Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/7d5aa64b-af43-351d-8327-a439530b6aa7.roa
File:                     7d5aa64b-af43-351d-8327-a439530b6aa7.roa (raw, json)
Hash identifier:          gVROy6U/aEEXc7a7HJFTEKYkArDKaCwIrrWYQfsUfe0=
Subject key identifier:   D9:AA:45:EF:81:05:AB:0C:B5:A4:95:C3:C0:85:FB:1B:D8:FA:91:5B
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DEA5E22CDC27A65B2E388C0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/7d5aa64b-af43-351d-8327-a439530b6aa7.roa
Signing time:             Tue 07 Apr 2026 16:56:54 +0000
ROA not before:           Tue 07 Apr 2026 16:56:54 +0000
ROA not after:            Mon 06 Jul 2026 16:56:54 +0000
asID:                     397630
IP address blocks:        45.39.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:ea:5e:22:cd:c2:7a:65:b2:e3:88:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:56:54 2026 GMT
            Not After : Jul  6 16:56:54 2026 GMT
        Subject: CN=aca60f73-26d1-481e-9fbe-b2f7a35aae02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:67:16:8a:72:7a:0c:5a:92:fe:33:cc:f4:37:
                    f5:98:f3:6a:d3:7e:78:7e:23:68:85:10:a8:ae:f4:
                    ed:38:e5:06:66:a2:78:9b:eb:29:18:88:76:89:23:
                    1f:6d:71:1a:61:11:86:1d:66:48:cb:ba:e9:a9:56:
                    33:3b:3a:b1:7c:15:06:7d:97:de:ab:ec:04:a6:c2:
                    c5:b2:0c:14:1b:d5:04:21:e9:cd:8b:61:9e:6c:7e:
                    a1:79:a3:b9:a2:a6:59:c7:fa:4a:7e:b7:97:12:c6:
                    bc:a2:23:7c:f3:90:38:fa:c6:36:60:53:76:cd:ca:
                    c9:01:59:ce:fa:a3:ff:54:c2:02:8d:23:03:ad:20:
                    f9:09:40:54:f7:17:27:d8:b3:b2:c8:e6:5e:d1:bd:
                    51:a5:7a:7e:f3:37:44:14:c0:fa:f3:dc:a0:5e:60:
                    d9:be:c6:6c:15:27:80:95:b7:86:b7:a6:0a:ca:19:
                    80:96:cf:a6:a9:b2:72:7a:84:45:fb:57:11:06:69:
                    11:3b:2a:43:6f:49:c6:df:df:94:61:65:2e:7e:b7:
                    ae:9e:35:70:a0:b8:62:25:89:93:61:25:91:4d:61:
                    bc:07:8a:da:22:98:a1:d7:ef:a7:bc:71:ce:dc:f9:
                    9f:ac:4c:e1:33:17:a2:e3:69:88:49:9e:cc:95:f0:
                    d6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:AA:45:EF:81:05:AB:0C:B5:A4:95:C3:C0:85:FB:1B:D8:FA:91:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/7d5aa64b-af43-351d-8327-a439530b6aa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:5b:b0:2a:af:75:df:a9:a6:ed:ba:80:f8:09:e9:eb:27:93:
         71:da:1f:e4:dc:9e:d1:1b:56:4c:fc:3f:ad:de:3d:f0:66:c0:
         7a:fd:92:64:13:f7:91:5c:1d:18:29:cd:14:d6:89:38:6c:76:
         d7:d7:c3:5f:2a:cb:e8:55:46:8a:fb:14:6d:17:f6:d2:73:25:
         e5:54:57:b5:3f:11:44:f3:d1:29:3f:50:e7:7c:bb:a2:6c:b6:
         fb:22:f4:f3:df:ce:d5:4f:16:8f:db:e7:66:f2:c8:48:b2:64:
         ce:bc:4f:13:50:e8:c4:0e:f6:a6:18:39:91:8b:6e:65:99:61:
         37:7f:64:6e:36:8b:16:fa:cb:d2:9a:ea:61:1e:62:91:34:63:
         a7:74:d3:60:a0:cf:41:fd:2e:41:a4:38:67:94:94:6e:9b:dc:
         7d:e2:c5:74:35:6b:7a:63:3e:a1:6d:fe:b1:15:c4:24:98:aa:
         70:81:79:f3:07:31:fb:28:5b:2d:07:e5:8b:c8:b5:f4:9d:75:
         a2:3c:62:3c:e0:cf:1f:93:0b:0e:cb:3a:16:32:c7:69:98:1d:
         40:ae:20:08:35:13:9d:ca:bf:28:ad:a3:3d:f9:72:d6:f4:28:
         d6:b4:4f:b5:c3:66:2e:d7:7d:88:5c:09:97:e2:34:e0:0d:3a:
         02:cf:79:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:42:32 2026 by rpki-client