Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/8789584a-6b6a-3133-a74a-2772edca3858.roa
File:                     8789584a-6b6a-3133-a74a-2772edca3858.roa (raw, json)
Hash identifier:          txB/F8sZYIjO4dfQdDGg7fYm+3UJX9tRnUpx9QxOb6c=
Subject key identifier:   90:B8:B2:47:97:F7:D0:4E:34:08:96:31:84:97:00:9C:AB:65:CA:E4
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DEA1BC9AB1A42360CCCE180
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/8789584a-6b6a-3133-a74a-2772edca3858.roa
Signing time:             Tue 07 Apr 2026 16:56:23 +0000
ROA not before:           Tue 07 Apr 2026 16:56:23 +0000
ROA not after:            Mon 06 Jul 2026 16:56:23 +0000
asID:                     54252
IP address blocks:        45.38.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:ea:1b:c9:ab:1a:42:36:0c:cc:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:56:23 2026 GMT
            Not After : Jul  6 16:56:23 2026 GMT
        Subject: CN=e4f770b1-a502-4779-90b3-88992899c2cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d8:3c:2e:7c:0d:8b:12:da:d7:81:58:0a:35:
                    f6:f1:c5:e6:d1:49:26:84:c7:bc:a7:91:06:bc:59:
                    5c:d0:2d:66:b8:42:13:8e:5e:e7:3f:45:5b:1b:78:
                    bb:29:fb:65:59:1f:25:ba:e7:9e:87:cd:57:50:86:
                    2a:73:85:19:c4:06:c6:2d:f5:aa:06:fe:f5:88:02:
                    2e:af:b4:96:12:09:1d:27:75:0d:e1:15:f1:46:c4:
                    1d:f0:6c:58:09:87:0c:90:b8:c2:3a:d7:82:e5:c4:
                    cc:6d:25:1b:62:ce:82:d5:90:2c:b3:39:d7:0e:82:
                    97:7e:53:3d:04:a0:1a:e5:f6:f7:39:c9:79:f0:fd:
                    71:0b:80:4e:58:fe:77:87:57:c9:5f:4a:d2:e5:6e:
                    55:a2:5c:c0:9c:64:e7:5b:72:d7:fa:0c:ee:6e:7f:
                    4e:1e:bc:cd:cb:37:cb:7a:49:50:c8:8e:62:bd:ac:
                    01:8d:ab:58:87:b5:ad:73:d8:fc:ec:95:fb:3e:50:
                    52:a2:6e:a2:de:53:6c:63:de:f1:b0:2d:63:54:f6:
                    5a:03:6b:0b:c3:14:b8:10:8a:4d:c0:0a:ef:68:2b:
                    52:11:7b:92:d4:bb:42:3f:4e:ff:f3:b6:df:a2:f7:
                    e0:d9:a1:cc:7b:e9:57:14:04:8a:2d:a2:1e:d4:d8:
                    3d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B8:B2:47:97:F7:D0:4E:34:08:96:31:84:97:00:9C:AB:65:CA:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/8789584a-6b6a-3133-a74a-2772edca3858.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:07:83:9d:20:43:e2:ab:c2:a3:d0:24:97:ae:78:5b:71:85:
         b4:ae:8e:6b:82:af:cf:cd:34:4d:24:c6:2b:06:a9:96:d8:89:
         20:a1:a2:e8:63:05:51:da:bd:79:0b:76:c1:e6:07:eb:ee:12:
         a2:7e:f6:84:88:a9:f0:36:9c:65:92:00:f1:e9:fc:39:9c:aa:
         82:a4:bf:cd:d2:32:fe:9a:6d:9d:54:c5:91:51:e5:1f:c9:5f:
         7c:d9:e9:66:49:97:a8:e3:b6:57:90:28:71:02:41:68:b2:61:
         a9:17:2f:88:2e:42:51:14:3f:ae:e9:52:dd:0e:71:5f:09:c7:
         8f:9f:bc:01:a9:00:8b:57:df:97:d0:68:1a:d8:90:14:f0:1a:
         0c:98:35:54:45:93:3d:63:2b:d5:87:30:89:15:01:20:e1:91:
         25:e3:a5:6e:93:83:db:64:54:72:a9:4c:8c:14:26:3b:53:62:
         9d:95:ed:0c:bd:81:22:c3:be:4a:2b:63:bb:8e:f6:4f:bb:a9:
         a4:45:87:77:0d:85:98:4f:78:6a:42:6b:4e:ae:8f:b2:1c:e4:
         e5:16:14:06:b1:83:fd:45:8a:72:31:32:64:ec:ff:3e:e9:71:
         95:9c:8c:6d:e7:1a:b7:84:dd:47:7d:c5:84:be:a6:70:42:46:
         b9:49:53:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:44:04 2026 by rpki-client