Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b61b93ed-dcfd-338e-b645-b0d3de2d4b23.roa
File:                     b61b93ed-dcfd-338e-b645-b0d3de2d4b23.roa (raw, json)
Hash identifier:          u6maLFoAIKtmBFHyHMmYUvR8MSKuEPys6xJX1qgUESY=
Subject key identifier:   CA:C7:15:F9:D3:07:9B:F6:CA:1D:40:E8:81:B6:E2:65:26:87:9B:F7
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DB9F5433C6FEB7E71E34B00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b61b93ed-dcfd-338e-b645-b0d3de2d4b23.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     23511
IP address blocks:        45.38.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:b9:f5:43:3c:6f:eb:7e:71:e3:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=63e8f0cb-f8e6-430b-ac25-5183cf23d524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a5:0e:6e:af:2e:73:c3:a5:14:8e:36:0a:03:
                    95:d6:12:5c:03:5e:db:e6:9f:1d:c3:1b:70:0f:08:
                    83:dd:0c:ea:06:84:ae:77:7f:cb:58:96:cc:5d:13:
                    3b:ed:69:70:f6:69:d8:7d:e9:45:0c:db:ce:e7:2f:
                    dd:78:76:55:12:65:9d:d1:a7:54:34:cf:72:3e:fd:
                    b1:f7:48:54:78:57:9f:3e:fa:90:00:49:d2:8e:da:
                    7a:9e:24:5e:08:a9:39:e1:69:3c:41:3e:22:d3:4e:
                    c3:ba:f1:59:82:6c:64:c4:3c:f5:be:d1:9e:92:68:
                    53:ae:ba:5a:7d:fd:48:65:72:75:23:e1:20:31:38:
                    bc:8f:a0:16:d3:c9:16:15:a0:e4:5e:e0:1a:27:ad:
                    2f:50:39:d5:36:e6:b6:69:a8:ac:f8:82:13:09:a3:
                    1f:72:ff:d5:f7:90:a0:2b:fb:7a:ad:b9:a8:3d:c3:
                    37:30:5c:95:a4:9b:cc:d4:44:5a:b4:89:a6:f7:cc:
                    a6:b0:1a:9c:56:6d:42:65:01:a4:32:61:60:53:21:
                    2a:c7:e6:e3:96:f6:a6:28:1d:e2:e6:2d:00:49:1e:
                    0d:57:67:00:1e:c2:21:cc:03:4a:db:64:21:6f:a4:
                    9a:b2:46:a3:c2:29:40:b5:54:71:4d:65:2d:f2:4b:
                    4d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C7:15:F9:D3:07:9B:F6:CA:1D:40:E8:81:B6:E2:65:26:87:9B:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b61b93ed-dcfd-338e-b645-b0d3de2d4b23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:7a:41:94:35:e6:2d:0b:bb:62:52:a6:75:fa:11:a6:cb:b0:
         a9:4a:d5:54:5f:4e:85:05:c1:d2:0c:69:a4:72:b7:57:da:10:
         6e:da:19:c0:c3:ca:82:12:c1:47:68:18:e6:21:f7:63:20:85:
         0a:f6:6e:7a:c8:d0:cc:e0:d5:43:05:33:8c:cd:36:08:be:6d:
         a5:66:67:08:c0:ff:fe:e7:23:71:c2:1c:01:fd:9a:95:f4:b3:
         c9:ff:f7:7e:2a:3a:5e:77:58:e5:ed:b1:b3:84:6e:b7:45:70:
         8e:9d:16:88:c5:d5:7a:15:b3:ed:9b:21:d4:db:6f:dc:04:fd:
         64:d1:0c:f4:70:80:09:ea:db:fa:f6:38:bc:7b:0a:70:d8:3c:
         18:b7:21:8d:1c:65:26:af:0d:ca:bd:c9:dc:8e:26:17:24:3c:
         2f:9c:72:3d:c0:f5:29:a1:d8:fa:a9:ee:a5:20:8b:b6:89:b9:
         d4:66:f6:e6:da:0b:98:99:c5:6f:88:12:74:97:60:c9:88:0e:
         a8:3c:44:35:7f:87:f0:56:3c:28:55:23:1e:d1:9d:dd:a6:4a:
         3f:0c:3d:c1:bb:3c:be:fd:4b:a7:9b:c7:f1:db:27:e7:e0:e4:
         52:ae:f8:b3:48:63:c6:89:ca:a5:de:31:d1:ad:09:e0:9c:a6:
         cb:40:15:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:51:42 2026 by rpki-client