Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/89cafc62-1984-3b96-bcaf-1f3e85dc9a24.roa
File:                     89cafc62-1984-3b96-bcaf-1f3e85dc9a24.roa (raw, json)
Hash identifier:          V4uxNhVeamca5k58MIEu2q50BNXzWkWsTDoARgMh2fk=
Subject key identifier:   12:AB:2F:18:84:B9:EC:6D:3C:02:E4:2E:D0:E4:ED:0D:FD:8E:EB:7A
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E133DA68F86CB140F21BC1BB8
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/89cafc62-1984-3b96-bcaf-1f3e85dc9a24.roa
Signing time:             Fri 05 Jun 2026 22:13:05 +0000
ROA not before:           Fri 05 Jun 2026 22:13:05 +0000
ROA not after:            Thu 03 Sep 2026 22:13:05 +0000
asID:                     44559
IP address blocks:        45.39.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:3d:a6:8f:86:cb:14:0f:21:bc:1b:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun  5 22:13:05 2026 GMT
            Not After : Sep  3 22:13:05 2026 GMT
        Subject: CN=ba1d86dc-cde9-499b-aa61-1f6019fb185e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cb:ba:74:a2:ad:1b:1d:af:23:07:55:1d:01:
                    f5:11:22:c1:6d:15:40:4e:0e:40:55:ad:e3:ef:58:
                    33:67:ef:c9:b9:03:35:6b:08:9f:52:65:da:a7:d4:
                    78:e2:86:0d:60:9a:f2:00:20:ee:00:f1:16:8c:46:
                    73:a0:47:dc:0b:c7:e1:cd:d0:6c:8d:4a:39:34:50:
                    27:7d:85:56:db:88:35:44:29:93:e2:95:71:27:e2:
                    71:81:76:0d:d8:7e:ef:80:e5:72:f1:15:e7:67:12:
                    53:0a:96:ab:8b:bd:0e:38:17:d3:06:47:6e:32:95:
                    51:26:f0:3c:68:5c:8d:40:2a:40:33:48:e1:8c:e3:
                    6a:17:6a:71:24:be:7a:90:5b:ce:b5:40:fd:c3:39:
                    3f:8b:17:3b:a0:8a:b1:03:39:12:b5:03:37:9d:74:
                    b3:39:e4:9f:90:e4:a5:50:91:9d:e5:e7:f9:ae:59:
                    62:14:73:84:62:44:b2:b2:29:19:ff:ba:5e:8c:db:
                    f7:43:f4:a0:76:57:c2:54:45:a5:62:90:82:d1:e3:
                    24:4e:38:6b:25:20:b8:69:b3:32:85:9c:15:25:21:
                    69:2b:75:ac:09:e3:a5:d2:a9:d5:64:01:89:30:d8:
                    cc:fe:9d:7a:b9:f4:b2:b0:01:10:a5:6f:b8:f3:cc:
                    9f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:AB:2F:18:84:B9:EC:6D:3C:02:E4:2E:D0:E4:ED:0D:FD:8E:EB:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/89cafc62-1984-3b96-bcaf-1f3e85dc9a24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:cf:0a:9f:81:2f:af:4b:32:71:45:52:71:e1:21:1f:88:7c:
         79:94:fe:4c:16:a4:32:f9:71:dc:1d:14:3d:73:11:7e:01:90:
         72:a8:40:e2:04:47:29:bb:0f:b1:f8:5a:07:95:3b:10:73:8c:
         d0:50:5d:5d:75:3b:8b:d2:65:1e:b4:43:24:31:5a:f2:e0:dc:
         52:47:f6:d9:5e:a7:e2:06:ef:5c:db:29:d7:16:a1:93:23:5f:
         bb:d7:06:d5:ac:b9:44:0a:e8:64:82:b4:d7:47:ae:15:0f:73:
         96:4f:fc:0d:1a:b8:44:ca:3d:aa:12:a7:30:d4:85:b6:5c:9c:
         b0:8f:4e:dc:d6:a5:c4:f5:ae:d2:c6:0d:09:07:10:ff:cf:db:
         88:d5:a9:86:c9:93:48:32:80:d1:78:9c:3e:27:b8:17:c9:68:
         66:4b:95:7f:cf:0e:e7:57:63:7c:cd:99:01:1e:2e:ff:aa:12:
         40:bd:50:31:ad:2b:2e:3b:89:43:ee:69:d3:bc:5f:77:f0:cc:
         f6:96:88:fa:f2:69:ff:87:5a:2f:6e:4e:d2:03:90:b9:05:97:
         20:61:e1:07:a1:7a:ae:fe:f0:e7:8a:6a:eb:73:c9:b7:ff:03:
         93:c4:d7:1c:0b:ec:55:fb:bb:7f:75:52:8e:b3:1e:31:6a:9b:
         e8:77:f1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:31:49 2026 by rpki-client