Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/23fa1af2-fa34-3f0e-b4fe-2575fc163bb1.roa
File:                     23fa1af2-fa34-3f0e-b4fe-2575fc163bb1.roa (raw, json)
Hash identifier:          L4+bSybbzsx2DOg9457IlWh6O/xj+8Le/VktdcvyvV0=
Subject key identifier:   8B:49:1C:57:A1:FB:BA:A8:05:CC:01:FF:7A:79:30:EA:AD:B0:CB:40
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA0163451A3548DC0970E0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/23fa1af2-fa34-3f0e-b4fe-2575fc163bb1.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     262287
IP address blocks:        45.39.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:01:63:45:1a:35:48:dc:09:70:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=48e18031-876b-42d4-9b47-0f2c09e2cd5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d0:fb:d3:83:39:e3:29:16:75:60:69:43:ab:
                    a7:d7:65:37:17:b0:98:7d:ed:05:10:d3:18:c5:b0:
                    33:81:a9:53:53:a4:4a:a8:b4:fd:4d:91:d5:16:15:
                    89:01:1c:c5:a3:e2:ae:27:97:b4:11:14:fa:a5:dd:
                    d7:a5:aa:77:e0:85:62:51:50:58:c5:8e:4b:0f:87:
                    8e:81:4a:cc:36:63:39:b3:2b:1f:9e:2e:2f:0d:44:
                    7b:54:91:43:cf:c8:41:c9:cd:09:62:b8:dd:48:bd:
                    9c:b5:74:58:fd:b3:71:ec:4b:e0:03:3e:03:6d:e2:
                    33:70:91:5f:f3:f5:f8:1e:47:af:fe:52:79:80:b1:
                    d0:0b:5a:b1:92:ee:d7:33:50:c0:53:cb:45:d7:4c:
                    f1:93:8c:25:5c:64:49:54:c9:a1:bf:de:14:e9:d3:
                    1d:c2:b6:41:66:85:63:48:0e:43:c2:98:36:aa:40:
                    e4:ce:d4:81:30:90:57:18:31:dd:64:d2:5b:f0:44:
                    90:a7:46:7b:35:ff:49:c3:71:e7:e0:ce:61:87:4d:
                    69:e8:ed:2d:fc:c9:c9:f8:00:72:42:ea:e1:32:0a:
                    09:b3:40:06:c2:7a:e0:40:c8:da:d3:01:7f:60:17:
                    ac:e4:e2:c8:4d:37:c1:68:91:e6:be:b9:fd:fd:e0:
                    e1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:49:1C:57:A1:FB:BA:A8:05:CC:01:FF:7A:79:30:EA:AD:B0:CB:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/23fa1af2-fa34-3f0e-b4fe-2575fc163bb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:3b:7d:07:89:d8:c5:02:70:26:18:29:ad:46:01:de:be:e0:
         44:3d:ca:11:97:63:b7:c9:77:27:e7:f1:9c:4c:6f:17:e2:94:
         e4:8e:f3:76:60:a8:b5:ec:9e:1d:e6:9b:96:53:92:aa:97:a6:
         d1:6a:41:50:b6:3c:38:2e:ee:4a:6d:be:f6:28:14:bd:6f:7c:
         86:b0:1e:2e:fb:1c:3f:42:b7:fe:7e:ff:f1:ca:9c:66:ac:8c:
         4f:f0:97:7e:0d:7e:0a:8f:97:8d:07:ac:2b:3f:25:33:b7:95:
         2f:8b:e4:79:c1:12:2f:5b:c3:4c:79:3c:ec:72:9b:40:6f:ce:
         70:1f:0e:32:89:65:0c:ff:04:5f:13:91:46:07:f5:1d:e1:6f:
         73:b5:f8:8e:f7:c6:c2:20:24:8c:c5:1e:73:21:09:8b:29:c5:
         30:96:a6:b1:df:0b:00:b7:0a:8a:0c:b4:c4:c9:fb:0b:32:13:
         69:45:7f:06:9a:8b:1e:e5:8f:04:43:14:3b:40:ea:ad:ee:09:
         9b:85:e7:3f:44:0a:0b:50:bf:62:5e:50:ab:4c:9f:1a:22:b6:
         00:3c:f8:92:38:58:77:ac:0e:24:83:6e:e4:9e:0a:82:8d:12:
         ed:71:37:ff:db:4d:df:c2:3f:2d:4c:05:51:9d:e0:4e:0b:4e:
         97:11:63:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:51:44 2026 by rpki-client