Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/6b11a3e9-0132-3d9c-a6b4-25645c8d2154.roa
File:                     6b11a3e9-0132-3d9c-a6b4-25645c8d2154.roa (raw, json)
Hash identifier:          qgHYdvl8mPdESpwzKGIfg/l8wYi8p5DMJ4JqlIRZOPk=
Subject key identifier:   70:3B:CC:15:CE:38:92:45:C4:AF:31:B1:A9:75:88:04:AF:A0:22:31
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DBA08906FDCF32F08BA31AC
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/6b11a3e9-0132-3d9c-a6b4-25645c8d2154.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     40676
IP address blocks:        45.39.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:08:90:6f:dc:f3:2f:08:ba:31:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=b0112701-c3d9-4731-a436-f941144a2130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7e:d0:41:73:25:f0:8a:09:41:9b:a9:7f:b5:
                    48:0b:f4:d6:7c:c9:ad:80:f3:9d:3d:b3:9d:72:b3:
                    2f:06:c8:f3:96:60:64:76:fe:5a:ec:d3:31:d3:a1:
                    9c:4b:d1:bd:97:93:51:88:f4:47:9c:96:23:74:bc:
                    86:4d:9f:00:9e:f5:59:d8:a0:0c:c5:21:ad:fc:c8:
                    bc:29:0b:a1:91:dd:7d:50:91:1b:28:49:1a:11:58:
                    df:1e:c1:ab:fa:28:44:0f:49:0f:2c:9e:05:86:e8:
                    32:84:2e:aa:6b:4e:8a:a6:ed:97:bc:35:67:69:3a:
                    83:4e:29:be:4a:36:cc:86:2f:19:3a:fe:2a:26:13:
                    08:ab:0b:f6:e3:22:84:04:f3:51:8e:b6:73:00:41:
                    e3:53:aa:f0:a8:1b:12:9a:4f:f2:a4:49:48:f5:6b:
                    05:53:a0:fd:ae:01:8b:65:cb:43:dd:c3:64:7a:a1:
                    15:0b:63:a2:a1:e6:69:ba:d5:8b:a2:d0:ad:0d:ea:
                    b6:fd:4a:b2:f5:fb:2a:fe:44:fb:06:58:1a:41:3a:
                    ba:c4:55:d6:2b:08:c3:10:f6:1c:7d:a1:be:b6:16:
                    3a:a8:4c:b5:3b:c9:77:d0:7d:66:00:a8:44:f6:81:
                    0d:8b:46:39:c7:28:5a:d9:b1:c9:f1:f9:a8:1a:6e:
                    89:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:3B:CC:15:CE:38:92:45:C4:AF:31:B1:A9:75:88:04:AF:A0:22:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/6b11a3e9-0132-3d9c-a6b4-25645c8d2154.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:a0:5e:d7:19:aa:7b:e2:1c:b3:ef:39:ed:54:10:ee:56:86:
         9e:91:74:56:c4:00:e4:34:7f:1c:49:66:09:bc:c4:d3:b6:25:
         8a:2d:47:71:c3:cd:ce:13:0e:b0:17:d2:02:de:6c:d8:bc:32:
         15:c4:bb:ca:44:b2:72:ec:e2:e4:fc:91:91:4f:fd:8f:c1:6c:
         bf:d8:37:dc:71:e9:37:9a:a8:63:5f:ae:06:c4:dd:f8:5a:4d:
         60:6e:c4:79:ce:47:2d:e6:f7:92:cd:55:a8:36:db:d7:3f:42:
         43:22:04:1d:a8:04:ae:6d:5f:5a:29:84:ed:76:83:c3:3e:1d:
         98:09:a6:8e:ef:c9:a3:52:c2:de:2d:6e:1c:73:7d:ee:d5:48:
         24:85:ea:ea:3f:63:c6:9e:14:2a:2e:29:0f:a9:cd:f7:05:26:
         83:7c:da:be:ed:90:e5:ed:a8:e0:91:c5:9f:c7:b6:f6:e7:1d:
         6a:b5:2e:22:42:bc:89:e5:fd:11:4a:47:a8:6c:e1:91:2d:f9:
         14:7e:4f:53:65:01:dc:75:39:7c:41:10:0e:b7:3e:23:a9:44:
         62:ae:a3:61:b0:92:13:2f:9e:8c:2a:fc:4c:49:67:be:61:83:
         a2:04:98:6e:41:ba:8a:bf:77:0a:f0:af:4d:04:be:b5:ad:79:
         f8:37:01:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:52:14 2026 by rpki-client