Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/8ae89f4f-40fa-3b7e-ab70-977a1b7d006c.roa
File:                     8ae89f4f-40fa-3b7e-ab70-977a1b7d006c.roa (raw, json)
Hash identifier:          3tskOVGOQWxRuJFX0xKF9pCOK7/7CuCxJQsniDIC77w=
Subject key identifier:   22:0B:33:81:AC:76:1F:89:CC:4E:8C:67:33:92:5E:61:E8:63:2E:42
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDA35A1A3701148D0B94190
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/8ae89f4f-40fa-3b7e-ab70-977a1b7d006c.roa
Signing time:             Tue 07 Apr 2026 16:24:21 +0000
ROA not before:           Tue 07 Apr 2026 16:24:21 +0000
ROA not after:            Mon 06 Jul 2026 16:24:21 +0000
asID:                     13213
IP address blocks:        45.39.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:da:35:a1:a3:70:11:48:d0:b9:41:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:24:21 2026 GMT
            Not After : Jul  6 16:24:21 2026 GMT
        Subject: CN=3123a4e0-f22b-4667-8e26-ca4175fa4b89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0f:d4:15:db:5e:b5:10:d4:6e:ae:b2:1f:51:
                    cc:30:ca:9e:a2:a2:ac:f2:87:41:d6:17:7b:78:73:
                    90:a1:03:ce:00:39:3e:e5:9b:42:2a:0c:10:8b:80:
                    45:4e:cd:6e:7d:c9:8a:98:7f:56:35:ad:dc:f2:65:
                    7b:d5:17:7e:a5:41:fa:68:79:29:1e:5f:3b:89:56:
                    9b:73:9d:7d:f0:98:1c:9f:ec:bb:6c:0a:f4:3d:95:
                    8d:5c:fd:c1:c9:78:b5:f5:95:22:57:b0:a6:e8:cc:
                    40:9c:80:79:91:af:df:c6:52:b2:19:35:7c:25:35:
                    df:b9:7d:21:75:07:a6:c8:49:8d:57:fa:9a:05:15:
                    74:c5:d4:58:93:2e:72:5b:a3:33:6d:6b:a9:89:0e:
                    c5:21:ba:ed:a6:b5:64:01:ec:41:8e:64:ec:18:27:
                    f1:6f:5f:66:30:70:90:a1:a4:7e:ee:a8:b4:c2:05:
                    5f:1b:d3:91:96:6a:2a:44:27:50:55:a8:b5:13:38:
                    06:88:3b:e1:8a:64:ec:d7:03:9a:68:f3:b1:0c:92:
                    27:33:0b:06:82:05:da:5a:ce:f6:09:68:34:84:05:
                    19:80:ca:a8:c4:89:68:d7:06:b7:aa:f1:ed:a6:3e:
                    5c:cc:d2:e8:db:9f:79:98:96:d5:47:5f:ee:1e:3f:
                    ba:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:0B:33:81:AC:76:1F:89:CC:4E:8C:67:33:92:5E:61:E8:63:2E:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/8ae89f4f-40fa-3b7e-ab70-977a1b7d006c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:5f:3f:ec:e7:36:28:d7:7b:35:f3:22:30:de:7c:cc:45:a5:
         a7:dc:98:e4:31:45:dc:8f:24:5c:62:5d:d9:b8:55:a8:a2:56:
         71:48:59:25:6a:8c:cf:77:86:bc:33:dc:d8:f1:45:7b:6d:9c:
         97:c0:84:19:5a:f2:61:50:17:76:fa:cc:0d:80:93:aa:7b:8a:
         03:50:61:62:24:ef:bb:83:9b:cd:77:f3:5c:af:c4:93:18:0c:
         f8:0e:c3:76:6d:32:37:1f:ab:bf:dd:d5:bd:76:dc:3d:82:0a:
         57:25:b7:51:e6:99:70:5e:8e:63:0d:66:bc:b9:6d:01:35:ff:
         88:45:d1:7c:02:6f:38:d8:92:8e:9a:27:17:95:06:f1:a7:33:
         bb:8b:26:8a:ff:0a:ee:84:05:ec:bf:c5:85:3a:3c:b7:3d:64:
         c9:db:c4:76:78:68:0b:e3:51:17:38:25:03:d4:11:08:d4:b4:
         d9:21:26:3b:36:fe:2f:77:54:79:f5:01:f1:e7:69:1f:5f:ed:
         b2:95:7e:0b:b8:82:25:1c:3a:03:d6:b8:10:f1:88:1a:7b:ad:
         a9:25:0b:48:df:03:7a:6a:01:34:c3:5f:72:73:e9:5a:c4:a9:
         eb:b0:e3:ec:c9:3f:10:31:8d:11:f2:48:46:f9:94:f8:fe:16:
         c9:ab:e4:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1t2jWho3ARSNC5QZAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDQwNzE2MjQyMVoXDTI2MDcwNjE2MjQyMVowLzEtMCsGA1UEAxMk
MzEyM2E0ZTAtZjIyYi00NjY3LThlMjYtY2E0MTc1ZmE0Yjg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw/UFdtetRDUbq6yH1HMMMqeoqKs8odB1hd7
eHOQoQPOADk+5ZtCKgwQi4BFTs1ufcmKmH9WNa3c8mV71Rd+pUH6aHkpHl87iVab
c5198Jgcn+y7bAr0PZWNXP3ByXi19ZUiV7Cm6MxAnIB5ka/fxlKyGTV8JTXfuX0h
dQemyEmNV/qaBRV0xdRYky5yW6MzbWupiQ7FIbrtprVkAexBjmTsGCfxb19mMHCQ
oaR+7qi0wgVfG9ORlmoqRCdQVai1EzgGiDvhimTs1wOaaPOxDJInMwsGggXaWs72
CWg0hAUZgMqoxIlo1wa3qvHtpj5czNLo2595mJbVR1/uHj+6CwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCILM4Gsdh+JzE6MZzOSXmHoYy5CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvOGFlODlmNGYtNDBmYS0z
YjdlLWFiNzAtOTc3YTFiN2QwMDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSczMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFhfP+znNijXezXzIjDefMxFpafcmOQxRdyPJFxiXdm4VaiiVnFIWSVq
jM93hrwz3NjxRXttnJfAhBla8mFQF3b6zA2Ak6p7igNQYWIk77uDm81381yvxJMY
DPgOw3ZtMjcfq7/d1b123D2CClclt1HmmXBejmMNZry5bQE1/4hF0XwCbzjYko6a
JxeVBvGnM7uLJor/Cu6EBey/xYU6PLc9ZMnbxHZ4aAvjURc4JQPUEQjUtNkhJjs2
/i93VHn1AfHnaR9f7bKVfgu4giUcOgPWuBDxiBp7raklC0jfA3pqATTDX3Jz6VrE
qeuw4+zJPxAxjRHySEb5lPj+Fsmr5Ng=
-----END CERTIFICATE-----
Generated at Wed Apr 8 01:39:25 2026 by rpki-client