Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d52b04c2-9558-3631-b1f6-2551e8e75806.roa
File:                     d52b04c2-9558-3631-b1f6-2551e8e75806.roa (raw, json)
Hash identifier:          y6SX6CUYWreHaKNZsgRwsFTRkLxFPeqxPIj1Hk1AD9k=
Subject key identifier:   EE:14:8F:BD:33:6B:93:62:74:4E:4F:EA:18:DD:27:CB:DC:84:72:EB
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DD91D5A4509D64ACF2B1A00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d52b04c2-9558-3631-b1f6-2551e8e75806.roa
Signing time:             Tue 07 Apr 2026 16:22:09 +0000
ROA not before:           Tue 07 Apr 2026 16:22:09 +0000
ROA not after:            Mon 06 Jul 2026 16:22:09 +0000
asID:                     400759
IP address blocks:        45.38.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:d9:1d:5a:45:09:d6:4a:cf:2b:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:22:09 2026 GMT
            Not After : Jul  6 16:22:09 2026 GMT
        Subject: CN=5a17b12c-fbb3-43ca-b1b2-2cc100e4c6f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:96:74:b3:d6:e3:93:8d:a3:59:c2:2a:d0:00:
                    62:96:6b:5c:66:f0:a2:c5:df:79:55:0f:86:7d:cb:
                    75:80:2d:52:1f:2e:71:3c:b2:84:f2:5a:0f:30:f8:
                    8d:52:03:42:c3:53:45:41:af:90:1e:f4:2e:aa:22:
                    02:f7:09:fc:16:cc:70:ae:8a:23:50:d5:7b:ce:49:
                    ed:19:38:09:d4:2d:24:1f:9d:bc:ea:1c:f6:ad:61:
                    cd:06:b3:fd:c4:e6:e3:91:da:7b:e5:8f:77:7c:50:
                    08:b1:77:2e:6a:be:4f:8a:d9:69:a7:5c:f7:19:f0:
                    15:b6:69:d0:b9:aa:25:63:46:af:16:e0:c8:b3:95:
                    32:6f:1b:97:14:3f:49:ec:b9:a9:1c:41:44:33:bf:
                    55:95:e8:5d:7b:d5:ec:88:d1:ad:bd:78:78:fe:4e:
                    6d:6f:e1:2c:10:46:3d:e6:dd:fe:97:85:c1:9c:ae:
                    6b:c9:fa:97:6d:7f:2a:40:5c:13:f4:be:ec:e6:49:
                    97:55:1d:d7:2e:e0:c0:d8:4b:61:6b:8e:14:93:ba:
                    59:16:70:e8:2d:cb:6e:04:a8:59:f6:cd:5c:48:f7:
                    35:57:da:1a:87:ab:74:7e:e9:2b:49:ad:27:25:90:
                    6e:08:7a:c1:b2:ec:d5:97:fb:70:7e:08:4b:17:70:
                    c1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:14:8F:BD:33:6B:93:62:74:4E:4F:EA:18:DD:27:CB:DC:84:72:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d52b04c2-9558-3631-b1f6-2551e8e75806.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:63:7a:8a:4f:86:35:fd:d5:be:98:55:12:25:42:a6:d4:63:
         98:a0:2c:e7:fa:c6:91:b6:c0:8e:bd:42:70:f1:c3:d5:b0:77:
         dd:e8:b4:19:58:2d:a1:46:fe:49:ef:65:86:e4:86:c3:1c:15:
         99:1a:f2:6d:b0:85:e8:33:a3:fd:e6:1b:10:34:e5:26:2a:28:
         5c:87:f7:76:31:64:93:ed:ad:f9:bf:81:b5:1b:49:d8:7e:a1:
         5f:cb:6a:af:26:c8:5d:8a:bb:3e:2d:18:df:a9:e1:71:6a:b1:
         c5:50:ee:29:aa:87:52:7e:a5:40:3c:ae:1e:f7:7e:dc:9d:dc:
         53:7d:4c:dc:9e:df:c8:d4:6d:c2:5e:28:1f:ef:75:23:ae:59:
         40:9b:59:a8:56:76:6e:09:2e:02:81:fa:64:9d:02:3e:90:56:
         35:2e:de:5d:f0:30:8d:de:d1:9f:c1:ab:3a:90:da:52:11:fa:
         32:76:78:18:e7:01:6e:e2:cd:4d:45:c0:d8:b6:32:f4:22:78:
         8d:7e:b0:4b:70:27:3b:7d:c5:9c:ed:da:ec:4e:40:34:cc:22:
         7d:14:99:33:e0:08:5b:3a:d6:d7:d6:98:80:c1:6a:3b:c4:df:
         87:ba:d5:82:a2:ca:91:f9:8d:8c:57:f3:63:d0:92:c1:5d:ce:
         7e:c8:10:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:42:35 2026 by rpki-client