8:eb:95:7c:f0:9f:41:e8:95:f6:3b:
                    74:9a:8a:15:af:62:23:b3:30:3a:44:9b:fb:f2:eb:
                    cd:cd:20:da:43:4e:ee:9c:f3:d3:76:6a:5c:b4:f1:
                    3d:6b:c4:db:93:f5:f7:e5:8d:b0:3c:a1:ed:ba:3d:
                    2d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F1:0E:41:EA:01:5A:09:E4:8C:82:99:CF:73:9C:C5:7C:ED:D3:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/534b2a24-cfa0-3883-9898-ddc922d5c963.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:b4:f4:b1:5f:96:16:67:ff:24:85:69:27:d1:8b:2b:14:ef:
         57:9c:16:fa:3a:47:5b:ce:83:b9:e8:c1:5d:02:87:e9:4d:f5:
         92:92:47:05:ff:f1:42:ba:2b:2a:2f:a7:0f:5f:95:b0:11:ec:
         c3:28:91:fe:c3:b2:fa:ab:72:a7:21:cd:9d:f7:c7:02:83:6c:
         af:43:b3:6c:96:9d:fc:43:c6:21:f2:b7:38:0f:b7:13:d6:22:
         04:65:c2:b4:a1:37:76:85:07:96:01:e9:a7:cf:55:5a:f4:d2:
         f2:53:42:2f:59:26:2d:5b:2c:e8:b5:e8:9d:0b:d2:2c:f6:5c:
         94:ed:0e:da:4e:d1:8a:b3:5e:4b:bb:b9:77:61:5e:3a:13:2a:
         10:53:d7:f5:44:e9:cf:09:8e:4f:48:07:b2:4f:06:ff:97:d6:
         c3:77:75:19:59:0c:29:ed:ca:b2:39:d3:e4:60:ac:66:c0:f8:
         b1:7f:ea:9a:f8:1f:48:78:8c:cb:12:82:9c:90:9d:57:b2:1c:
         26:db:45:03:af:dd:97:3d:0b:46:43:10:1b:91:d5:55:7e:52:
         b3:11:d0:c2:44:87:07:77:f6:66:5d:99:b0:7f:5d:dc:15:38:
         64:e3:bf:d3:62:a7:05:22:c6:0c:05:7a:15:77:1e:47:8e:56:
         cb:00:01:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:42:59 2026 by rpki-client