Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/77ae3bbf-d322-388e-bda4-56194af0f2b1.roa
File:                     77ae3bbf-d322-388e-bda4-56194af0f2b1.roa (raw, json)
Hash identifier:          t2H7pYnHtTEktykw76FuStKZ+zER0h//mKwIUDD6zlw=
Subject key identifier:   21:55:3C:B4:3A:19:9C:C0:1B:78:16:D7:DE:0E:1B:69:87:EA:DA:74
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DD9F330B39254BC650B7AC0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/77ae3bbf-d322-388e-bda4-56194af0f2b1.roa
Signing time:             Tue 07 Apr 2026 16:23:50 +0000
ROA not before:           Tue 07 Apr 2026 16:23:50 +0000
ROA not after:            Mon 06 Jul 2026 16:23:50 +0000
asID:                     8881
IP address blocks:        45.38.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:d9:f3:30:b3:92:54:bc:65:0b:7a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:23:50 2026 GMT
            Not After : Jul  6 16:23:50 2026 GMT
        Subject: CN=10bd04fc-e061-455c-83b8-ef70d91a98a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5a:75:12:8d:4b:75:84:b9:fc:9f:ed:45:5a:
                    45:96:dd:8c:20:64:6c:b3:1b:97:68:04:da:02:f1:
                    1b:54:64:b6:bb:d8:29:35:cf:fd:97:1f:e9:fb:f0:
                    59:23:94:5b:3f:23:b4:a8:e2:f6:c1:d1:82:2d:81:
                    aa:e4:bc:c0:26:8e:f3:4b:d6:56:91:03:32:71:c3:
                    db:5e:7b:56:e1:53:67:7f:f0:8b:fd:05:ad:1d:d1:
                    b3:17:8a:72:6b:ea:48:a3:fa:22:8c:6b:9b:65:aa:
                    ea:92:08:70:84:d7:1b:82:fa:92:34:9f:23:95:b7:
                    08:ce:13:7d:0f:4f:26:64:a0:60:96:ba:35:2c:50:
                    86:be:1e:ea:f1:3f:38:5f:b4:47:f7:88:3c:1d:5a:
                    02:a3:1c:6c:7f:ee:19:33:ba:83:62:8f:3d:5a:51:
                    d0:f6:35:3b:17:23:8d:88:64:8e:4b:b6:a8:0e:2d:
                    ac:ab:94:7c:a2:eb:8c:31:05:8a:30:d5:b4:51:a4:
                    b2:30:76:7f:63:fe:7b:40:2e:2f:f5:3a:8d:79:eb:
                    2c:5b:b6:31:4c:7d:a3:15:83:79:b0:e8:56:a5:f0:
                    83:db:b8:07:c4:63:6d:38:42:21:a6:45:91:1a:aa:
                    f5:29:99:c3:55:59:f9:e1:97:c8:f9:82:4a:11:ea:
                    ab:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:55:3C:B4:3A:19:9C:C0:1B:78:16:D7:DE:0E:1B:69:87:EA:DA:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/77ae3bbf-d322-388e-bda4-56194af0f2b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:52:da:17:cf:cc:61:fb:91:c8:41:d7:2a:ed:19:d5:0d:99:
         8f:69:1c:e8:ff:e1:1d:d1:b7:72:e7:61:c3:7d:75:7c:cc:8f:
         c2:d1:5e:9d:63:a4:13:d6:8f:d5:fe:88:1b:78:88:c0:4e:5a:
         de:71:88:2f:17:6e:04:01:96:57:af:77:e5:79:fc:ac:56:c2:
         a0:db:65:3f:85:46:ca:a8:14:31:3f:fc:f7:c6:49:95:b2:4d:
         ce:bd:72:88:d3:20:87:01:c7:60:bf:0a:a2:3f:76:af:08:38:
         c4:07:1b:66:a8:36:62:4d:eb:1e:6e:f2:05:fa:58:ac:5a:a7:
         38:35:31:26:45:b4:76:8e:97:77:0e:4f:c6:2e:c5:a3:11:da:
         01:d7:2c:18:ae:0e:ed:2b:87:1c:1d:37:4a:49:1c:34:9c:d2:
         2e:ef:30:fe:8c:74:2e:97:82:2e:15:43:21:82:3d:31:e4:21:
         ce:9e:0b:db:b7:a0:4c:74:30:bc:aa:d5:a0:ac:53:c5:fe:3b:
         69:27:b7:f3:f1:7b:b6:ba:2f:f4:45:0f:67:2c:d4:7b:23:28:
         20:2c:fc:75:38:20:43:8a:7b:91:cc:04:36:47:99:aa:36:f5:
         6c:9c:49:16:4f:27:05:b3:76:af:9a:b2:35:eb:cc:3d:80:87:
         1f:d2:5a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:42:18 2026 by rpki-client