Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/21292d71-e896-3c31-b320-7878a2475258.roa
File:                     21292d71-e896-3c31-b320-7878a2475258.roa (raw, json)
Hash identifier:          VAd+g9g54+aYcsqhtjKi0QnlUFKFt+t3+eFZbUcGtyY=
Subject key identifier:   61:DC:A6:6D:59:99:EC:D9:E3:95:51:36:3D:BB:18:51:32:46:09:19
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF44CAF7FE73015EF48FFE9A0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/21292d71-e896-3c31-b320-7878a2475258.roa
Signing time:             Tue 25 Aug 2026 13:00:12 +0000
ROA not before:           Tue 25 Aug 2026 13:00:12 +0000
ROA not after:            Mon 23 Nov 2026 14:00:12 +0000
asID:                     211273
IP address blocks:        45.39.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:4c:af:7f:e7:30:15:ef:48:ff:e9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 25 13:00:12 2026 GMT
            Not After : Nov 23 14:00:12 2026 GMT
        Subject: CN=32c554fc-bc62-40ef-acc6-df0a4f8cf1a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:82:0c:0b:4f:05:c2:d5:93:60:65:c2:be:00:
                    e4:09:4d:5a:1c:8f:23:94:1a:5d:b2:76:00:45:c2:
                    61:28:83:c1:82:fd:a3:10:98:38:4c:a4:b9:16:f5:
                    83:9a:7f:30:56:16:ee:76:84:e1:e4:fe:bf:60:6d:
                    5f:61:58:b6:46:f6:ec:8f:d3:d0:79:c5:5f:a2:51:
                    a7:6c:b0:82:94:5f:eb:4a:78:71:8e:be:84:a3:da:
                    42:2c:a6:93:02:26:8b:4b:7e:41:99:15:bb:f6:d2:
                    68:03:de:3d:a8:3b:b9:fd:b7:9f:20:28:c7:34:5c:
                    1b:fe:4c:50:c0:ba:d1:21:9d:56:0c:6f:47:e1:eb:
                    2c:15:db:e4:30:65:4a:b8:2f:6b:31:de:f9:60:d2:
                    27:aa:ea:11:60:5a:f8:29:87:d9:c1:e7:2a:49:5b:
                    6a:f8:97:15:e6:dc:3b:26:25:d1:a9:c3:c9:7b:3f:
                    d1:16:be:49:8a:31:bb:13:b9:75:46:41:d0:6a:6e:
                    dc:75:df:7a:24:5c:23:c4:80:ba:ce:41:f2:24:11:
                    7b:9d:56:0f:1d:26:df:c5:2d:06:58:70:ea:a4:c2:
                    69:28:11:1d:72:95:b7:ad:09:5f:9b:36:4a:72:a7:
                    c8:9f:46:dd:d2:68:95:d6:fe:ef:bb:b5:35:12:1b:
                    ca:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:DC:A6:6D:59:99:EC:D9:E3:95:51:36:3D:BB:18:51:32:46:09:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/21292d71-e896-3c31-b320-7878a2475258.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:28:52:1b:a2:fa:a0:35:19:f2:d3:bc:c6:87:27:17:5e:e3:
         9d:e6:a1:e9:f1:04:9e:60:3a:4b:69:9c:ac:d0:ba:45:b7:8e:
         dd:06:34:23:1b:ae:0f:71:e4:5c:62:f1:c5:a5:37:c7:a0:91:
         f2:ad:06:7e:4c:bf:48:81:e3:f5:17:59:46:f2:9f:eb:ac:5d:
         cb:06:1f:74:7b:41:6b:6a:46:6f:8c:62:fb:55:4d:ae:ed:8c:
         c3:f5:81:ea:2a:da:67:b5:ae:12:79:1a:ba:57:0c:53:f0:fe:
         c5:36:64:94:3c:a0:38:ac:ad:93:fe:41:ee:ea:15:ea:9f:86:
         9a:76:ad:df:59:96:8b:92:ed:29:f1:6f:6a:97:35:55:12:d2:
         4a:eb:11:75:21:3a:bd:21:3d:22:0a:8c:04:73:d0:22:64:cd:
         88:cf:bd:63:3b:c5:d5:af:59:03:42:1e:ab:a8:df:1c:43:d6:
         a7:01:6f:8c:a9:a2:a5:e1:3f:38:89:18:31:72:33:47:6a:c0:
         57:0f:5a:24:18:ee:50:9e:b6:f8:e1:3b:0d:4e:99:79:eb:90:
         94:a9:96:ff:b5:0e:ce:8b:72:86:7b:81:e5:f3:da:4f:20:84:
         e3:4a:ca:29:95:4b:f5:71:3f:2b:81:0f:80:aa:62:b6:62:2a:
         64:f6:0c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:48:53 2026 by rpki-client