Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/dbae4344-6cc3-3c78-a7bd-18d03050a0b1.roa
File:                     dbae4344-6cc3-3c78-a7bd-18d03050a0b1.roa (raw, json)
Hash identifier:          AefKzGdrbrbS8ABEmY7Ld/A0txx9tc8N9N6oah8b458=
Subject key identifier:   BD:19:31:F7:B0:98:7C:DE:0A:44:C6:9E:F9:B7:89:32:C3:C4:BA:BF
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDA2A266A62A91E5D186900
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/dbae4344-6cc3-3c78-a7bd-18d03050a0b1.roa
Signing time:             Tue 07 Apr 2026 16:24:16 +0000
ROA not before:           Tue 07 Apr 2026 16:24:16 +0000
ROA not after:            Mon 06 Jul 2026 16:24:16 +0000
asID:                     262287
IP address blocks:        45.39.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:da:2a:26:6a:62:a9:1e:5d:18:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:24:16 2026 GMT
            Not After : Jul  6 16:24:16 2026 GMT
        Subject: CN=875986d1-fe1b-4a19-bd5e-e331a8d529f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:87:4f:29:f3:d6:3f:ed:8e:19:a7:56:6e:95:
                    94:67:0a:e5:e5:00:f4:9e:8e:bb:ac:94:05:65:78:
                    c6:dc:69:1c:39:84:4e:9e:df:a5:1f:ac:73:2f:d2:
                    92:06:17:1c:5f:2b:0f:8c:be:ec:e6:32:d7:da:fe:
                    1e:cc:db:4c:de:42:f4:08:15:af:0f:37:68:71:cd:
                    ac:b1:42:dc:c1:df:74:bd:b4:63:08:ae:1f:0e:1c:
                    d3:a3:d7:03:fd:86:ca:f6:85:67:21:88:24:f5:df:
                    68:c3:54:04:cb:44:a5:bd:a6:79:65:0b:9c:8a:7a:
                    77:c9:6b:6b:af:8f:3c:83:b7:68:20:5b:7d:df:9b:
                    2c:07:d8:e7:ed:b4:ea:81:ad:7e:c4:ab:51:8d:60:
                    75:74:8b:c5:53:07:e3:ec:91:b4:69:ab:19:27:86:
                    a3:ab:f7:e7:32:8d:29:fa:1a:23:55:84:1d:37:f2:
                    1a:fa:4d:eb:d2:5e:b5:79:0f:49:54:a7:b6:64:80:
                    a0:76:ca:e4:b1:0b:63:35:1a:7c:ef:48:28:c6:f0:
                    9e:74:7c:91:42:69:ba:bd:aa:f9:59:ae:9b:6e:fd:
                    ae:09:dc:d1:01:8b:d7:04:c6:fb:ba:95:99:d4:22:
                    66:9e:af:62:3c:7f:bb:bd:40:ef:1e:e0:af:bc:61:
                    56:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:19:31:F7:B0:98:7C:DE:0A:44:C6:9E:F9:B7:89:32:C3:C4:BA:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/dbae4344-6cc3-3c78-a7bd-18d03050a0b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:59:5e:1b:80:3a:a1:0b:24:a5:74:e5:2e:e7:3f:a9:fd:35:
         56:07:7c:57:b0:70:74:f7:2e:7a:86:b8:3c:01:c9:d2:6d:0f:
         98:d2:77:a5:b4:01:e9:f7:2c:93:60:38:4c:fe:2c:3c:e6:ec:
         4b:97:24:be:c9:65:09:3a:a4:c2:d0:63:dc:5f:08:ab:0c:2f:
         71:45:c4:e3:f0:af:aa:69:f3:17:a3:b2:26:a9:66:b2:49:28:
         ac:cf:db:47:b1:a0:a1:b3:1c:ce:9c:2a:bc:d2:bb:f0:64:24:
         f6:91:36:ea:5f:4a:14:b6:43:bd:32:dd:f4:b3:36:f6:f1:d2:
         e3:47:98:8e:3f:df:c9:01:5e:b0:d2:d5:4b:bc:d3:d4:15:ad:
         e1:fd:67:cb:64:5a:a1:ac:03:62:3e:5e:3f:53:6c:f4:7e:67:
         df:4a:ce:ce:50:f2:f1:28:0b:44:50:84:62:e6:c3:cc:85:68:
         0a:fd:61:95:f9:5b:d6:ed:82:70:7c:3e:35:95:1c:ca:59:29:
         cc:2e:1e:d2:ff:19:b2:96:a9:ba:7d:21:88:de:fa:6b:b1:51:
         7e:02:7d:34:4b:8a:1f:1f:6f:e8:cc:1d:27:13:16:a8:c2:2d:
         82:47:ec:12:83:f2:d0:ca:5b:44:0a:7f:80:3d:d8:6a:fa:20:
         9e:2b:46:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:42:13 2026 by rpki-client