Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/5fddb116-626a-309c-aaa1-558e5f685771.roa
File:                     5fddb116-626a-309c-aaa1-558e5f685771.roa (raw, json)
Hash identifier:          Wr6EffRdHLpTw6hGRsBTFjntMonzpxE1U2JcldC/zDA=
Subject key identifier:   52:84:63:AE:85:1B:6C:8F:B9:98:80:DF:DA:7E:95:56:08:DC:7F:D9
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA0119907286DD57065000
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/5fddb116-626a-309c-aaa1-558e5f685771.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     50304
IP address blocks:        45.39.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:01:19:90:72:86:dd:57:06:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=6e969f8b-17db-43ee-86e7-577a438f934e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fe:ad:04:64:92:18:b3:f3:90:f1:23:b7:41:
                    67:ea:b7:fc:cd:54:48:1e:94:e3:76:a8:75:5b:35:
                    93:92:e2:93:48:39:41:75:c3:5a:e4:15:96:b5:c9:
                    76:e0:93:aa:bd:9f:79:92:08:45:2e:aa:16:bf:54:
                    e7:9b:62:6c:fa:7e:56:77:34:f4:49:0a:41:33:f1:
                    40:60:23:79:e2:bd:95:37:19:df:ab:14:ce:48:c5:
                    30:38:8d:07:37:f0:51:51:88:55:37:e7:df:aa:c3:
                    f7:cd:0c:cd:70:30:ae:02:8d:a6:88:95:14:0a:5e:
                    05:0a:5a:4f:74:0b:5c:9d:d9:95:b7:03:98:ff:ce:
                    ac:ee:5f:18:bc:03:17:72:97:c1:1a:69:d3:4f:45:
                    cc:eb:ab:7d:e3:2e:9a:45:af:cb:d8:b4:ba:08:db:
                    f6:81:5d:52:83:7c:c2:74:75:c4:c5:fb:cd:47:b3:
                    80:e0:5a:cd:53:d5:43:a6:76:b9:2e:6c:0c:f3:4b:
                    e5:e0:3f:70:a7:26:71:71:dc:79:9e:3b:7f:3f:83:
                    0e:df:61:9e:8f:4c:e4:7f:8b:0a:92:7e:0b:77:5f:
                    a5:ec:ed:05:05:b0:ba:47:2a:4a:38:d9:ec:ef:01:
                    ec:83:61:3b:05:6d:be:c8:b0:f0:4e:5c:6d:22:f7:
                    94:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:84:63:AE:85:1B:6C:8F:B9:98:80:DF:DA:7E:95:56:08:DC:7F:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/5fddb116-626a-309c-aaa1-558e5f685771.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:f2:05:2e:33:c8:3e:f7:d2:a6:95:c0:15:ee:f4:4a:ce:78:
         30:93:ea:f8:48:89:c5:26:28:bd:fa:8a:fd:70:73:ba:66:02:
         9b:0d:9e:4e:fe:4b:71:0e:81:59:90:e0:36:02:f8:66:9a:41:
         93:00:0a:34:87:e0:7a:59:37:89:36:08:c7:72:9e:44:84:48:
         36:2f:ea:72:f1:59:fa:3c:58:4c:6f:03:1b:bb:8e:ea:23:90:
         6c:64:de:19:ef:d6:6a:83:50:e0:0e:6d:51:2a:12:02:9e:a3:
         31:3e:d3:ab:bb:aa:93:47:7d:75:b0:76:21:8e:ed:94:cd:1a:
         da:d1:48:64:c9:89:55:f2:7b:1e:da:44:0d:45:2c:65:fe:b3:
         35:c5:a3:2e:0f:96:3d:f3:ad:f0:17:dc:b0:b6:7b:c3:9d:bf:
         cc:4d:1e:ba:80:e3:7b:49:61:1e:d0:77:96:8a:24:68:80:b3:
         21:d1:b8:2a:30:56:e7:1f:8b:00:97:41:2a:f2:6a:78:35:57:
         18:d9:d6:8a:73:e0:62:7f:b1:52:06:b3:55:78:58:16:d0:de:
         e1:40:a5:1d:0f:a3:80:d9:92:07:bd:dc:db:14:bc:fb:fd:bf:
         a1:52:54:07:42:51:ff:b8:13:56:15:af:51:0d:a1:ca:56:d2:
         ac:ba:3c:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5NugEZkHKG3VcGUAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDYyNjIxMDAxMVoXDTI2MDkyNDIxMDAxMVowLzEtMCsGA1UEAxMk
NmU5NjlmOGItMTdkYi00M2VlLTg2ZTctNTc3YTQzOGY5MzRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP6tBGSSGLPzkPEjt0Fn6rf8zVRIHpTjdqh1
WzWTkuKTSDlBdcNa5BWWtcl24JOqvZ95kghFLqoWv1Tnm2Js+n5WdzT0SQpBM/FA
YCN54r2VNxnfqxTOSMUwOI0HN/BRUYhVN+ffqsP3zQzNcDCuAo2miJUUCl4FClpP
dAtcndmVtwOY/86s7l8YvAMXcpfBGmnTT0XM66t94y6aRa/L2LS6CNv2gV1Sg3zC
dHXExfvNR7OA4FrNU9VDpna5LmwM80vl4D9wpyZxcdx5njt/P4MO32Gej0zkf4sK
kn4Ld1+l7O0FBbC6RypKONns7wHsg2E7BW2+yLDwTlxtIveUkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFKEY66FG2yPuZiA39p+lVYI3H/ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvNWZkZGIxMTYtNjI2YS0z
MDljLWFhYTEtNTU4ZTVmNjg1NzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSccMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAPyBS4zyD730qaVwBXu9ErOeDCT6vhIicUmKL36iv1wc7pmApsNnk7+
S3EOgVmQ4DYC+GaaQZMACjSH4HpZN4k2CMdynkSESDYv6nLxWfo8WExvAxu7juoj
kGxk3hnv1mqDUOAObVEqEgKeozE+06u7qpNHfXWwdiGO7ZTNGtrRSGTJiVXyex7a
RA1FLGX+szXFoy4Plj3zrfAX3LC2e8Odv8xNHrqA43tJYR7Qd5aKJGiAsyHRuCow
VucfiwCXQSryang1VxjZ1opz4GJ/sVIGs1V4WBbQ3uFApR0Po4DZkge93NsUvPv9
v6FSVAdCUf+4E1YVr1ENocpW0qy6PIA=
-----END CERTIFICATE-----
Generated at Tue Jul 7 11:54:43 2026 by rpki-client