Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b8c37ef6-a580-3cc3-b517-cf0a297082c9.roa
File:                     b8c37ef6-a580-3cc3-b517-cf0a297082c9.roa (raw, json)
Hash identifier:          +0EzLayB5hvCRkuTT/mHZA1tda6oOOcnJI2quguj6bA=
Subject key identifier:   4D:5D:55:54:7B:B4:36:67:A3:22:D8:82:C9:46:7E:A4:AA:29:A9:AE
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584DE9396BA8C0F272DD5F8D3FF3
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b8c37ef6-a580-3cc3-b517-cf0a297082c9.roa
Signing time:             Thu 21 May 2026 21:00:37 +0000
ROA not before:           Thu 21 May 2026 21:00:37 +0000
ROA not after:            Wed 19 Aug 2026 21:00:37 +0000
asID:                     212238
IP address blocks:        45.38.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:39:6b:a8:c0:f2:72:dd:5f:8d:3f:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: May 21 21:00:37 2026 GMT
            Not After : Aug 19 21:00:37 2026 GMT
        Subject: CN=374d9f18-f8ac-4389-a10c-c81f8a6e537b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:db:cc:10:00:ef:fd:70:5a:99:c2:a4:c7:95:
                    3d:f6:fe:17:6e:33:be:0c:08:41:39:fe:57:29:e4:
                    95:40:e9:cc:6c:91:f9:bd:b4:34:ba:4d:40:41:72:
                    cc:01:3a:be:1e:4f:d0:76:27:a9:3d:de:e4:b5:04:
                    ed:2e:5d:0f:34:0c:24:ab:7c:11:8f:e9:bd:ae:92:
                    8d:9a:3b:e2:dd:ea:6b:24:c3:10:30:db:13:01:f7:
                    6a:f7:a8:60:df:ab:b3:dc:f6:44:98:00:e0:70:35:
                    41:89:09:dc:bf:f8:82:fd:f9:a1:e7:5e:7b:b7:a4:
                    98:ba:a3:af:cf:e5:f8:b5:67:97:e9:3f:91:a9:e5:
                    cd:65:60:57:db:64:30:bd:e6:51:99:5f:6a:e7:fd:
                    c8:17:9f:c0:5f:12:98:48:69:ed:c8:97:99:cd:da:
                    c2:f8:75:60:49:1d:23:2e:95:3a:a4:e5:8e:3a:06:
                    49:be:45:fb:b6:7b:69:6e:f8:71:4d:85:a2:24:ea:
                    c6:82:b6:c6:65:a3:84:93:23:48:a6:7c:2e:8e:f6:
                    b9:ba:84:a2:cf:3d:75:ab:e6:9e:a6:0b:01:70:54:
                    ba:5b:2f:c8:76:33:35:d2:df:dc:6d:eb:2b:5a:f7:
                    fc:76:4d:35:0b:d0:a5:44:ca:4b:b7:6a:ad:96:f9:
                    73:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5D:55:54:7B:B4:36:67:A3:22:D8:82:C9:46:7E:A4:AA:29:A9:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b8c37ef6-a580-3cc3-b517-cf0a297082c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:27:9c:84:d5:9a:c6:09:27:81:0e:45:3a:95:c4:e1:57:0d:
         af:0d:74:6a:94:48:5f:c8:54:54:99:bd:50:60:3d:b5:d8:72:
         7d:88:7e:f8:09:c1:ec:6a:29:9c:65:ab:de:5f:ed:df:92:16:
         92:ff:56:fd:b2:f6:cd:f2:87:da:2c:79:29:db:e2:0c:9f:9b:
         df:78:b6:27:4a:2e:3b:e1:fb:92:b9:e2:8b:7b:e0:9e:3c:62:
         58:0a:ed:db:6c:82:34:ec:82:e7:cc:8c:a6:d9:fa:a4:f4:46:
         72:1d:3d:ef:15:ef:5b:73:25:b3:93:73:ad:ae:22:49:b3:11:
         e5:f0:81:92:e5:23:b8:ba:e8:b3:76:6b:6f:2c:1e:d9:b9:18:
         f3:61:62:f1:79:a6:48:8b:84:c8:44:7f:c4:dc:e5:6d:32:2c:
         89:f6:87:71:43:36:6a:c5:2c:7f:87:63:82:d7:76:f7:19:9d:
         cb:12:ed:4e:84:3a:da:8b:ff:a3:83:92:b7:17:9c:85:6b:35:
         19:2b:ee:e1:ba:64:da:be:ba:f3:dd:47:8d:1e:a0:ee:a5:69:
         f1:0b:ac:5c:dc:dc:bb:01:c4:e4:cd:ea:94:33:d3:29:2d:60:
         e5:72:bc:ff:33:5e:7c:ed:0f:db:b5:8d:2a:39:05:e1:a9:d3:
         e7:50:29:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 04:30:08 2026 by rpki-client