Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/053339ce-8ee9-3ba4-a39c-c6de50df19ee.roa
File:                     053339ce-8ee9-3ba4-a39c-c6de50df19ee.roa (raw, json)
Hash identifier:          HUHNhZp67sqNLf+AmSntaPiXEpinXx6Q7NeXFOOZFfE=
Subject key identifier:   F5:F4:73:3A:D8:DC:67:65:76:A7:01:F9:C4:E7:32:CD:DB:28:3C:69
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584F58CD4F1F1900A10D458DD380
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/053339ce-8ee9-3ba4-a39c-c6de50df19ee.roa
Signing time:             Wed 30 Sep 2026 13:00:13 +0000
ROA not before:           Wed 30 Sep 2026 13:00:13 +0000
ROA not after:            Tue 29 Dec 2026 14:00:13 +0000
asID:                     44559
IP address blocks:        45.39.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:58:cd:4f:1f:19:00:a1:0d:45:8d:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Sep 30 13:00:13 2026 GMT
            Not After : Dec 29 14:00:13 2026 GMT
        Subject: CN=66a4c331-3b9a-4db4-8656-b0d6d9f9278a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d4:7a:ae:78:b3:94:21:a2:e3:b9:c4:27:a8:
                    b3:ce:42:e4:86:c5:33:c2:da:ec:51:a0:a5:58:f9:
                    93:b2:18:67:89:b6:4f:03:bb:94:7a:ff:fa:1e:f1:
                    76:13:7e:cd:3a:76:10:be:ba:59:f1:c9:7e:55:34:
                    da:e7:43:ce:13:53:db:74:c1:e8:e0:17:0a:fb:f6:
                    fd:ad:42:fa:41:1e:0b:ac:1f:6b:73:71:2d:73:c0:
                    e1:fa:8c:f4:b6:6e:11:ad:07:d4:e5:af:8e:60:6f:
                    92:a7:ae:8d:3e:87:e1:d3:55:fc:05:53:a1:46:c1:
                    75:8b:43:01:1a:8b:09:c0:20:91:b4:c5:51:dd:66:
                    6b:17:20:fe:af:b7:62:08:c3:9a:1d:27:ca:9d:79:
                    be:69:18:6b:04:98:d3:02:61:fd:f3:19:82:59:7e:
                    00:31:8c:36:f0:6b:89:16:47:e0:e1:91:30:38:35:
                    bc:0f:f7:2f:25:16:b7:a5:5c:98:97:6a:0d:50:ed:
                    29:a5:af:d4:e6:81:d2:85:a8:89:e5:69:b8:17:e4:
                    19:c2:04:04:e6:d7:e4:15:5e:a7:c9:e6:91:0b:43:
                    bf:8e:e8:4c:1d:b5:37:6a:43:11:d6:96:89:f0:72:
                    33:4d:ea:21:9f:38:92:4f:72:9f:a4:d1:12:ea:25:
                    39:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F4:73:3A:D8:DC:67:65:76:A7:01:F9:C4:E7:32:CD:DB:28:3C:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/053339ce-8ee9-3ba4-a39c-c6de50df19ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:b3:1b:d3:ea:aa:d9:90:e5:97:7c:db:b4:57:e0:af:55:d5:
         4b:7e:ae:17:bb:39:e4:90:ea:5e:6f:f6:b7:20:68:6e:0c:1d:
         0a:a4:8f:f0:f2:f8:a1:ae:7b:d2:d8:07:f7:f1:fb:65:c4:36:
         00:55:87:8a:c6:04:9e:c5:52:64:d9:4b:a9:4a:e1:ca:63:ea:
         be:39:6b:08:45:4d:79:02:98:a4:33:41:ea:9d:df:c4:54:c6:
         f8:d3:e4:b4:93:10:b9:b4:f9:1c:2d:22:b1:70:17:b6:22:af:
         b9:57:02:3f:60:81:26:4e:15:99:67:f9:84:19:7e:ea:35:71:
         93:38:13:07:fa:15:a5:de:9f:7e:2d:7b:82:4a:ec:80:15:65:
         a7:49:85:84:92:c8:31:2f:a6:b4:ce:d8:92:b4:e8:1c:6b:27:
         5f:f9:86:b0:38:32:ff:33:33:e7:9f:6b:36:89:48:22:f6:74:
         57:d4:b3:c0:1e:b1:47:ef:b3:46:20:a4:a8:0c:76:da:f8:0f:
         13:0c:76:b2:6e:6d:f5:aa:33:b4:66:52:3d:a6:22:14:ad:96:
         1e:c3:2d:b1:8c:4b:dc:c4:05:0b:41:f1:cc:90:4b:4c:b5:86:
         ed:ed:c4:27:19:34:ce:cc:de:58:60:09:4d:83:45:f4:64:eb:
         f2:3e:fd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 04:04:18 2026 by rpki-client