Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/6b11a3e9-0132-3d9c-a6b4-25645c8d2154.roa
File:                     6b11a3e9-0132-3d9c-a6b4-25645c8d2154.roa (raw, json)
Hash identifier:          wsa3N8fKnEztgomjEtgPNJ1rJt+0eF+4Ynhg/KEM7YI=
Subject key identifier:   5A:99:AC:5E:DD:A5:1F:B6:E7:15:75:9E:DD:C8:99:86:44:41:45:46
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDB2F2D907C98D112FF3240
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/6b11a3e9-0132-3d9c-a6b4-25645c8d2154.roa
Signing time:             Tue 07 Apr 2026 16:26:19 +0000
ROA not before:           Tue 07 Apr 2026 16:26:19 +0000
ROA not after:            Mon 06 Jul 2026 16:26:19 +0000
asID:                     40676
IP address blocks:        45.39.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:db:2f:2d:90:7c:98:d1:12:ff:32:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:26:19 2026 GMT
            Not After : Jul  6 16:26:19 2026 GMT
        Subject: CN=85ae1432-7849-48c8-872e-ddd3de4e6f33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1d:6b:f3:ee:47:4c:31:19:0e:f2:97:56:2a:
                    4a:93:e0:ae:18:53:8b:18:c2:d8:b9:e7:a4:be:d5:
                    43:f5:f8:30:8e:f6:70:e1:c8:62:2b:6a:0e:3b:ff:
                    47:b2:ac:6d:e9:14:31:0d:61:9f:dd:a2:43:c5:41:
                    dc:54:55:24:4b:2d:1b:4f:46:a3:b1:9f:7b:41:c9:
                    59:1f:37:ac:d5:fc:f8:1b:1c:2e:bf:81:ad:6a:2b:
                    9c:81:27:da:ea:87:56:3b:5f:6e:e4:f4:8e:2f:76:
                    c9:71:3c:ad:9b:87:26:a5:8d:77:e4:d9:71:eb:63:
                    61:13:15:4e:e6:8c:b9:fc:3e:ff:0a:dd:6b:70:c4:
                    05:a4:1d:c7:70:ca:7b:0e:ac:3f:48:9e:a4:81:2a:
                    91:6f:f7:c3:ee:61:d2:f6:3b:e4:01:35:72:8a:05:
                    f9:3a:dd:3d:c6:ee:1b:f7:74:28:96:06:0a:3e:a2:
                    9c:e7:3c:c0:bc:62:d7:ee:a0:47:50:aa:38:80:69:
                    7b:bb:5b:13:f0:96:69:97:73:52:24:e2:20:bd:77:
                    68:9f:21:f0:ed:0a:21:79:6b:06:a5:cc:07:8d:f3:
                    24:e7:4f:d9:7f:b4:eb:0d:76:4d:72:40:05:2d:dc:
                    c7:26:a2:4b:1a:61:c3:f9:eb:e9:aa:65:61:a9:2c:
                    20:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:99:AC:5E:DD:A5:1F:B6:E7:15:75:9E:DD:C8:99:86:44:41:45:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/6b11a3e9-0132-3d9c-a6b4-25645c8d2154.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:4b:05:73:5d:77:2e:fc:18:3a:b8:26:d3:df:39:02:d6:14:
         c2:b5:88:ef:01:e6:eb:6e:45:a6:01:20:3e:3c:2f:4b:ab:58:
         3c:14:c0:c8:be:fa:35:db:27:2a:1d:39:41:80:00:ef:84:7e:
         e5:7b:d6:c2:30:ae:1b:f9:dd:f0:fd:34:cc:df:40:ca:dd:2a:
         47:a7:4f:ea:d3:af:4b:98:cb:22:31:e0:12:3e:ae:9c:89:d0:
         5f:2b:d1:32:ac:13:4b:92:15:9c:80:c3:e6:ad:bc:b2:67:1b:
         7b:35:44:e9:e3:fb:b7:e5:9d:1b:f6:9f:1e:52:d6:d1:ec:44:
         39:93:44:78:e7:3e:0d:5e:5f:70:b1:4e:50:7a:8d:2b:75:b2:
         33:5a:a8:d6:89:22:0f:05:b9:63:b9:87:87:52:7a:48:75:76:
         84:1f:a8:44:45:8b:ee:63:08:8e:46:e2:5b:4c:44:f1:62:7b:
         bf:8c:98:22:0d:10:8f:12:85:25:94:1b:57:d2:85:63:85:80:
         69:64:c8:4c:81:36:97:f0:c4:9d:b3:25:48:64:af:19:87:68:
         a9:6e:b2:25:7b:ae:07:d2:15:37:fe:e4:0c:08:8f:cb:05:df:
         a3:40:71:22:12:b5:31:69:22:19:d0:0d:1f:d9:36:70:00:6c:
         a8:06:51:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:39:28 2026 by rpki-client