Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/9120379f-5080-3932-b30c-6e4e0e3b0032.roa
File:                     9120379f-5080-3932-b30c-6e4e0e3b0032.roa (raw, json)
Hash identifier:          ixEYvbgoFNEotSdhZatq+OMpNzYwDOsaTQPz0nbtXEs=
Subject key identifier:   4D:49:99:33:76:68:08:B6:63:C2:25:1C:AC:91:80:82:EF:BC:AA:60
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E1478A86BDE3F367646B3BFC0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/9120379f-5080-3932-b30c-6e4e0e3b0032.roa
Signing time:             Sat 06 Jun 2026 08:47:47 +0000
ROA not before:           Sat 06 Jun 2026 08:47:47 +0000
ROA not after:            Fri 04 Sep 2026 08:47:47 +0000
asID:                     214238
IP address blocks:        45.38.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:14:78:a8:6b:de:3f:36:76:46:b3:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun  6 08:47:47 2026 GMT
            Not After : Sep  4 08:47:47 2026 GMT
        Subject: CN=24779a67-1022-4dee-a095-a84a698c5373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:56:b3:0f:df:12:a1:c7:02:83:81:63:23:8a:
                    2b:b9:b0:0b:6e:63:a4:56:ab:82:7a:cb:3a:ab:71:
                    3c:dd:28:10:25:78:d2:cb:44:20:63:89:94:6c:65:
                    e3:8e:20:3e:ce:ae:81:db:b6:f5:5d:d8:21:e3:aa:
                    f3:a7:55:53:90:0c:12:7e:4f:1b:82:5b:30:b7:4a:
                    df:35:ee:16:e1:d4:b3:ec:e8:8a:be:00:cd:b5:e2:
                    13:18:c3:e3:04:d3:fd:f1:89:70:aa:06:0e:2f:6a:
                    e8:77:73:fc:15:85:e0:a5:93:e6:a9:e8:aa:b4:91:
                    e7:f3:2f:b1:2d:5f:b9:b4:63:b4:2c:5e:a2:ba:16:
                    67:8a:60:29:02:c5:fc:42:f3:b2:55:85:3a:d7:94:
                    de:ec:7b:08:cb:3e:f6:21:cc:65:bf:57:f3:3c:a3:
                    cc:8c:a0:76:4a:57:8e:7b:af:b3:d1:46:e4:9f:26:
                    47:9d:07:3b:2b:7c:3e:e2:ce:ab:f1:42:6e:37:41:
                    30:d1:19:42:4f:29:53:67:7e:08:50:64:29:ec:3e:
                    e6:37:ff:ac:04:a1:67:b3:81:a8:2d:a0:94:d7:03:
                    73:e3:19:20:28:7f:99:59:c3:8d:ad:47:bb:07:08:
                    69:4d:06:5b:cb:04:cd:3c:58:32:ff:20:dc:5e:39:
                    95:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:49:99:33:76:68:08:B6:63:C2:25:1C:AC:91:80:82:EF:BC:AA:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/9120379f-5080-3932-b30c-6e4e0e3b0032.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:36:36:40:39:29:ee:14:84:8a:8a:84:a9:4a:d7:5a:fa:dc:
         de:9b:28:98:fc:c4:8b:29:27:64:02:8e:31:92:e9:35:ea:1d:
         cc:15:29:3b:f9:ad:4e:09:80:0b:c1:44:67:11:ed:fe:c0:ab:
         f4:8c:01:41:45:67:f7:93:2d:f7:23:df:20:76:ba:14:e1:55:
         56:c6:dd:02:a6:71:d4:74:83:cb:15:3e:49:6f:ec:c6:6c:c9:
         08:75:07:23:c1:c9:c7:90:42:2e:02:cc:76:40:17:3f:35:bb:
         91:af:0a:2d:1b:08:b1:df:7a:26:8f:97:f6:ab:c7:21:ad:d0:
         8f:a2:ab:79:49:43:9d:10:b0:c5:e8:50:cc:d6:07:df:16:5a:
         84:0a:1d:87:c8:1a:95:26:96:64:ef:0e:66:67:84:ce:95:6c:
         0e:de:26:47:0c:da:48:0b:db:79:e0:f9:7b:7f:82:73:ae:bb:
         f6:a7:7b:aa:d5:6c:23:9d:85:c4:0e:08:27:f3:03:dd:87:80:
         4c:ce:6b:7c:cf:7e:e4:e1:19:37:8f:99:42:75:07:2e:7a:bd:
         e7:4b:52:ad:ce:0e:0d:bc:52:d9:2c:4e:d0:9b:c0:e1:07:32:
         b7:82:7d:b5:f4:3f:17:0d:cc:cf:96:32:00:53:5f:e1:87:8d:
         70:9c:c1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:49:39 2026 by rpki-client