Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d0173c73-8418-32dd-b824-fc9dc97ddaea.roa
File:                     d0173c73-8418-32dd-b824-fc9dc97ddaea.roa (raw, json)
Hash identifier:          HkN8kX8T2pURIlGwDc7JdWY5U7WXJMmok9OAsgV06EQ=
Subject key identifier:   FF:AD:CF:42:98:7F:D9:80:3D:8D:8D:B1:A8:BD:64:16:87:01:5E:4A
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDA1FB297200D5A391E6380
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d0173c73-8418-32dd-b824-fc9dc97ddaea.roa
Signing time:             Tue 07 Apr 2026 16:24:11 +0000
ROA not before:           Tue 07 Apr 2026 16:24:11 +0000
ROA not after:            Mon 06 Jul 2026 16:24:11 +0000
asID:                     18779
IP address blocks:        45.39.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:da:1f:b2:97:20:0d:5a:39:1e:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:24:11 2026 GMT
            Not After : Jul  6 16:24:11 2026 GMT
        Subject: CN=62414584-b599-468e-b916-a968f6b0ec0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:44:fe:b1:a3:6a:c7:84:3e:77:61:c6:b9:b2:
                    15:13:f8:e8:a0:2e:3a:4f:fc:f8:3f:6b:c4:43:94:
                    02:e7:74:81:dd:24:27:f8:09:dd:e2:ba:5b:98:26:
                    41:b6:6c:05:24:87:07:ae:c3:97:1f:36:5e:f9:91:
                    36:a4:74:6d:42:13:ce:6d:f1:d7:b4:e0:e0:70:a1:
                    aa:f8:ac:cd:7e:69:2e:1a:7a:1f:72:ac:13:41:b0:
                    e1:c0:55:21:76:cb:5d:cf:b1:a0:fb:3a:0a:d8:7e:
                    b2:c8:77:54:c3:3c:ba:34:b5:62:30:5d:89:0b:eb:
                    3a:49:f0:bb:ef:73:5d:e0:22:d8:a2:c1:1b:b4:6b:
                    9d:99:ce:5a:1b:8f:c2:4e:77:65:da:c9:5f:25:75:
                    ed:f9:3c:c9:16:40:20:6f:a2:36:b3:95:c8:3f:25:
                    5b:2b:7d:9e:c6:55:4b:2e:7b:4c:b9:e9:37:11:b9:
                    be:21:74:0e:0a:76:77:e1:17:c8:5b:81:5a:7d:56:
                    a8:c7:4b:0d:2c:22:40:51:13:c7:c6:06:26:ff:5f:
                    44:b7:f9:e1:fb:d8:b1:08:ea:00:06:46:1f:0f:85:
                    01:d5:25:b4:b5:12:28:aa:ff:50:b8:3a:4f:63:1d:
                    6d:e9:63:a2:21:61:e8:2c:69:24:2a:5e:5e:b4:16:
                    33:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:AD:CF:42:98:7F:D9:80:3D:8D:8D:B1:A8:BD:64:16:87:01:5E:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d0173c73-8418-32dd-b824-fc9dc97ddaea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:52:8f:0a:3c:b2:08:25:d7:81:5e:ac:2d:ac:94:11:7e:29:
         fd:04:2f:4d:5b:99:5c:8a:bf:06:b4:5e:40:70:9b:72:7d:ce:
         ca:2a:24:ea:20:71:d7:44:9e:e5:82:58:b0:c2:fb:cb:0d:45:
         96:73:1d:b9:76:87:e3:89:93:ee:97:d3:2a:d6:ff:e2:29:dc:
         81:21:0d:6a:5f:1e:ec:97:d3:b4:46:da:c5:3c:f6:25:26:50:
         d7:33:7b:2b:b5:66:50:61:49:15:32:4c:ea:8a:99:e6:75:32:
         20:7c:0c:23:60:0a:a5:a5:9d:03:db:38:0d:7b:8b:39:f7:e9:
         f6:1f:6a:45:c2:7f:84:f3:23:a7:ca:17:25:83:b4:8e:8c:c5:
         d4:7f:c5:26:9e:de:ea:ef:16:45:80:2e:e6:c6:ea:40:bf:c1:
         41:15:9d:7f:a4:b7:65:0d:53:dd:e7:e3:0f:be:3c:0a:a5:07:
         c7:08:44:a9:bf:c7:b4:9d:82:be:cc:53:4f:35:4c:98:9f:98:
         90:8e:e2:dd:d6:2a:4f:a0:8e:a2:24:34:e1:b5:3e:bf:0d:3d:
         af:ea:09:c8:98:0f:1d:25:d8:e9:20:f8:62:07:9a:3d:e2:33:
         7a:ef:11:16:dd:cf:52:49:a2:83:b5:31:8e:97:1a:ac:af:e9:
         82:ab:6c:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1t2h+ylyANWjkeY4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDQwNzE2MjQxMVoXDTI2MDcwNjE2MjQxMVowLzEtMCsGA1UEAxMk
NjI0MTQ1ODQtYjU5OS00NjhlLWI5MTYtYTk2OGY2YjBlYzBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsET+saNqx4Q+d2HGubIVE/jooC46T/z4P2vE
Q5QC53SB3SQn+And4rpbmCZBtmwFJIcHrsOXHzZe+ZE2pHRtQhPObfHXtODgcKGq
+KzNfmkuGnofcqwTQbDhwFUhdstdz7Gg+zoK2H6yyHdUwzy6NLViMF2JC+s6SfC7
73Nd4CLYosEbtGudmc5aG4/CTndl2slfJXXt+TzJFkAgb6I2s5XIPyVbK32exlVL
LntMuek3Ebm+IXQOCnZ34RfIW4FafVaox0sNLCJAURPHxgYm/19Et/nh+9ixCOoA
BkYfD4UB1SW0tRIoqv9QuDpPYx1t6WOiIWHoLGkkKl5etBYzJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP+tz0KYf9mAPY2Nsai9ZBaHAV5KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvZDAxNzNjNzMtODQxOC0z
MmRkLWI4MjQtZmM5ZGM5N2RkYWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALScLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG9Sjwo8sggl14FerC2slBF+Kf0EL01bmVyKvwa0XkBwm3J9zsoqJOog
cddEnuWCWLDC+8sNRZZzHbl2h+OJk+6X0yrW/+Ip3IEhDWpfHuyX07RG2sU89iUm
UNczeyu1ZlBhSRUyTOqKmeZ1MiB8DCNgCqWlnQPbOA17izn36fYfakXCf4TzI6fK
FyWDtI6MxdR/xSae3urvFkWALubG6kC/wUEVnX+kt2UNU93n4w++PAqlB8cIRKm/
x7Sdgr7MU081TJifmJCO4t3WKk+gjqIkNOG1Pr8NPa/qCciYDx0l2Okg+GIHmj3i
M3rvERbdz1JJooO1MY6XGqyv6YKrbDw=
-----END CERTIFICATE-----
Generated at Wed Apr 8 01:44:34 2026 by rpki-client