Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/31d03101-49f7-35a8-8e12-ab350457a719.roa
File:                     31d03101-49f7-35a8-8e12-ab350457a719.roa (raw, json)
Hash identifier:          7yCiSE+nwTeWH3qFPh+B9sH0qD32RlbR9jSMvVLi5kU=
Subject key identifier:   17:6C:E2:21:91:C2:18:CD:85:B6:F9:14:8C:8C:3E:30:2C:47:EC:8D
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584F6B9F35F92F3076613F609B00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/31d03101-49f7-35a8-8e12-ab350457a719.roa
Signing time:             Wed 07 Oct 2026 06:47:44 +0000
ROA not before:           Wed 07 Oct 2026 06:47:44 +0000
ROA not after:            Tue 05 Jan 2027 07:47:44 +0000
asID:                     135636
IP address blocks:        45.38.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6b:9f:35:f9:2f:30:76:61:3f:60:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Oct  7 06:47:44 2026 GMT
            Not After : Jan  5 07:47:44 2027 GMT
        Subject: CN=f4e3a3c0-6eee-4b8d-9de9-d396fb168751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a0:58:86:da:f7:72:f9:d7:49:98:e6:89:c7:
                    2a:89:b1:36:2d:a0:46:cc:7a:82:78:39:b8:0d:b1:
                    fb:25:29:5b:21:6c:1d:94:c7:06:23:2a:14:18:6f:
                    75:ff:82:8d:cb:af:c1:d7:47:d8:4c:1c:0c:d2:68:
                    89:50:0c:ce:c7:f1:d1:24:cd:1e:07:3d:65:ee:78:
                    35:93:79:f3:4a:6d:2e:1a:31:80:8a:f4:93:ad:18:
                    a9:a2:6c:20:f9:11:ba:56:df:c7:60:43:2e:c1:d6:
                    cf:1f:7f:ba:4c:98:7c:2e:30:8d:4f:73:fc:70:31:
                    b7:83:32:57:80:74:31:2e:66:98:7b:72:a8:86:6e:
                    a3:a4:b1:87:e9:c8:6c:a8:46:57:5a:0c:6c:00:d5:
                    9d:75:6b:34:2e:c3:cd:16:e4:49:3c:f7:3d:0c:ac:
                    1d:64:6b:e0:e8:67:2a:94:35:f0:eb:66:6c:d8:b4:
                    6e:f3:9f:ac:7d:6b:de:65:5a:3d:53:3d:53:87:a7:
                    61:06:f8:52:8b:52:b1:56:ee:e4:d7:67:bc:32:06:
                    20:8f:82:9e:16:1e:c6:70:6b:b0:15:8e:a1:89:ab:
                    4a:fd:ed:21:18:d3:0e:e3:09:10:8c:60:c3:cb:58:
                    7e:08:7d:f4:e3:1b:52:7d:a0:d6:ec:66:2a:11:b5:
                    1e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:6C:E2:21:91:C2:18:CD:85:B6:F9:14:8C:8C:3E:30:2C:47:EC:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/31d03101-49f7-35a8-8e12-ab350457a719.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:92:76:dd:ed:3b:57:c3:82:1b:4d:5f:bd:19:ab:ec:69:ed:
         1f:3c:2d:82:3b:b8:29:e2:50:9c:79:ce:11:c4:82:43:59:d5:
         a6:01:63:3a:4e:02:19:e2:22:57:ad:f8:e5:1f:3c:5b:e7:fb:
         a8:f5:90:32:d0:de:53:9e:c0:93:c3:44:96:e0:f3:68:7f:4e:
         45:57:90:13:47:a8:1b:97:01:c5:2a:f6:05:04:b1:3c:b9:a1:
         06:e9:16:8d:4f:17:b7:9c:b4:17:93:b2:04:f7:27:93:61:f7:
         cb:fc:c3:4b:e6:e9:8d:f1:b5:b4:25:02:a7:a3:d6:c1:a3:f2:
         52:0c:4b:82:5c:aa:63:29:f2:f4:38:b2:4b:b5:7d:04:af:db:
         72:01:2b:88:3b:e3:51:c3:18:11:a7:35:76:31:cd:c3:25:29:
         58:5f:a4:d0:15:15:39:c5:a2:90:45:18:af:78:df:89:4e:1f:
         0c:9f:ee:e3:50:a7:a3:d2:b1:25:18:06:42:e9:d2:f4:38:fe:
         52:40:27:d8:13:95:44:78:b3:e2:0f:d6:bb:91:e5:a6:d9:b7:
         43:9e:00:32:ac:7f:8b:a9:bc:a3:1e:7a:02:17:3b:74:2b:3d:
         58:27:33:ab:ff:18:c9:68:33:db:a8:36:da:07:16:49:21:77:
         7b:40:d2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 21:22:28 2026 by rpki-client