Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/67ab421a-1151-30a4-ad3a-153de4b22409.roa
File:                     67ab421a-1151-30a4-ad3a-153de4b22409.roa (raw, json)
Hash identifier:          THtYoXyG/ZrwSm8y7o/HRkTlJ8qkVN0vUIHE/MIFark=
Subject key identifier:   FC:65:AD:05:B2:E4:62:A2:76:A0:0A:2A:50:88:8F:48:0D:B3:46:3C
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E118EC3F4EB4E73B3970BC900
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/67ab421a-1151-30a4-ad3a-153de4b22409.roa
Signing time:             Fri 05 Jun 2026 07:44:55 +0000
ROA not before:           Fri 05 Jun 2026 07:44:55 +0000
ROA not after:            Thu 03 Sep 2026 07:44:55 +0000
asID:                     16125
IP address blocks:        45.39.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:11:8e:c3:f4:eb:4e:73:b3:97:0b:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun  5 07:44:55 2026 GMT
            Not After : Sep  3 07:44:55 2026 GMT
        Subject: CN=8ad2ae7c-3758-4abb-8ce3-a13debfd81c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:03:28:fa:71:46:8c:dd:7f:eb:2d:c0:d0:0b:
                    c4:ff:95:d7:ae:61:47:c5:ed:0b:06:50:fd:24:84:
                    db:dd:b9:c3:3f:1a:f4:eb:6b:31:e8:16:fc:78:13:
                    75:7d:e5:bd:d5:34:20:ef:a9:cd:fc:01:76:7e:98:
                    61:9c:58:9c:ce:d3:16:57:46:f6:f7:6b:e4:2d:d1:
                    e9:ea:83:d4:66:0c:ca:1a:dd:31:d6:8b:9e:1b:d8:
                    fd:0d:f5:27:74:a6:4f:25:78:75:70:5e:90:f2:0e:
                    90:67:f3:3e:74:a9:c6:ee:33:55:b8:75:84:4c:1b:
                    4b:47:91:1d:17:60:c7:47:49:4d:14:2b:e3:7b:18:
                    c9:fa:75:c2:dd:e9:32:5c:62:a8:7c:7e:c8:4f:09:
                    ea:b8:7f:f3:b7:fb:89:d5:ad:9b:75:76:31:80:e9:
                    c8:ba:58:58:48:c7:4e:f2:47:8f:66:79:39:5f:88:
                    fc:e1:ad:a4:5f:ff:6a:30:67:94:ff:94:0c:8a:7c:
                    a7:15:22:c9:a7:7b:0f:55:4a:e7:39:11:9e:79:df:
                    81:eb:f0:83:4f:ef:2a:3e:2f:01:21:5a:ca:05:48:
                    75:51:67:2e:24:c6:26:b2:74:eb:74:41:b3:9b:e7:
                    42:f4:e9:ff:84:ee:89:5f:2f:2a:2a:57:53:ae:1c:
                    a5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:65:AD:05:B2:E4:62:A2:76:A0:0A:2A:50:88:8F:48:0D:B3:46:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/67ab421a-1151-30a4-ad3a-153de4b22409.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:d6:6f:31:1d:62:f2:7c:a9:ff:90:92:4a:a7:5f:f0:9e:26:
         6e:52:de:b4:8a:e8:15:98:e7:29:50:0a:b6:90:30:7d:a4:7d:
         57:36:a5:f9:d7:f2:b1:40:04:a1:0f:aa:54:2f:48:4e:fe:4f:
         fe:04:61:9c:62:8a:51:35:df:75:61:c4:29:46:6b:d6:1c:77:
         1a:6e:68:04:a9:45:9b:52:60:04:35:86:09:63:64:86:5a:bf:
         05:ad:e0:1c:a1:0b:c0:c2:f4:eb:ab:5c:9c:b8:1b:4d:58:71:
         e6:81:25:bd:84:6b:3d:77:a3:f2:d4:4c:fe:d1:04:c2:de:39:
         43:d3:da:24:31:5b:6b:53:b1:7d:d7:f9:28:5e:c2:97:18:43:
         6a:49:a0:1c:89:b2:50:08:9c:27:4b:24:86:ef:13:7f:9f:95:
         26:65:66:e0:63:3e:5e:c2:a5:ff:bb:db:ba:c5:47:71:71:30:
         94:66:56:0e:14:1e:57:74:fb:00:e0:4b:9a:bd:24:94:2f:a8:
         3a:32:71:ae:dd:89:8f:4c:f7:ad:c7:62:0a:5d:a3:fc:c6:0b:
         b5:13:d4:73:3d:18:92:8b:2a:78:48:6d:86:6c:66:21:7e:49:
         15:0f:1b:21:82:52:0e:10:89:3a:b3:a8:bf:11:23:11:1f:61:
         5a:34:fc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:06:01 2026 by rpki-client