Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d5ba4bbf-3e0d-3f7c-a2b9-3a00f34629cc.roa
File:                     d5ba4bbf-3e0d-3f7c-a2b9-3a00f34629cc.roa (raw, json)
Hash identifier:          WKMZ5SaZDs+9oFHgG0m97pHjITYqwazvao5DZq1lq10=
Subject key identifier:   A4:AB:96:1F:DB:74:C7:5A:E4:42:78:C7:ED:D1:D7:1A:36:D6:D7:3F
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DD9C7A352243762DE894180
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d5ba4bbf-3e0d-3f7c-a2b9-3a00f34629cc.roa
Signing time:             Tue 07 Apr 2026 16:23:29 +0000
ROA not before:           Tue 07 Apr 2026 16:23:29 +0000
ROA not after:            Mon 06 Jul 2026 16:23:29 +0000
asID:                     18779
IP address blocks:        45.38.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:d9:c7:a3:52:24:37:62:de:89:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:23:29 2026 GMT
            Not After : Jul  6 16:23:29 2026 GMT
        Subject: CN=946ce7e3-9e3c-40e1-8c7b-080358663f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:91:42:b9:97:24:bb:ae:88:16:41:b3:4b:22:
                    f1:7a:25:10:d2:65:7e:df:54:8b:f6:b7:f7:ad:dd:
                    1c:54:13:66:60:ae:f6:c4:e4:c5:52:bc:48:32:29:
                    81:fd:a4:ee:8b:b1:05:8d:fa:7b:44:cc:15:1e:e0:
                    a2:f8:61:5d:11:a2:91:fb:e8:e5:a9:31:0f:b8:38:
                    50:53:e1:94:14:a5:8b:d2:24:e9:2f:5d:b5:3a:96:
                    83:cb:93:7a:9f:d5:0a:05:47:54:e9:5a:11:d6:69:
                    26:e8:f6:f6:bc:28:e8:34:94:78:60:c0:ec:a2:eb:
                    fb:19:9a:c2:d1:c6:22:35:f8:a7:fc:df:12:8a:b7:
                    35:bf:5f:aa:2e:40:4e:27:17:44:c6:89:f7:b8:06:
                    48:7f:6d:fd:c4:9d:cf:04:5f:5f:02:52:f8:ec:23:
                    c9:88:2b:5d:00:ac:82:2c:54:de:b9:11:04:5f:ae:
                    16:13:4b:45:29:58:d0:9c:07:d7:61:1f:ff:24:d0:
                    c2:fb:a0:c8:92:b3:04:84:49:bf:91:69:f2:8c:55:
                    c3:43:ee:85:f0:5d:8b:c2:8e:48:4b:f7:9a:f9:00:
                    e5:1f:2f:9f:3e:c6:e7:06:de:e8:b1:97:68:50:aa:
                    7e:5c:57:a9:42:38:9b:ef:89:e1:40:46:d8:53:be:
                    05:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:AB:96:1F:DB:74:C7:5A:E4:42:78:C7:ED:D1:D7:1A:36:D6:D7:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/d5ba4bbf-3e0d-3f7c-a2b9-3a00f34629cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:ad:15:aa:34:fe:15:c8:50:c7:46:cd:80:f6:2d:2d:a7:27:
         bd:27:ad:6b:12:45:60:0a:a6:5c:30:4a:13:a8:96:ba:4c:5b:
         51:f0:58:e1:bb:72:f5:aa:99:d6:7d:0d:17:10:58:7c:04:26:
         13:98:31:ad:3b:c8:d9:a9:fd:5f:0d:04:f0:26:c5:62:dd:22:
         7d:ca:b1:45:52:f5:5c:2a:41:41:52:7d:4b:c9:79:5a:8b:00:
         37:88:19:71:0f:72:06:2c:04:b2:96:da:76:b5:26:28:b0:4f:
         c0:39:c4:bc:b4:8d:95:52:1a:54:78:07:ab:0f:e9:7a:0f:e0:
         b3:9a:22:85:1c:a9:fd:9c:ca:80:a3:22:7c:ce:19:b8:15:59:
         13:d2:41:2f:46:2c:ba:31:66:02:27:28:94:28:f4:a0:37:d5:
         33:28:19:20:1c:b2:3a:01:bd:c2:b5:20:3f:d5:69:f7:3f:74:
         63:80:05:75:ac:3e:31:82:15:6f:66:d1:42:2b:ec:d5:ba:bb:
         8c:4b:ad:a3:55:09:ab:a8:a3:e2:3d:53:5d:96:ff:5b:24:86:
         8a:34:d9:6c:d1:84:6b:b8:06:b8:92:ae:39:ef:4b:d6:95:06:
         f0:89:58:a1:9d:25:89:31:10:8d:8a:6b:9c:ba:6f:e2:58:ac:
         ea:3a:83:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:39:00 2026 by rpki-client