Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/ced71dab-3e4b-3ead-9753-6613f8fd8fdd.roa
File:                     ced71dab-3e4b-3ead-9753-6613f8fd8fdd.roa (raw, json)
Hash identifier:          Q0hnKGjGiZe/CBG9Wj7qW2ltDsculJmNnxFPOkoocQ0=
Subject key identifier:   5F:45:E5:F7:0E:5B:FC:90:A4:CE:F7:3D:9F:8F:1C:6B:3F:08:9F:07
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DB9F8661309F84FCF197D00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/ced71dab-3e4b-3ead-9753-6613f8fd8fdd.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     59711
IP address blocks:        45.38.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:b9:f8:66:13:09:f8:4f:cf:19:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=2653ff89-2fcc-445d-91ff-f31a0f01709d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8c:38:bd:32:56:88:93:bb:3b:34:88:5b:78:
                    da:8d:8d:b6:60:d6:07:b4:01:fa:d7:a2:86:9c:82:
                    0e:2a:dd:18:78:49:49:44:f7:cb:98:85:68:1c:34:
                    fc:ab:e9:68:bb:1d:60:39:5e:b7:c8:1d:ad:a5:b4:
                    2f:bb:f4:0b:67:27:70:ec:a0:da:1f:29:f7:18:6f:
                    e5:b1:53:aa:51:d5:5b:a1:63:d2:04:fb:9b:99:70:
                    65:8b:9d:4e:e5:0b:eb:d3:6c:b2:7e:eb:66:11:5e:
                    e5:cf:68:6d:a4:43:23:3d:1e:64:74:92:45:8c:29:
                    9e:29:d6:52:25:d8:11:22:39:8d:07:82:f9:72:65:
                    6d:95:d4:dd:5e:e9:d8:44:ac:df:74:0e:d8:c1:b0:
                    10:b3:2a:90:a8:33:12:a1:78:e7:a1:e7:1d:ca:11:
                    b1:5d:bf:01:4b:bd:20:96:7d:2f:66:61:0d:92:39:
                    cc:68:6c:81:2f:c2:90:02:b2:33:5f:82:83:f6:e5:
                    80:24:95:44:37:ec:e7:dc:76:77:e3:35:42:b5:4a:
                    24:59:e7:a9:ce:20:e0:ca:e3:b4:2f:87:2a:0a:5c:
                    7c:3a:e5:1d:f5:a8:88:c6:e8:ed:67:db:e5:28:ff:
                    6f:b0:9f:e9:c1:17:8b:93:52:20:34:3f:ab:62:69:
                    68:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:45:E5:F7:0E:5B:FC:90:A4:CE:F7:3D:9F:8F:1C:6B:3F:08:9F:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/ced71dab-3e4b-3ead-9753-6613f8fd8fdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:a1:c7:ab:e1:63:15:9b:b1:98:c8:8d:f8:a1:61:b9:3b:c1:
         f5:bc:87:b1:08:69:57:97:4c:94:22:9d:93:d6:da:34:7c:ca:
         0b:2e:30:bf:e0:ff:37:36:ce:8e:24:21:a3:24:96:93:d5:00:
         cb:18:64:a2:85:cf:2d:6c:0e:fd:83:ec:bd:b1:78:bb:62:6e:
         a7:f8:19:dd:5d:6d:1e:c5:69:27:e0:c2:93:e8:a5:8f:ec:96:
         12:87:1a:71:14:49:00:a4:21:86:a6:2d:a9:b9:06:4b:5c:88:
         bc:56:54:3e:56:2e:4f:3a:f5:51:4c:83:16:65:11:fb:59:88:
         2a:4f:c0:7e:52:b0:4c:0b:76:f6:e3:b3:0f:ac:07:04:0d:ee:
         06:01:5e:a5:f4:d5:64:d9:be:7e:e5:69:14:34:c8:d1:07:db:
         27:be:5c:d9:34:dd:21:a8:a6:7f:20:34:6f:0f:e3:30:50:d5:
         f1:3a:6e:60:b2:08:79:96:a8:e9:b3:32:8d:39:e4:87:08:b3:
         9a:64:f9:5e:80:88:1b:f3:25:63:9d:1a:45:33:d9:85:ac:c6:
         69:68:24:8b:84:bd:82:8d:15:3c:87:3b:be:15:03:52:49:f6:
         69:b2:c5:ff:e2:6f:07:83:e0:7a:de:dc:f9:e2:1f:53:d9:5f:
         b8:ae:7b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:52:10 2026 by rpki-client