Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d4b65d1f-470e-3066-8886-787faad3af5d.roa
File:                     d4b65d1f-470e-3066-8886-787faad3af5d.roa (raw, json)
Hash identifier:          pevfAwqG6Ss2tKPaHYErzDs9VQ9dpA5E0wey/ac8WBw=
Subject key identifier:   F5:48:FC:92:99:D2:8D:7D:4C:1A:B9:28:64:F7:FD:6F:0D:9C:52:0C
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDA3588BD7507A36665B480
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d4b65d1f-470e-3066-8886-787faad3af5d.roa
Signing time:             Tue 07 Apr 2026 16:24:21 +0000
ROA not before:           Tue 07 Apr 2026 16:24:21 +0000
ROA not after:            Mon 06 Jul 2026 16:24:21 +0000
asID:                     18779
IP address blocks:        45.39.48.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:da:35:88:bd:75:07:a3:66:65:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:24:21 2026 GMT
            Not After : Jul  6 16:24:21 2026 GMT
        Subject: CN=4abc0ccf-c6e3-4777-ba36-b0c4d88b57d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:05:52:ed:11:28:57:fa:8f:69:37:4c:1d:7b:
                    c5:29:b1:38:32:24:8b:56:e2:d5:77:3f:10:14:75:
                    b0:77:ae:47:6b:86:9c:ad:81:ee:a1:0d:f4:da:f2:
                    b1:92:0f:2b:e3:63:9d:49:7c:c9:8e:5d:e9:6c:20:
                    14:a3:37:1b:af:c5:07:71:99:7c:0a:74:71:4e:d0:
                    0f:8f:69:26:97:e9:2f:07:03:4f:77:4e:70:03:b2:
                    af:89:c8:b5:77:5c:0e:46:e9:72:77:ce:81:06:6e:
                    f4:f6:07:3f:94:c7:8e:bc:13:fb:86:24:7d:3f:d2:
                    e7:09:80:69:d2:f3:b7:0e:46:da:5f:55:3c:4a:07:
                    ab:8d:ff:ad:46:19:f4:56:44:e2:7c:b9:60:db:09:
                    ad:56:45:61:11:f6:47:59:64:ba:d7:46:3d:ca:21:
                    dc:4b:ca:7e:81:f2:a6:bf:8c:65:27:12:17:f5:72:
                    b7:94:02:21:52:eb:88:9e:6d:40:62:b7:e3:01:ac:
                    bc:d1:a6:dc:07:65:8a:1f:6e:a4:b0:43:75:25:0a:
                    2e:67:6d:88:41:29:2a:e1:d1:21:ef:5d:e6:7a:38:
                    19:a0:6e:9f:8e:91:a1:f2:e1:d8:81:ce:a3:9c:53:
                    64:35:e6:8a:b1:d7:8e:d2:c5:0a:a4:a6:b6:6e:db:
                    7c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:48:FC:92:99:D2:8D:7D:4C:1A:B9:28:64:F7:FD:6F:0D:9C:52:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d4b65d1f-470e-3066-8886-787faad3af5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:4d:32:38:c1:bf:ae:d2:fb:1e:26:06:08:40:9d:39:4f:96:
         83:78:59:31:cd:54:97:1d:0f:85:7f:9c:15:75:00:49:25:20:
         e9:d1:2e:6f:fa:55:43:88:86:a2:b0:2e:13:59:b5:0a:65:10:
         de:e5:cb:86:d8:16:f4:54:c4:4b:2e:a1:ca:7b:32:95:45:da:
         8e:7a:47:4f:fc:4f:f8:0a:c0:04:6d:7d:85:67:5b:72:1d:2e:
         58:21:7f:3f:09:88:8e:9d:01:ad:b8:64:50:8b:bf:f7:89:91:
         0a:3d:62:0b:c7:0e:2a:cd:a9:44:84:92:53:9f:24:95:36:fe:
         20:f5:ff:ea:0d:bd:93:96:16:8e:c1:10:a6:0e:01:f1:4a:c9:
         11:14:8a:09:16:fa:08:f3:b6:51:15:09:a3:7a:be:0e:a6:99:
         4c:56:0b:ec:c9:eb:d5:74:f1:22:35:f1:ba:13:d6:d8:39:c6:
         2f:3a:5f:f5:76:91:77:23:49:ea:55:59:c8:cf:54:cc:61:85:
         f9:93:de:02:1e:81:18:6e:f9:2d:0c:99:86:55:ca:32:73:84:
         42:03:ce:01:d0:3b:5b:75:65:8a:f9:3c:91:54:2a:cb:42:b2:
         98:a4:4b:5e:a1:8f:97:e3:7f:46:a7:40:1b:2e:32:0d:67:55:
         84:6a:b8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:42:19 2026 by rpki-client