Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/69ed276d-c069-3891-a15c-2d7a739260bf.roa
File:                     69ed276d-c069-3891-a15c-2d7a739260bf.roa (raw, json)
Hash identifier:          kwuPK8gcB39AffbVlPPg5Hzk7QCx7vd8bFkVB7hHipg=
Subject key identifier:   DA:D9:B0:0B:0B:8A:77:04:D6:56:02:A7:7B:59:67:47:9C:DA:50:76
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA02E42F9465AA63D5E500
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/69ed276d-c069-3891-a15c-2d7a739260bf.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     212238
IP address blocks:        45.39.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:02:e4:2f:94:65:aa:63:d5:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=960b6dfc-67cb-4409-b1ae-f35daa38f580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:af:0b:bb:45:ed:ea:21:a8:6f:84:2a:19:95:
                    df:15:1a:f6:3c:96:ca:a3:61:00:60:05:15:24:4b:
                    73:18:b1:11:2b:06:75:fa:03:be:63:e4:01:d1:56:
                    af:e0:f1:6e:8d:94:23:a9:6b:e7:18:d5:f7:c5:61:
                    0a:77:a0:3a:62:0f:6a:0b:58:df:88:a9:45:4b:da:
                    2a:13:75:26:79:c1:b6:00:70:16:c2:17:a5:73:97:
                    69:40:88:0c:7f:3f:38:2d:0c:b6:42:e4:07:22:d0:
                    bc:e4:c3:50:9d:65:6a:04:57:06:f0:5c:c6:d6:e0:
                    5a:17:21:9a:89:4b:49:7e:34:d6:1b:df:d7:54:9e:
                    64:02:4f:40:8a:bc:c1:cd:12:10:c0:c5:94:42:e2:
                    b8:79:60:46:bf:eb:6f:09:b2:d6:15:3c:4c:eb:21:
                    40:8d:2f:0c:bc:6b:af:cd:7b:4e:37:6f:dd:bb:ae:
                    47:2d:04:7c:30:7f:c3:3a:2f:15:17:a4:46:60:d3:
                    d3:95:44:3d:7c:80:eb:76:ac:f8:f3:c4:7d:7d:4b:
                    74:7a:f0:b7:7e:87:8a:02:c3:b3:bf:1e:fe:d9:a7:
                    d0:5f:47:20:81:e1:dd:ee:c0:5c:07:9e:31:d3:75:
                    81:de:a8:bb:13:da:84:c8:1f:c0:bc:5d:17:b6:c3:
                    7f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D9:B0:0B:0B:8A:77:04:D6:56:02:A7:7B:59:67:47:9C:DA:50:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/69ed276d-c069-3891-a15c-2d7a739260bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:77:8a:f3:14:f9:41:9d:ea:5e:f1:36:dc:64:92:c6:52:d6:
         5c:21:99:a9:09:d8:a7:fd:4d:c9:55:a0:bd:f9:c3:d8:da:a8:
         06:7c:87:68:05:0f:5e:c9:9c:c6:6f:ed:b9:d4:78:1f:86:bd:
         08:07:5c:1d:04:c8:b3:6e:32:a7:00:91:a9:93:a6:3c:27:47:
         46:90:9f:62:dc:c2:d6:47:3e:9f:e7:12:bd:bb:8f:99:82:15:
         7d:03:39:4c:31:67:a2:1f:bd:ae:fd:f6:7a:00:61:35:48:2a:
         0a:cd:c9:9f:56:f2:c8:5e:a8:6c:67:c2:b6:19:3d:cd:77:21:
         1a:c6:3b:4b:26:63:f5:c7:8c:d1:d2:2d:69:a1:f1:70:d7:3d:
         ba:a0:98:44:98:4d:a8:3e:e2:25:57:1e:a5:e5:a4:d8:ca:d7:
         a6:fe:50:d6:b2:24:8c:4b:68:8b:13:16:49:b3:65:83:d9:10:
         92:1d:7d:4f:4f:af:d2:9c:8b:3c:7d:13:35:4f:04:10:6f:6e:
         99:0d:62:10:65:19:4f:8c:44:b4:05:cd:40:dd:02:34:fb:5a:
         8d:9a:8b:62:b9:fc:b8:cf:ce:d6:f1:1a:cd:a1:c3:33:c6:fe:
         15:08:11:fd:f3:49:b0:4e:29:dc:73:b8:0d:db:d6:b9:da:3d:
         30:af:de:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:55:53 2026 by rpki-client