Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f39ef289-43f7-313f-9feb-c122da431978.roa
File:                     f39ef289-43f7-313f-9feb-c122da431978.roa (raw, json)
Hash identifier:          c+u7JiuLnUMZPjBpOKIHMQ+AwP4U2o6XDCkN9m4QYzY=
Subject key identifier:   E5:FC:C6:3B:C0:B1:71:05:DB:52:0A:7D:33:5B:F3:41:FC:DA:36:B3
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DEA5E8BF372BAD9B9E0FB40
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f39ef289-43f7-313f-9feb-c122da431978.roa
Signing time:             Tue 07 Apr 2026 16:56:55 +0000
ROA not before:           Tue 07 Apr 2026 16:56:55 +0000
ROA not after:            Mon 06 Jul 2026 16:56:55 +0000
asID:                     397630
IP address blocks:        45.39.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:ea:5e:8b:f3:72:ba:d9:b9:e0:fb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:56:55 2026 GMT
            Not After : Jul  6 16:56:55 2026 GMT
        Subject: CN=3c763308-a883-432c-a77c-7e2bb3f64cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a8:3e:ce:f5:7d:80:ac:c8:63:37:6c:c8:2d:
                    b5:f1:70:e4:48:55:08:d9:ff:59:a7:07:d4:41:74:
                    f5:01:58:06:79:ec:1d:47:07:d8:5c:48:4a:cf:f4:
                    9e:ea:ca:9a:fc:66:c8:03:ae:65:ab:a3:6c:e2:b4:
                    7d:31:d1:49:3f:ce:1c:28:e9:c9:6c:a7:63:01:80:
                    d9:59:0c:5c:4d:1a:62:ea:4a:bd:63:65:82:62:c6:
                    67:30:e0:1f:ff:f1:97:27:a6:ba:e6:47:01:ed:ae:
                    84:d6:57:23:12:0e:bb:e6:6a:86:f4:14:ea:13:a2:
                    fd:d7:d5:4a:da:20:e0:8a:c4:44:d7:db:1a:dc:a3:
                    99:c6:77:2b:00:9b:4a:37:b1:f7:c7:db:ca:b6:a5:
                    a2:88:dd:cd:e0:3e:36:79:cd:e6:e3:0a:93:78:87:
                    0a:ae:55:83:c6:19:c5:d0:00:22:3b:f2:66:9b:6b:
                    11:b9:31:ea:a1:04:b0:25:c2:af:4e:a4:77:c0:7e:
                    82:b8:4c:2d:02:cb:86:64:84:af:0f:ac:54:29:c3:
                    ba:37:18:c1:56:87:ae:fb:47:18:a9:9c:b0:3e:61:
                    ad:8f:e9:df:f4:c9:58:53:43:47:ca:6d:ad:41:1b:
                    00:a2:cf:42:e3:d0:e3:07:87:f9:74:3a:6c:1c:46:
                    7f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FC:C6:3B:C0:B1:71:05:DB:52:0A:7D:33:5B:F3:41:FC:DA:36:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f39ef289-43f7-313f-9feb-c122da431978.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:84:53:37:ee:8a:d8:f6:5a:8b:05:da:21:d3:be:f2:c6:17:
         99:48:be:b7:b8:dc:8e:75:71:8d:30:45:65:39:83:d1:88:52:
         3c:ba:8c:cd:3c:7d:8f:d9:52:0e:53:51:9e:44:94:23:72:12:
         c3:4e:7b:b6:4c:fd:a0:e2:37:79:10:3a:04:b5:a5:6c:5a:b4:
         c3:86:a8:35:0a:1a:c7:6c:6c:30:f6:2a:ae:d5:38:a3:8d:18:
         a6:0f:a8:73:19:ae:7d:98:88:9f:e8:eb:56:0b:89:4b:8f:ba:
         a3:17:9f:d6:f3:0c:b1:5d:35:fa:d7:6f:8d:0c:b3:a5:fd:75:
         b3:16:2b:02:23:5d:ae:3f:95:07:c3:20:a7:35:92:ed:37:dd:
         3a:61:e2:a6:61:bd:26:fb:93:e6:4a:12:f6:b3:2a:78:ba:74:
         f3:a1:21:40:17:8b:f0:02:ac:76:9c:4c:88:27:bf:18:9e:fc:
         66:c0:3d:2e:42:7b:f8:da:dd:dd:4e:c9:17:61:95:ac:8f:5d:
         b5:72:54:28:d4:bd:11:e4:07:4b:e2:ba:d3:f3:57:67:10:9c:
         c0:2d:4c:b7:e2:98:18:ec:0b:7e:7c:b9:89:d8:5f:a0:e8:ca:
         a3:32:85:1e:e3:c0:28:65:e9:ef:7e:0e:6c:9b:2d:f7:a6:96:
         a5:ec:8b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:43:01 2026 by rpki-client