Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/315cfed3-efed-3013-9f60-c704231068cc.roa
File:                     315cfed3-efed-3013-9f60-c704231068cc.roa (raw, json)
Hash identifier:          Sedmug9OVmBnV8kxxN1+Joyx+iujasgyjVK4SqS8vqI=
Subject key identifier:   D5:8A:E9:59:F4:90:97:8B:60:2C:03:49:0A:2A:2B:E3:6B:CC:4D:EF
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DB9FC742BE6490B16FAB860
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/315cfed3-efed-3013-9f60-c704231068cc.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     18779
IP address blocks:        45.38.154.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:b9:fc:74:2b:e6:49:0b:16:fa:b8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=9b25c08f-d280-4a93-b4b6-56ac24597b10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:06:01:31:df:1a:f9:29:e1:1f:37:83:71:9b:
                    77:c9:e9:3a:8e:cf:af:c0:9f:56:95:e0:a1:37:a9:
                    43:78:d0:5a:29:3d:d6:07:25:d0:dc:e3:08:3c:7b:
                    5a:98:89:67:10:48:91:44:15:11:ff:49:52:b3:a1:
                    e9:85:1a:8e:13:23:a0:71:4c:00:da:99:79:85:dc:
                    e5:13:23:eb:ec:7e:93:2a:e5:43:05:e5:eb:de:10:
                    cf:54:d7:02:e5:cd:47:64:e9:c9:c8:5c:40:fd:77:
                    fc:ef:7b:2e:59:b3:72:eb:c4:4b:06:b7:a8:86:6a:
                    12:92:6e:22:90:09:7e:a0:4b:46:b9:93:2f:6e:bb:
                    d9:b1:80:15:53:df:29:45:0f:51:1c:f1:cf:76:2b:
                    2b:fe:9a:02:bc:fb:ac:ef:db:96:70:c8:c4:3d:5c:
                    58:c7:b2:6d:c1:0e:64:e8:6d:72:89:d1:16:c9:4d:
                    de:11:d2:3b:aa:1d:5a:ed:8d:66:49:ce:15:97:18:
                    23:e3:51:ea:51:8d:2b:a1:cd:39:33:6a:45:52:04:
                    7e:c2:6e:3d:c6:11:72:9b:de:00:ca:48:47:2d:6a:
                    c0:32:d3:2c:65:ea:68:55:f6:78:7b:6e:bb:07:cf:
                    f0:43:cc:37:b0:09:bd:9a:47:60:ea:84:11:07:17:
                    47:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:8A:E9:59:F4:90:97:8B:60:2C:03:49:0A:2A:2B:E3:6B:CC:4D:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/315cfed3-efed-3013-9f60-c704231068cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:b4:24:e1:a0:a9:7c:f7:75:b0:ce:aa:8f:6e:fc:87:6e:72:
         07:ba:08:5c:bf:e5:55:4a:19:84:3f:b7:bc:71:65:63:7a:f9:
         dc:4d:bd:a5:ff:d8:93:58:78:2c:70:2b:7e:0f:fc:2b:86:56:
         4b:74:bb:e6:17:b7:22:a5:e0:d2:4a:99:34:87:43:b0:09:c8:
         4d:bf:7a:e8:19:88:08:ce:a9:e2:29:d1:fc:89:4a:10:c2:a9:
         04:d1:96:e9:ee:3f:f9:a7:d0:c7:a5:33:2d:c9:d3:c7:af:b0:
         79:a7:6c:1e:2c:f7:b1:7a:3e:8c:74:d4:a0:b0:cf:b4:06:30:
         45:cd:99:e4:c6:cb:a1:75:c1:0d:dd:f9:a5:99:66:a1:2d:fa:
         62:fc:37:a2:ff:7b:24:92:23:34:91:49:89:71:e7:7b:dd:66:
         3c:e4:fc:ac:e8:5b:53:22:b8:c6:17:6e:40:a3:2c:65:2a:76:
         c0:47:ba:68:93:d5:69:16:f3:b4:30:ba:c6:d0:95:e1:8e:c9:
         61:f9:ab:80:aa:8f:05:af:3f:3c:ae:ac:2b:56:a9:d8:c1:ab:
         63:dc:b5:49:78:64:dc:f5:8d:ee:18:19:b8:01:93:11:c9:dc:
         4a:26:b9:ff:91:c5:55:20:d0:47:03:ca:a2:66:d0:b8:8d:fa:
         d0:5b:b4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:54:41 2026 by rpki-client