Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/600bf917-ef7f-359d-8fc1-821ad2268710.roa
File:                     600bf917-ef7f-359d-8fc1-821ad2268710.roa (raw, json)
Hash identifier:          X+BJ8aSOVUZdydX7PUD1SjXt0N+tWnfRZFsSGfWbdsU=
Subject key identifier:   43:55:BC:97:D4:7C:FB:DB:29:3A:E9:40:77:BB:7A:C9:24:33:F9:51
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DB9FDCD7F529D9EE7E68500
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/600bf917-ef7f-359d-8fc1-821ad2268710.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     44559
IP address blocks:        45.38.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:b9:fd:cd:7f:52:9d:9e:e7:e6:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=317cdf0a-b0d7-4a9f-8a3e-f97b86c32dec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e7:9e:cd:1d:df:5c:73:e5:09:be:3f:6c:94:
                    3a:0d:c9:b0:d9:95:c3:b2:aa:b8:bd:0c:c5:3a:ee:
                    aa:09:e5:4e:f7:ee:4f:80:0d:67:59:a2:66:c2:70:
                    dd:5e:f8:3f:22:0f:2d:88:cf:c5:c4:5f:ea:16:71:
                    4f:9b:3a:6d:d4:0d:8c:f9:92:49:b8:a5:fe:c0:c8:
                    58:46:6f:11:7b:b9:6e:e0:f1:fe:f7:4b:4c:95:e6:
                    05:32:f1:00:af:c8:63:09:b1:aa:83:e2:01:3d:67:
                    3a:ce:d8:5f:41:3c:83:95:47:df:78:a3:b6:b3:b1:
                    e3:f8:44:0a:c2:0c:39:7a:87:ed:44:bc:a2:9b:87:
                    2f:9c:e5:ab:71:dc:08:f2:0e:84:46:f8:9f:a0:e5:
                    dc:6f:d5:c7:39:68:4f:cc:c0:e6:98:8e:ad:85:82:
                    5a:e2:5b:b7:f6:48:e9:96:99:80:5a:a9:ce:4a:7e:
                    21:75:eb:f6:70:dd:38:49:25:bc:c2:7f:04:16:18:
                    d2:b7:65:75:3e:8b:97:48:61:f0:6d:1d:89:0f:12:
                    4d:d7:f8:5b:e0:78:0f:2e:18:ab:c9:64:84:63:81:
                    ac:8e:23:99:c9:db:81:cf:53:fb:13:eb:04:76:62:
                    91:9b:01:be:2b:bd:07:e3:15:d6:be:8b:85:7e:3d:
                    76:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:55:BC:97:D4:7C:FB:DB:29:3A:E9:40:77:BB:7A:C9:24:33:F9:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/600bf917-ef7f-359d-8fc1-821ad2268710.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:ee:ac:75:75:e1:3d:06:e4:0a:06:d8:da:3b:1c:2d:e4:45:
         74:62:d2:21:69:32:5e:88:2d:f5:0c:ec:a6:75:df:73:8a:43:
         03:03:a7:cc:4d:46:7e:64:42:03:64:d1:e1:36:09:16:43:76:
         0b:61:0c:2a:eb:28:ed:ee:e9:0e:12:2b:c7:5a:d9:27:b4:79:
         7b:a2:e4:7c:03:ca:d8:d9:2d:1d:aa:bc:d8:4a:9b:da:0a:43:
         27:32:68:cb:40:b6:45:26:4e:9c:b2:6c:e8:9f:7b:83:89:2f:
         11:76:46:cd:53:4c:d8:29:26:65:f5:c2:b3:f8:8b:7b:d7:99:
         03:41:cf:c3:6f:2c:5c:d9:ba:c7:c5:b0:48:26:64:cc:a5:e4:
         71:42:ed:ee:67:98:59:4f:f2:0d:87:42:ed:5c:9e:2d:0c:c9:
         19:17:1e:b9:18:04:eb:9a:86:1f:7c:4a:b3:c9:e4:07:fd:64:
         15:7e:98:be:0c:57:1b:fb:2b:37:1c:a8:11:ea:bd:f0:94:c6:
         16:9a:d0:56:26:59:57:9c:e6:75:3e:43:f8:86:37:f2:1e:57:
         f4:6f:96:be:50:a7:2f:4a:db:ee:09:2e:ed:7a:41:f5:ec:6e:
         e8:9a:d3:14:86:f9:cd:cb:56:25:99:82:27:91:32:a8:28:f2:
         41:4d:c2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:56:20 2026 by rpki-client