Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/809f9ea2-7662-3286-b00d-05bf93341ce2.roa
File:                     809f9ea2-7662-3286-b00d-05bf93341ce2.roa (raw, json)
Hash identifier:          5J4htzQq/cxeZXBH7KN2NGz+tWTCDbCHcftfHKR5dUc=
Subject key identifier:   6A:6E:9F:52:2C:F0:33:81:2A:27:0B:52:2F:7F:5D:0B:65:6A:5F:57
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDAFE5ADB9ADB70A01AA378
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/809f9ea2-7662-3286-b00d-05bf93341ce2.roa
Signing time:             Tue 07 Apr 2026 16:25:56 +0000
ROA not before:           Tue 07 Apr 2026 16:25:56 +0000
ROA not after:            Mon 06 Jul 2026 16:25:56 +0000
asID:                     18779
IP address blocks:        45.39.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:da:fe:5a:db:9a:db:70:a0:1a:a3:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:25:56 2026 GMT
            Not After : Jul  6 16:25:56 2026 GMT
        Subject: CN=4d5f29e5-6d54-4d8e-a86c-65611f0677f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ee:e4:be:e3:88:64:05:a7:d9:0c:db:ac:ef:
                    c1:dc:ce:10:f0:fd:24:1a:88:8c:b1:f6:89:ba:cb:
                    08:41:23:ad:03:31:af:90:5c:8e:5e:b8:0b:04:e4:
                    e0:b6:4a:04:45:1b:51:fb:55:3a:29:8c:44:22:dd:
                    7b:62:79:b3:ac:cb:82:27:2e:e4:90:19:22:24:17:
                    21:d6:a3:73:2a:62:ab:31:ff:8a:78:cc:c8:c4:0d:
                    52:36:27:b0:de:d0:43:1a:07:15:26:a1:57:96:8f:
                    34:b9:64:5f:c0:d3:eb:e3:13:0a:a1:d5:78:7d:4b:
                    79:a6:5a:1d:8e:a8:4f:f6:b7:40:e8:34:c3:5b:bc:
                    70:c5:5d:d5:2f:14:22:0b:28:a8:d3:9f:21:66:e2:
                    28:9a:70:90:92:f7:d8:d1:11:ce:c2:1b:e7:c9:5d:
                    7c:c0:de:b5:00:c9:1c:06:a7:75:ff:39:11:67:e9:
                    75:47:21:16:b2:86:6d:2f:6c:f7:dd:88:2e:e2:09:
                    aa:a5:46:15:7a:b2:a8:ef:49:49:64:f2:09:cd:90:
                    92:8d:8d:ff:53:1c:59:0b:b1:df:19:47:09:68:c8:
                    60:45:ef:d8:1a:ad:1e:b5:ff:64:2f:1a:91:a3:ed:
                    7c:06:2a:95:ab:75:00:94:de:02:e4:2f:e3:db:e9:
                    e7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:6E:9F:52:2C:F0:33:81:2A:27:0B:52:2F:7F:5D:0B:65:6A:5F:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/809f9ea2-7662-3286-b00d-05bf93341ce2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:a0:5c:f2:e4:0f:25:fb:57:f4:0b:a1:af:50:57:eb:2b:dc:
         08:8d:fc:f2:49:fe:e0:5b:4e:98:57:13:3a:79:6d:51:ef:4f:
         7c:3e:24:f9:86:ec:89:a3:c2:34:9e:4f:fc:6b:ba:3b:25:98:
         73:b0:af:05:11:1e:bc:9d:55:39:f7:1c:8f:3e:e7:ae:7c:d0:
         01:56:bb:32:b0:3a:12:bd:23:6e:7b:c9:47:9c:fe:57:54:c3:
         c3:d6:11:ea:00:ef:68:77:f9:77:a6:e1:52:f7:65:ed:04:4a:
         50:ab:76:57:15:d3:65:0d:70:f8:d6:d3:c5:24:0b:aa:66:b2:
         0b:bf:8f:b1:25:0a:60:04:18:4f:fb:ed:b8:5d:06:c8:92:b7:
         2f:69:88:ca:49:c1:32:99:ca:08:94:4e:6b:a7:3e:ad:62:1d:
         70:77:be:5a:79:af:23:b0:ca:66:2a:bc:b3:02:bb:91:d6:f5:
         e0:fc:71:3a:71:67:28:e3:ee:a3:29:54:c6:d1:d3:3a:15:3f:
         1a:3b:9f:0e:27:cf:e4:56:fc:8d:c8:ab:28:d8:51:1b:ae:d9:
         c4:4b:46:58:53:9c:5d:f6:ff:71:17:1a:e0:f3:50:60:dc:52:
         96:75:23:0d:20:2e:2d:a6:86:1b:aa:68:a3:d5:55:a5:69:46:
         aa:e9:11:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:40:39 2026 by rpki-client