Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2b7942dc-f078-3ff2-953c-18850a8878e6.roa
File:                     2b7942dc-f078-3ff2-953c-18850a8878e6.roa (raw, json)
Hash identifier:          5jR2SsxcfrPlw8yEdWRB12Lg0hSJNYvVaxFc5IVIiJ4=
Subject key identifier:   C0:A7:6D:D1:B4:0D:69:D6:2E:96:68:E7:FD:0B:C2:AF:D0:34:A2:E1
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EBED66CA857CC6472A61377C0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2b7942dc-f078-3ff2-953c-18850a8878e6.roa
Signing time:             Thu 06 Aug 2026 09:24:08 +0000
ROA not before:           Thu 06 Aug 2026 09:24:08 +0000
ROA not after:            Wed 04 Nov 2026 10:24:08 +0000
asID:                     10753
IP address blocks:        45.39.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 13 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:be:d6:6c:a8:57:cc:64:72:a6:13:77:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug  6 09:24:08 2026 GMT
            Not After : Nov  4 10:24:08 2026 GMT
        Subject: CN=3fa7c85a-7b2e-473c-8d4e-a0f12034b836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:95:50:90:9f:1b:c1:d3:04:4f:ea:5a:66:5e:
                    15:1c:98:ef:a2:70:72:f7:ec:1e:57:20:fa:cc:56:
                    46:cb:85:5c:51:ec:75:cd:c3:8f:20:d5:9e:d4:79:
                    20:63:d8:3f:38:e0:56:f3:54:3d:93:27:7a:4d:68:
                    53:ff:a1:9a:88:cc:e8:cc:f7:95:ef:f9:30:f1:5d:
                    25:d5:8c:28:a6:c6:37:73:52:23:1f:f2:50:8b:47:
                    9e:72:07:e0:c1:9f:29:d2:cd:53:5d:99:2d:ce:49:
                    8e:04:a8:7b:62:51:db:ed:7b:87:dd:a2:95:28:c4:
                    97:b0:2b:ca:ec:00:25:c9:cd:f2:2b:d1:07:2c:14:
                    26:47:37:aa:81:b0:14:cc:76:0c:63:ad:30:9e:c0:
                    9c:f3:35:82:dd:00:21:47:42:ab:d6:76:75:9f:3c:
                    36:f3:b7:28:f4:97:2d:60:83:c1:1c:b2:d1:e2:47:
                    df:de:dc:c9:c4:9f:c3:3f:66:2d:c9:bf:e2:96:16:
                    8f:3a:d1:cd:6d:10:3d:a6:87:56:10:a4:6d:49:16:
                    f8:b0:d6:63:af:14:f3:67:d5:52:16:36:e1:25:e4:
                    8b:6b:95:a7:c8:7c:43:1e:d1:0c:ca:c2:e5:1b:1f:
                    43:d1:e5:de:f7:96:62:b4:44:d9:f2:21:75:21:2f:
                    83:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A7:6D:D1:B4:0D:69:D6:2E:96:68:E7:FD:0B:C2:AF:D0:34:A2:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2b7942dc-f078-3ff2-953c-18850a8878e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:7b:c0:2d:c5:bf:30:57:fb:c0:a2:23:3c:c5:19:6d:b5:35:
         ce:7e:dc:f1:64:6b:f6:12:cc:21:87:fc:d8:35:16:11:f8:1a:
         1c:61:e1:b3:2e:2b:93:bc:0d:7f:1d:b2:e2:d9:98:10:31:3d:
         01:ea:04:3b:3f:ee:56:24:c0:7d:ef:c3:6e:23:0a:34:24:47:
         67:0d:ae:6f:0c:d7:c2:4c:fb:d1:6e:70:45:5c:59:0b:b3:ff:
         04:06:02:22:a0:72:4d:f4:1f:bc:a8:1f:ad:cc:a5:b2:c0:a8:
         5e:6a:40:b5:84:95:e5:a7:96:60:69:f9:34:02:3f:67:27:7e:
         a7:f0:89:48:82:ea:d0:1e:da:a0:9d:0e:84:49:6e:52:62:8a:
         d3:59:ac:45:47:b2:cc:7d:bf:45:9b:a7:b3:17:be:b0:51:92:
         38:25:11:a5:87:08:3f:e7:64:62:d1:82:1d:40:50:e3:d5:57:
         02:a8:7e:83:09:c3:87:d6:c4:e1:37:42:93:d0:22:fe:b2:55:
         05:3a:f1:6c:fd:b6:02:28:c4:a4:bb:f4:c6:50:53:e0:4c:e1:
         11:e5:ce:94:cb:9e:a8:57:72:1e:da:ee:63:1d:fd:49:38:8d:
         b6:53:92:d0:e8:cf:53:b0:ef:44:24:94:d7:19:fd:f4:71:d7:
         b4:d8:e7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 03:46:04 2026 by rpki-client