Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/9d814f03-5d33-3656-96bb-51e6f509a2fb.roa
File:                     9d814f03-5d33-3656-96bb-51e6f509a2fb.roa (raw, json)
Hash identifier:          ZQ0XAC4OHPtE19P/k5eJz5DpJPqJ4DbD7GhRD+FAR/o=
Subject key identifier:   3A:D2:C3:67:90:AC:29:DA:0C:EE:C5:63:25:A4:A8:99:00:36:E0:10
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DEA3D89AC6E55E6CD11FB38
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/9d814f03-5d33-3656-96bb-51e6f509a2fb.roa
Signing time:             Tue 07 Apr 2026 16:56:39 +0000
ROA not before:           Tue 07 Apr 2026 16:56:39 +0000
ROA not after:            Mon 06 Jul 2026 16:56:39 +0000
asID:                     397630
IP address blocks:        45.39.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:ea:3d:89:ac:6e:55:e6:cd:11:fb:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:56:39 2026 GMT
            Not After : Jul  6 16:56:39 2026 GMT
        Subject: CN=4d44d2d9-59fc-4cd6-8fca-e8fd3499e29b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:39:f1:cf:8e:54:4e:fd:35:78:3c:6e:e5:cb:
                    a7:1c:5f:8c:b5:f7:be:82:b1:ae:32:42:b4:8e:99:
                    77:67:91:9c:98:cd:2c:75:16:1d:7b:25:a7:c6:7c:
                    c0:a7:69:2f:f3:cb:8e:9a:3d:92:86:85:01:cd:44:
                    b9:f6:41:6d:6e:74:58:76:e8:5a:6f:bf:36:ea:6e:
                    d1:e2:71:9e:b9:aa:f1:ad:15:7a:df:86:e3:b7:6b:
                    01:03:d5:27:a5:fc:9b:8c:40:0a:26:6e:20:5b:80:
                    11:66:ba:c4:44:08:71:b0:fa:16:80:c0:a6:83:68:
                    75:a6:35:1d:63:ea:cf:95:e7:af:6d:8e:eb:a9:4d:
                    4f:ee:0d:07:5c:91:ba:f5:be:9a:3a:29:5c:5b:43:
                    68:bf:b2:e1:36:49:ef:56:40:cc:57:a2:88:ab:58:
                    65:93:e8:81:8e:4a:8a:9d:74:12:39:aa:d7:01:99:
                    2a:e8:4c:97:08:a5:55:61:db:ec:19:b6:ef:9c:bc:
                    77:a0:6c:48:7d:25:0f:ec:04:34:15:b3:68:26:11:
                    41:d7:81:b0:bd:4d:e8:05:08:94:d5:9b:38:1f:49:
                    99:b5:88:4f:91:06:ca:42:0a:be:57:93:55:61:d2:
                    4d:34:30:c1:7d:e8:27:ee:de:c1:72:e9:22:df:55:
                    34:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:D2:C3:67:90:AC:29:DA:0C:EE:C5:63:25:A4:A8:99:00:36:E0:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/9d814f03-5d33-3656-96bb-51e6f509a2fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:62:ec:2a:06:3a:94:3c:19:70:ab:fc:4a:fc:29:f4:9a:af:
         9a:63:ef:d9:c5:26:b8:a3:e2:08:0d:f1:70:4d:40:ec:4a:f8:
         50:35:d4:0b:55:dd:4b:7c:fd:bb:be:7f:97:ef:fe:03:fa:d8:
         55:2b:4e:b5:e8:f5:ab:53:a3:04:bd:ff:6d:86:99:97:c2:73:
         77:61:6e:ac:63:2b:f7:e1:f4:94:9a:23:f8:72:1a:66:36:3a:
         bb:c0:85:f8:df:c9:3a:92:b3:d0:dd:30:98:b1:b9:fb:fd:8d:
         35:de:e7:4a:a6:38:04:8a:7c:7c:02:3b:2e:48:eb:96:ff:27:
         41:34:16:77:dd:75:f1:f5:fd:d1:a2:f7:8b:97:01:20:b9:e8:
         bb:e9:aa:5f:f3:ae:55:fe:a2:a9:2f:98:5c:a7:bf:c1:8a:f0:
         6f:a9:70:a7:13:b7:db:11:8b:9c:7f:be:f5:f4:27:25:1d:4f:
         60:7a:32:13:8b:2b:69:86:d9:58:46:96:f3:d7:10:5a:f9:66:
         4f:a3:6c:05:74:1c:18:08:34:fb:33:dc:ff:7f:74:cd:fd:46:
         2a:34:84:5a:1e:67:e7:52:4d:26:d2:58:26:ff:4a:d8:47:87:
         3c:f9:66:e7:e0:10:12:7d:d4:b8:3f:2a:13:14:76:23:40:06:
         4a:eb:f2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:41:11 2026 by rpki-client