Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f65d9c8a-2daa-3442-994d-31747d0289f3.roa
File:                     f65d9c8a-2daa-3442-994d-31747d0289f3.roa (raw, json)
Hash identifier:          wv+3TnRwTWVCfSuoacC4DAzGs45+dsehpGmRl0jDn04=
Subject key identifier:   8E:FA:1C:C5:70:2E:EE:96:B8:70:A4:5C:78:89:3F:AB:47:A4:4F:40
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D6DDA1327295777BE0E48BFC0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f65d9c8a-2daa-3442-994d-31747d0289f3.roa
Signing time:             Tue 07 Apr 2026 16:24:05 +0000
ROA not before:           Tue 07 Apr 2026 16:24:05 +0000
ROA not after:            Mon 06 Jul 2026 16:24:05 +0000
asID:                     212238
IP address blocks:        45.39.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:da:13:27:29:57:77:be:0e:48:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  7 16:24:05 2026 GMT
            Not After : Jul  6 16:24:05 2026 GMT
        Subject: CN=7e1d1b28-f003-4ce2-a0d0-3ad983659eaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5a:58:f4:73:23:b2:eb:71:79:bc:60:91:7e:
                    aa:f6:3d:fb:ad:45:dd:80:6d:ee:63:64:60:a9:e8:
                    a4:7a:0d:b5:3b:99:18:2c:ae:70:ca:60:9c:de:9b:
                    46:f6:40:a1:67:4d:5d:fa:da:08:08:4b:66:39:0d:
                    8e:42:63:38:8f:20:7c:29:b9:27:9d:64:61:bf:11:
                    92:6a:ee:34:dc:67:8b:6a:a1:49:2f:42:97:95:ca:
                    7f:36:69:6c:37:3f:e1:cc:00:01:22:ac:06:3b:ac:
                    e4:2b:17:ee:8d:67:84:f2:51:ec:b4:01:84:ef:2c:
                    c2:66:c4:01:a0:2f:25:6e:47:31:79:be:82:ca:3a:
                    60:bb:42:16:5b:fd:b0:1f:e1:df:f3:73:3b:29:7e:
                    a2:55:fe:d1:59:26:64:a5:d0:d9:20:d4:b4:23:8b:
                    3c:15:4a:e9:03:05:51:e5:c5:ec:33:29:7b:a9:a2:
                    72:c7:b4:2e:01:9d:87:79:63:8e:62:ed:1e:8b:9d:
                    09:f2:24:66:b1:00:46:31:d8:2a:6f:1a:87:aa:d8:
                    5c:8b:ac:f2:bd:a5:10:a3:8a:c4:2f:db:3d:d1:96:
                    85:d7:0a:58:eb:4b:89:72:87:69:1d:39:d1:13:45:
                    25:af:68:da:6e:fc:d5:09:b2:b2:f7:78:78:9f:d5:
                    5e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:FA:1C:C5:70:2E:EE:96:B8:70:A4:5C:78:89:3F:AB:47:A4:4F:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f65d9c8a-2daa-3442-994d-31747d0289f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:3d:ae:54:fe:b0:f9:1b:eb:86:e2:3f:b6:14:a9:ac:b4:6f:
         e7:c8:fb:2e:ef:58:df:a1:a9:ea:26:4e:bb:d7:61:32:c5:5c:
         ea:b0:29:24:a7:c5:90:a5:09:cf:4b:ef:d2:32:6d:38:4c:0c:
         8a:a4:b5:d2:08:9a:ac:e7:4b:1f:35:68:c5:83:f8:b6:81:a9:
         49:1f:07:a4:b7:eb:59:13:d3:73:3f:ee:1c:c4:85:fe:4a:12:
         12:06:77:c7:be:fc:c4:d4:1f:20:9a:e2:94:c0:b7:bc:f0:20:
         e2:1a:bc:b0:38:39:0e:5f:fb:fe:d3:38:e7:f9:11:73:07:83:
         90:7a:e8:ef:8d:40:14:4b:09:8b:18:d8:da:6e:3a:fd:bd:41:
         25:15:06:12:eb:98:f1:1d:98:bb:99:9b:de:b0:d7:3f:02:d5:
         26:19:13:83:07:35:17:ee:d2:34:0b:f8:d2:de:d2:60:0b:17:
         8c:c7:23:28:89:79:b3:1d:7f:19:48:1b:6c:03:c8:3d:0b:de:
         f8:e6:cf:71:0b:33:18:69:86:9b:72:18:1e:8a:b3:e5:54:34:
         85:a8:cb:9d:0a:41:dc:1c:e1:a7:bb:6b:73:f0:55:a5:e5:fd:
         f8:f6:6b:17:0d:04:38:d0:fa:c6:19:47:80:e8:b7:9b:52:c0:
         b4:96:47:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:40:42 2026 by rpki-client