Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/ca0aeeed-db78-3597-9f0e-14dbb71b3bc3.roa
File:                     ca0aeeed-db78-3597-9f0e-14dbb71b3bc3.roa (raw, json)
Hash identifier:          Ax7UfUoTNCMY9mvmWs471TMYToxn7qBGIWmlyiKSK4Y=
Subject key identifier:   28:4C:F0:95:B1:F5:7F:8D:B5:FC:BE:9E:C6:65:7A:3B:D2:A2:B6:AA
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDAFF625E5AB8694B3BEF80
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/ca0aeeed-db78-3597-9f0e-14dbb71b3bc3.roa
Signing time:             Tue 07 Apr 2026 16:25:56 +0000
ROA not before:           Tue 07 Apr 2026 16:25:56 +0000
ROA not after:            Mon 06 Jul 2026 16:25:56 +0000
asID:                     3356
IP address blocks:        45.39.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:da:ff:62:5e:5a:b8:69:4b:3b:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:25:56 2026 GMT
            Not After : Jul  6 16:25:56 2026 GMT
        Subject: CN=fb82c532-405c-4333-87cb-1695b5c7d568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:aa:01:df:bb:ba:ad:1d:5e:fd:4b:1f:f7:af:
                    4b:8c:a7:63:f6:69:24:b1:88:8b:e9:9f:ce:df:e6:
                    3c:67:2b:ff:b4:8e:b6:c7:e8:74:07:fe:3d:17:b8:
                    45:f2:a8:c3:ae:13:5f:9f:a9:5d:82:21:12:d4:d2:
                    52:52:3d:bb:34:09:fc:14:43:c9:d6:74:c9:0f:c7:
                    a9:74:e6:01:55:61:04:6f:d5:ce:9d:ab:76:46:5a:
                    5b:81:41:7f:a3:e6:1b:73:38:ee:e5:29:4a:16:d5:
                    7f:23:58:6c:b1:c9:ee:eb:f2:d6:94:0c:d0:be:46:
                    5e:88:2d:fc:94:b3:19:c0:69:77:ee:58:f2:0c:f1:
                    17:e0:3a:bc:a7:91:f1:68:c3:39:b5:d2:47:e7:53:
                    ce:6a:fa:f4:90:9a:ed:3c:a7:8d:78:9b:c6:a6:31:
                    87:b9:6f:18:33:86:68:a2:c5:70:e0:57:9a:6e:83:
                    35:6f:d0:ac:00:a5:3c:28:5f:a3:67:f2:d9:e5:78:
                    1f:4f:8a:4d:cd:e7:63:be:cd:2e:33:c0:e1:8b:7c:
                    20:61:35:fa:84:37:2e:e3:99:88:46:62:51:fb:0a:
                    42:78:6c:63:a9:f5:64:8f:bc:c9:ff:90:ee:4e:ca:
                    5f:6d:ab:08:60:cf:65:c7:75:15:30:9c:e0:1b:4d:
                    fc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:4C:F0:95:B1:F5:7F:8D:B5:FC:BE:9E:C6:65:7A:3B:D2:A2:B6:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/ca0aeeed-db78-3597-9f0e-14dbb71b3bc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:6e:d4:21:a2:0a:76:8b:f5:d6:a7:12:2e:00:d7:8e:cc:63:
         3c:ce:a2:12:5d:ea:67:e5:12:94:c7:8f:4d:b4:70:ae:30:31:
         fe:c8:f4:4f:db:e6:18:60:bf:e3:d1:4a:1f:be:2b:83:6e:ec:
         ac:0c:0c:d1:7b:6f:42:89:ba:73:61:a9:e1:a5:c0:92:88:1b:
         8d:b9:1c:19:e3:42:57:77:93:10:3f:12:28:8b:80:8e:4c:d5:
         a1:ce:7e:e5:9d:a1:f6:42:02:05:61:74:5e:0a:07:a2:b6:37:
         53:7c:99:ea:23:84:57:f2:30:45:43:8a:19:be:f2:c0:bb:b7:
         3c:39:c2:35:8d:b6:d5:61:ec:a9:cd:da:ee:20:20:f0:bf:df:
         8c:6c:59:0e:37:7a:24:cd:b8:84:cf:70:bc:b4:f5:ec:a5:b5:
         74:50:c5:83:61:06:89:90:32:e1:14:9e:78:ea:91:c6:37:00:
         c2:fd:33:a4:a7:d8:a5:76:94:ed:25:89:f7:01:c4:71:f5:0e:
         9c:4c:f2:b1:d2:f3:ff:9c:5b:15:b3:e5:b3:b8:b7:6b:b1:70:
         10:c0:88:f6:a3:32:ff:cb:07:06:2a:0b:0a:66:ab:e1:2a:25:
         a5:48:77:35:ee:55:73:20:4b:ad:a2:4c:21:46:f7:b7:4e:9e:
         c3:41:08:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:39:21 2026 by rpki-client