Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/10614169-1c53-338d-965c-261a0ad8acb0.roa
File:                     10614169-1c53-338d-965c-261a0ad8acb0.roa (raw, json)
Hash identifier:          6g3kk6BJekKQ29gcs18WMgNV7IVW/kk6rO3AEqaNbTs=
Subject key identifier:   8F:1E:C5:AF:17:40:11:2B:95:B0:C0:FB:E9:44:AE:EE:20:90:3E:BD
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CD15FD8DFAE8C43AE1400
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/10614169-1c53-338d-965c-261a0ad8acb0.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     18779
IP address blocks:        45.38.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:d1:5f:d8:df:ae:8c:43:ae:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=422850a2-95ae-4873-87b2-0d5e67d0dd0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:76:a1:71:d0:52:b0:67:c3:16:0b:54:61:d7:
                    ca:0c:99:82:74:f8:9b:44:02:73:ed:d0:be:6e:72:
                    0e:6b:3e:49:7e:1a:5e:b5:6c:09:6b:60:bc:66:bf:
                    06:03:fb:9b:8e:9f:35:ed:ce:52:e6:47:5c:94:0e:
                    63:f0:c4:ec:5f:78:a3:1a:41:b6:bd:63:36:f5:0a:
                    83:da:3d:c4:ff:c8:e5:70:fb:57:b7:a4:59:e2:f3:
                    55:c2:3b:6a:db:97:01:1f:8f:0c:e7:07:51:72:f2:
                    57:a8:62:a3:b1:db:a2:da:b0:2f:15:99:2c:94:d3:
                    c9:86:dd:f5:bf:fb:bb:dd:e0:e7:e1:02:72:6f:a2:
                    75:55:1c:83:00:13:31:c7:26:b3:d4:2d:90:a7:cd:
                    ec:7e:21:1e:fa:f3:4c:7d:9f:2d:87:ae:2c:35:74:
                    96:8f:1c:b4:2a:e8:c9:81:3d:4b:46:b1:54:5b:41:
                    ed:2d:74:d6:e3:00:6e:3b:67:66:a9:32:5b:bf:e0:
                    26:27:49:c3:72:09:5f:ea:d9:3b:8c:de:37:ef:7e:
                    ae:43:91:c0:e0:fe:90:83:87:69:6c:2c:04:ed:de:
                    bd:a5:28:f4:56:57:59:17:14:d8:da:00:91:4e:37:
                    4e:5c:f9:85:73:63:f5:36:3e:c6:eb:8a:bd:fe:89:
                    18:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1E:C5:AF:17:40:11:2B:95:B0:C0:FB:E9:44:AE:EE:20:90:3E:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/10614169-1c53-338d-965c-261a0ad8acb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:15:e0:10:97:42:57:37:65:13:9b:44:cc:dc:56:94:32:57:
         d2:1a:03:32:1d:2f:c8:54:9d:f8:4e:93:2c:c5:bf:7b:f7:58:
         2a:01:72:11:9d:ce:2c:03:9b:89:8d:b7:de:d5:f8:47:7d:9e:
         87:ce:13:1a:9f:9d:ac:63:67:65:ac:ac:87:39:de:1e:f4:4e:
         48:26:fb:b0:79:10:1a:55:9d:50:46:e4:1e:de:e2:1b:7a:4a:
         26:61:4f:ec:b5:3a:a6:f0:dd:52:aa:91:96:21:12:57:fa:ae:
         e2:51:41:49:9f:3d:ed:33:09:3f:b4:bd:dd:45:87:b4:40:2e:
         15:b6:c3:b3:c0:45:c5:3b:b1:aa:f4:1b:2e:83:0b:ff:18:46:
         d0:2b:b6:4e:87:2a:d5:f7:6d:8b:bc:7f:6d:13:29:1b:47:bf:
         2b:5a:42:fd:f3:d6:fb:88:52:90:ab:f8:00:0d:d9:14:61:b3:
         52:66:f0:29:23:2b:fe:51:9e:dd:1e:af:03:ae:62:f2:8f:fb:
         bf:4d:2a:94:61:9a:f6:5d:24:04:ff:aa:6f:0a:1e:32:a6:32:
         0e:63:c3:f7:95:53:9a:08:f8:03:b2:28:f8:71:57:93:46:22:
         7f:8a:93:5a:b0:38:0b:f8:15:35:1f:93:69:c1:dc:57:81:b0:
         06:d9:cc:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 11:42:10 2026 by rpki-client