Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/132929c7-653b-3af6-b0d0-dc46644fbdef.roa
File:                     132929c7-653b-3af6-b0d0-dc46644fbdef.roa (raw, json)
Hash identifier:          6uyceiF2EgjE7JsFQmY1LTbswawAIdF2xu7XdQbfUV4=
Subject key identifier:   96:D0:86:AE:50:F2:92:3C:16:74:1A:27:49:27:43:0E:33:20:95:C5
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA00B17B0670D6C62A5C80
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/132929c7-653b-3af6-b0d0-dc46644fbdef.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     9009
IP address blocks:        45.39.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:00:b1:7b:06:70:d6:c6:2a:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=37f4f7df-99be-464c-8ffd-25c128926413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:89:59:d4:e2:d2:1d:a6:75:b9:37:69:0f:93:
                    2f:06:03:93:97:12:d6:58:3e:f8:a1:06:41:3d:c1:
                    5f:9b:e4:bf:94:d4:1e:0a:2b:94:92:8d:09:42:03:
                    f5:08:23:d1:b6:96:55:f9:cc:d9:df:b3:99:d1:93:
                    9b:99:32:eb:c1:0a:db:bd:06:a6:84:62:e8:f2:a0:
                    1a:5e:2c:92:39:1c:30:21:2b:c5:4b:4c:43:f2:93:
                    bf:15:9f:1a:48:13:9d:69:61:88:1c:d3:b8:fb:86:
                    88:a5:91:32:f5:42:b3:2e:68:50:7f:67:40:ac:fd:
                    5f:2c:79:1b:78:f5:24:9b:61:e8:84:31:c0:5f:1f:
                    61:87:5a:c4:97:ed:34:2f:b1:41:30:be:9a:3a:6d:
                    26:a7:93:95:48:ee:e3:c9:81:f2:55:0f:5f:a6:60:
                    bd:f3:6c:86:b3:26:7b:45:2a:d1:30:5e:39:08:a7:
                    9a:e7:a6:80:bd:22:b3:06:55:f0:0d:73:d3:09:31:
                    38:a4:2d:46:64:db:92:cc:94:8d:18:7c:94:d1:34:
                    72:cb:d9:97:2f:ac:f6:57:c8:a6:a2:c6:e4:df:ee:
                    19:be:80:0b:7b:e1:4e:3f:81:7b:ad:61:dd:19:62:
                    f5:ba:53:f6:4d:1a:c0:b7:ca:32:32:eb:f2:9b:cd:
                    9a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D0:86:AE:50:F2:92:3C:16:74:1A:27:49:27:43:0E:33:20:95:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/132929c7-653b-3af6-b0d0-dc46644fbdef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:8e:f2:dd:0b:3c:12:02:b1:ed:ab:b6:d7:b7:57:8f:eb:04:
         49:51:17:3a:55:03:90:77:aa:de:f4:1a:96:68:b5:45:4d:b3:
         29:bb:33:ef:b6:6e:c4:ec:47:00:ae:9c:30:41:f2:45:1b:32:
         1d:9b:6b:25:e7:e3:46:d3:d1:c0:34:8e:e3:5c:49:4c:6d:a5:
         e0:a6:29:e2:68:ad:80:07:77:48:6f:b0:b1:9c:8f:1c:e5:03:
         fd:b0:6c:24:57:94:06:ae:90:48:2e:5a:ab:a6:fe:ef:a7:c5:
         e7:63:9d:6e:76:b5:5e:ee:f3:08:79:77:81:10:a8:4a:94:ff:
         6d:ac:0d:c3:9c:d1:42:09:2a:96:82:57:91:78:24:45:36:24:
         68:6e:d3:2c:d7:9b:b5:83:88:61:70:49:f5:58:29:dc:e9:6c:
         a1:7a:2b:b3:e2:61:80:16:9d:89:fb:3e:8f:38:42:34:b9:8e:
         59:d0:70:4a:11:5e:6b:7c:f1:92:b7:f1:15:9d:a9:c1:27:35:
         1e:a1:b5:6e:c2:d0:5f:18:c9:44:00:b7:43:db:e9:12:54:14:
         8e:c9:6a:32:d8:68:45:ca:84:ae:36:c3:df:39:c4:35:8e:e2:
         a9:b1:12:cb:46:ca:d2:ef:4f:cd:f6:d5:e8:44:90:77:4c:c6:
         74:65:b0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:54:07 2026 by rpki-client