Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/76e90154-d6b0-3979-8dab-edc71fc2570a.roa
File:                     76e90154-d6b0-3979-8dab-edc71fc2570a.roa (raw, json)
Hash identifier:          fe/3vo0Zlp4CiYx6zqcb3uIuVthfNQ7SSfJZPQKuIbs=
Subject key identifier:   83:53:85:72:74:2F:1A:F3:28:4B:AA:FC:95:CA:D1:50:34:38:92:11
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584F63F809B04843A842BA382600
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/76e90154-d6b0-3979-8dab-edc71fc2570a.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     5511
IP address blocks:        45.39.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:09:b0:48:43:a8:42:ba:38:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=4e866507-784b-4eab-835f-f589df83af24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:cb:23:6a:27:71:b4:6d:fa:69:93:ac:79:be:
                    d6:e1:a4:ee:04:aa:ba:0f:17:7b:09:ad:22:2a:67:
                    d9:8f:27:d9:72:3f:76:db:36:2c:0d:22:e6:c0:ce:
                    e9:2d:46:f1:64:77:87:eb:4d:9f:45:c9:3a:b2:f1:
                    2b:4f:0a:eb:3f:a9:7b:eb:7c:30:77:5d:9e:43:a5:
                    1b:8e:0c:85:73:ff:80:bd:58:b0:73:1f:3a:f6:71:
                    50:0a:5e:e1:5b:47:4b:8c:64:d8:b1:85:f2:e0:c9:
                    7b:b5:52:f0:7c:76:80:ea:ce:2d:06:62:56:78:be:
                    6b:bb:d1:ba:3f:39:aa:7e:7f:ab:be:5f:d8:63:f3:
                    7d:13:f2:45:3c:a1:52:7f:df:88:6c:30:31:1e:47:
                    c5:f8:6c:f9:da:ad:10:67:90:a1:07:94:c9:8f:38:
                    3c:a1:92:8b:2d:2e:41:2c:ac:0b:b8:09:f3:bf:9a:
                    f2:c4:b1:e2:8c:f7:ce:22:33:af:2d:76:29:70:08:
                    a0:1d:e3:d4:1e:d3:50:5b:9c:e7:fa:62:3a:f2:7b:
                    8c:c4:f0:90:1f:a6:43:85:d6:58:9f:db:65:35:9d:
                    3f:f8:6b:f3:53:d8:30:f5:79:32:0a:4a:00:da:ce:
                    d8:13:be:68:11:7f:a7:a5:5c:8d:1c:f0:00:34:83:
                    5c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:53:85:72:74:2F:1A:F3:28:4B:AA:FC:95:CA:D1:50:34:38:92:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/76e90154-d6b0-3979-8dab-edc71fc2570a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:36:04:42:8c:52:31:0b:ad:71:0d:36:6c:13:95:d5:99:13:
         e2:5b:d8:24:18:2e:46:3f:6e:af:fa:fe:1c:9b:03:46:39:2c:
         ff:4b:5d:43:5a:b4:8d:bd:cd:e0:a6:ae:a3:ea:91:74:9a:e3:
         5d:59:88:94:c8:9f:19:0d:40:c2:6a:98:e4:fc:7d:b1:e5:c8:
         85:9e:f2:fb:54:01:42:0b:df:2e:ba:b6:ed:ca:25:b9:d6:77:
         d4:27:93:35:72:a6:6c:f3:5c:b2:3b:83:a9:da:4a:c3:09:80:
         88:e3:56:b6:75:bd:08:f3:2d:d3:22:5c:e7:43:e5:00:6c:43:
         ba:a7:42:5b:db:d4:ef:7a:fe:a5:93:3c:8a:cf:19:2b:c0:70:
         0d:6a:20:16:39:2e:fc:22:f8:b4:a2:37:69:dc:de:49:a2:c9:
         bd:95:62:e3:67:11:3e:3e:00:62:dc:a2:0e:c4:25:79:76:12:
         44:7d:87:cf:f4:38:ac:d6:7e:2b:0d:5d:6f:2a:f5:10:76:c2:
         dc:b8:84:c6:25:49:53:d2:4f:57:65:c3:1d:10:05:d3:73:ce:
         cb:e5:8f:4e:e9:14:db:49:97:d2:99:c5:5d:f5:64:7e:52:d3:
         ee:bb:84:d1:2e:0c:c4:f5:f1:3c:b0:9d:52:9a:af:bf:2a:c8:
         d4:1f:da:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9j+AmwSEOoQro4JgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk
NGU4NjY1MDctNzg0Yi00ZWFiLTgzNWYtZjU4OWRmODNhZjI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhssjaidxtG36aZOseb7W4aTuBKq6Dxd7Ca0i
KmfZjyfZcj922zYsDSLmwM7pLUbxZHeH602fRck6svErTwrrP6l763wwd12eQ6Ub
jgyFc/+AvViwcx869nFQCl7hW0dLjGTYsYXy4Ml7tVLwfHaA6s4tBmJWeL5ru9G6
Pzmqfn+rvl/YY/N9E/JFPKFSf9+IbDAxHkfF+Gz52q0QZ5ChB5TJjzg8oZKLLS5B
LKwLuAnzv5ryxLHijPfOIjOvLXYpcAigHePUHtNQW5zn+mI68nuMxPCQH6ZDhdZY
n9tlNZ0/+GvzU9gw9XkyCkoA2s7YE75oEX+npVyNHPAANINciQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFINThXJ0LxrzKEuq/JXK0VA0OJIRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvNzZlOTAxNTQtZDZiMC0z
OTc5LThkYWItZWRjNzFmYzI1NzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSe4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACs2BEKMUjELrXENNmwTldWZE+Jb2CQYLkY/bq/6/hybA0Y5LP9LXUNa
tI29zeCmrqPqkXSa411ZiJTInxkNQMJqmOT8fbHlyIWe8vtUAUIL3y66tu3KJbnW
d9QnkzVypmzzXLI7g6naSsMJgIjjVrZ1vQjzLdMiXOdD5QBsQ7qnQlvb1O96/qWT
PIrPGSvAcA1qIBY5Lvwi+LSiN2nc3kmiyb2VYuNnET4+AGLcog7EJXl2EkR9h8/0
OKzWfisNXW8q9RB2wty4hMYlSVPST1dlwx0QBdNzzsvlj07pFNtJl9KZxV31ZH5S
0+67hNEuDMT18TywnVKar78qyNQf2vc=
-----END CERTIFICATE-----
Generated at Thu Oct 8 05:19:41 2026 by rpki-client