Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/6804ed39-7ca4-3141-b6e0-be669506d314.roa
File:                     6804ed39-7ca4-3141-b6e0-be669506d314.roa (raw, json)
Hash identifier:          6k2PRnjF9zviwY+Sr0eJh5JVWkiMuGwGRjOSIL8c1gs=
Subject key identifier:   2B:17:D4:32:4C:63:5A:32:1F:A9:FC:08:D5:F1:B0:4B:07:1D:46:2E
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DB9F5AB4E202E667BC55E80
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/6804ed39-7ca4-3141-b6e0-be669506d314.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     215659
IP address blocks:        45.38.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:b9:f5:ab:4e:20:2e:66:7b:c5:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=c03fee0e-04b6-4f9d-87ba-8232731aac21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3f:6b:56:20:b5:2b:38:e8:ec:5b:d9:ba:59:
                    6f:45:97:0e:d7:e3:c7:a5:a3:02:72:b2:be:8c:14:
                    3c:5a:ec:0d:bf:b8:35:75:70:3c:e1:4e:01:48:f2:
                    e4:fc:15:14:38:a6:8f:44:20:45:22:1e:7c:81:a0:
                    c3:d4:6c:90:fb:0b:0c:f1:bb:42:01:98:82:b6:c4:
                    b4:d7:96:9e:81:2b:02:81:00:5b:a8:fd:99:6d:07:
                    41:28:c5:f2:a1:67:b7:ec:21:b4:ab:f4:ee:56:c9:
                    f0:4b:62:71:eb:9b:d2:a8:4f:2f:4e:86:54:fb:ec:
                    79:c2:16:d5:db:8c:7d:9f:ea:5a:49:cf:50:49:7b:
                    0e:fe:62:24:52:50:f7:23:85:47:31:9d:a5:25:e8:
                    8b:7f:d5:03:45:f0:8a:68:2a:10:e5:6a:ad:be:e8:
                    ff:1c:05:f8:b7:4c:66:be:20:95:4c:99:8f:2b:b5:
                    ba:b0:c8:72:fc:e5:08:fa:c6:a5:8a:5e:23:ee:80:
                    f5:1f:a1:e9:51:4d:aa:96:8b:b0:c6:7d:3b:2b:76:
                    59:73:bc:f9:71:2a:d1:99:e4:cf:b0:9d:71:89:08:
                    6d:f7:9b:a4:21:f6:6a:a5:84:46:26:a1:18:c6:25:
                    39:59:74:7b:56:ef:07:2c:7b:64:6b:e5:c1:d8:52:
                    cd:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:17:D4:32:4C:63:5A:32:1F:A9:FC:08:D5:F1:B0:4B:07:1D:46:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/6804ed39-7ca4-3141-b6e0-be669506d314.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:32:d4:3e:75:1e:f4:30:98:09:fd:76:04:cc:0b:58:bb:bb:
         22:e8:fa:de:96:6b:70:61:c1:cb:48:e1:ac:a9:b5:86:5f:90:
         34:de:d7:16:c6:a8:e4:8e:31:d2:3b:64:e1:85:a5:7d:69:2f:
         80:e0:1f:46:c1:15:53:aa:24:0b:b6:ee:cd:f0:64:15:31:10:
         74:81:57:b8:be:ee:ed:4d:88:3a:8f:ca:af:84:0a:f3:4d:6a:
         eb:70:bf:da:f3:b3:fd:6e:d4:54:6d:03:68:69:9d:b4:8b:d9:
         5e:b4:5d:88:d3:15:af:8f:1e:73:d1:30:00:6d:17:a8:61:77:
         9a:fa:32:be:82:e9:11:bd:42:2b:87:3e:f4:96:3f:41:ce:f0:
         9f:71:0c:d3:e9:10:b8:a2:8b:19:10:96:50:9c:c2:28:0c:ee:
         e6:9d:04:d0:68:23:a2:00:7e:6d:32:8f:68:12:0c:ce:5c:56:
         eb:fa:a0:d8:43:8c:63:cb:f4:a9:a5:d0:9e:f2:08:c7:bb:98:
         5e:2d:bc:d8:69:03:a1:93:1b:b3:e0:58:12:fa:dd:24:8f:13:
         1d:87:29:2a:6a:94:a7:3a:a3:1c:30:f6:8d:43:b3:50:ad:cc:
         20:e8:f6:a7:d9:5b:0a:4f:08:48:01:5d:49:a3:50:67:90:84:
         04:c1:42:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:55:46 2026 by rpki-client