Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b55f3256-1692-3dc8-85d3-3ed24db7de2c.roa
File:                     b55f3256-1692-3dc8-85d3-3ed24db7de2c.roa (raw, json)
Hash identifier:          M6cWxOxg4fqzYnb+/LtYtgk7FiIIAWwrNIJ3UIKBlBU=
Subject key identifier:   EA:CA:33:09:BD:ED:11:6D:92:3E:91:A6:1C:03:C5:80:67:28:8B:8D
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DB9F5D95D488183C35012C0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b55f3256-1692-3dc8-85d3-3ed24db7de2c.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     212238
IP address blocks:        45.38.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:b9:f5:d9:5d:48:81:83:c3:50:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=4ec6ebdb-738b-48e9-8a8c-8645e63cd066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4c:27:06:5f:52:60:0b:3a:75:0b:24:92:49:
                    23:91:07:53:f7:86:c9:a3:d8:d6:f3:0e:64:2e:ab:
                    06:53:2f:ae:9e:cc:fb:d0:18:f5:60:f7:d0:de:13:
                    59:68:86:46:3b:9d:78:14:8b:0d:fa:e9:4b:9f:0a:
                    06:3e:37:6c:7b:2d:fc:32:44:4a:df:cb:73:3b:f7:
                    7f:f5:e7:e9:d3:6e:83:f0:4e:1a:33:ed:52:8d:28:
                    0d:96:5b:f7:0b:da:d3:02:a1:d6:5c:ee:ce:50:ac:
                    49:f3:d5:9a:c2:74:2b:ed:f3:17:eb:4f:7f:75:79:
                    ef:ed:3d:56:82:09:40:9a:c4:b9:29:55:1a:b8:be:
                    98:d4:0a:21:28:88:9b:e3:f2:e5:b6:f1:5c:d5:bf:
                    5e:95:3e:03:ef:c3:66:25:7c:ce:4d:33:bb:72:7f:
                    b8:27:47:ac:82:96:20:1a:b2:d9:52:b5:aa:9d:35:
                    26:2e:91:f6:04:e2:30:68:ba:5b:95:dd:75:83:dd:
                    16:91:36:96:ab:b7:65:b1:04:9c:f6:8b:f4:5a:85:
                    7e:d1:20:3f:8f:18:46:9e:66:73:3b:db:30:b6:19:
                    f0:24:61:3a:9f:33:5f:7d:07:28:34:a9:14:57:b0:
                    20:fd:e1:51:3c:c5:ef:70:36:59:81:eb:ee:07:30:
                    d5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CA:33:09:BD:ED:11:6D:92:3E:91:A6:1C:03:C5:80:67:28:8B:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b55f3256-1692-3dc8-85d3-3ed24db7de2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:06:db:66:12:ba:dd:45:3a:52:a7:a4:c8:6d:1c:37:fa:b6:
         4d:15:76:ed:f5:4a:49:4a:83:05:f4:e3:6c:c3:b4:e1:4c:e6:
         be:24:e9:03:2c:25:25:b1:cd:10:8d:05:04:8a:ee:61:d1:e4:
         08:96:26:65:71:fe:1e:f8:94:b8:27:a6:c7:63:2e:8e:c2:1d:
         1b:57:79:e6:31:e7:41:f4:ac:de:ac:77:9f:f8:5f:5a:01:ef:
         90:3d:07:50:0f:f3:32:4c:83:e1:4b:a3:ee:7e:81:e2:53:53:
         77:ae:c9:6f:e9:9a:90:35:78:81:a8:31:a9:a4:25:85:36:49:
         7f:06:42:89:75:a3:78:42:dd:4b:f9:41:64:3b:69:5c:61:13:
         6e:2b:d9:6e:5e:c0:0b:f6:64:b1:66:cd:0c:20:27:ca:ef:24:
         84:22:7c:8f:36:fb:f3:4d:6c:11:4f:72:d0:6d:89:69:27:2a:
         70:cf:a6:9b:60:0f:02:bd:4d:80:a1:40:76:54:dd:78:80:05:
         87:c1:81:4f:0f:9b:ca:a4:9f:eb:34:c6:72:2f:7e:08:24:61:
         1a:93:67:2c:fe:75:60:f1:53:d8:a1:8f:da:f0:32:08:b2:0f:
         0d:66:7d:15:f0:ad:ee:5c:7d:17:3e:01:8a:aa:0d:c5:6c:0f:
         ff:c0:07:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:53:59 2026 by rpki-client