Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/e1e1e87d-dcca-35a3-851e-04ad16aa9a63.roa
File:                     e1e1e87d-dcca-35a3-851e-04ad16aa9a63.roa (raw, json)
Hash identifier:          a1BL2iSIPuBsz+lNyRgqk3dx2DfMbecE37gC0x83qac=
Subject key identifier:   58:18:3B:B5:18:D9:B9:6B:0A:C7:68:CF:F0:6F:E7:15:85:F7:94:09
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584F49735E6B5532A74948A1B600
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/e1e1e87d-dcca-35a3-851e-04ad16aa9a63.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     9009
IP address blocks:        45.38.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:5e:6b:55:32:a7:49:48:a1:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=32c0a442-7423-4433-acc7-e130a4f0ac92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7f:35:c5:a4:50:3f:b0:3e:f3:12:87:4e:7a:
                    7a:80:f8:1d:32:fe:d3:61:da:21:98:99:34:ad:f2:
                    5b:64:0b:bf:df:dd:6d:5b:77:60:5a:90:76:04:33:
                    a9:19:09:d2:6f:cf:bb:ba:7b:22:f8:44:30:7b:9d:
                    5e:a2:bc:d9:ff:5a:38:76:d4:17:2e:d6:2c:63:88:
                    56:3a:46:b6:4f:21:98:ef:1f:29:fb:48:06:7a:8e:
                    d7:2e:ad:54:93:3d:eb:e4:de:e6:51:eb:20:0d:6b:
                    5e:01:15:1a:22:fd:f8:70:2e:1c:3b:72:cb:63:37:
                    b2:eb:db:ec:10:0b:d9:e4:2a:ed:51:7d:c5:0b:28:
                    81:99:e8:f1:b9:11:aa:db:b5:e3:e8:8f:39:8d:6e:
                    a7:5c:7f:cf:3d:2a:ca:7c:02:f9:aa:61:0a:28:77:
                    66:3b:7d:3a:81:2f:e1:bb:cb:b1:fa:a3:71:7c:e8:
                    bd:dc:78:bf:9d:8a:6d:ef:d1:99:21:03:2b:05:55:
                    14:a2:a6:71:f3:dd:48:b3:f1:26:4e:df:ac:95:69:
                    1a:ab:6c:26:57:5b:98:38:b7:78:3e:84:2f:52:0e:
                    1f:74:12:07:9a:8e:79:2d:3a:56:c6:8b:3a:9a:4c:
                    61:0e:04:06:c6:4a:1e:41:20:1b:6f:2c:f6:97:1a:
                    46:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:18:3B:B5:18:D9:B9:6B:0A:C7:68:CF:F0:6F:E7:15:85:F7:94:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/e1e1e87d-dcca-35a3-851e-04ad16aa9a63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:99:30:24:2c:e8:ab:16:54:16:1a:0e:c0:8f:04:60:31:58:
         05:46:b5:e4:ae:76:5f:3f:4f:74:83:6c:c1:e9:b7:46:62:0c:
         e9:d6:b2:b5:13:0e:06:c6:8f:08:54:af:a6:58:fd:b3:ba:46:
         25:37:c9:6b:0d:e1:a6:e8:ef:48:2a:c1:3f:39:46:96:6f:45:
         de:90:d4:d3:3c:f8:00:61:cf:f3:7e:73:97:b2:22:96:bb:a8:
         e5:29:cc:f1:00:ec:1e:47:e5:2f:1e:c7:07:7d:60:2a:3f:e6:
         27:20:c6:05:ea:f7:cc:07:44:c0:e2:f2:44:c5:a8:48:d7:2d:
         f5:19:ef:72:ad:e6:2c:3c:66:d0:d2:4a:9d:80:7e:d4:a9:e7:
         c9:3b:f4:9c:b0:ca:4c:34:75:42:d0:8e:44:29:40:1e:d3:c9:
         cf:88:bf:3f:63:85:76:00:89:cf:45:fc:ab:ed:57:f7:ab:3a:
         8a:93:0b:21:ad:a3:40:96:83:52:9e:74:19:28:ab:43:7c:f0:
         81:90:c5:f1:7e:ec:6d:4e:5a:72:39:88:13:55:27:b3:0b:ef:
         53:59:bd:0b:34:b1:f1:c2:65:64:d6:f4:01:16:bb:4f:12:1b:
         36:e8:d4:d3:b2:f8:da:d1:9c:d1:2f:e9:56:e7:81:7e:4a:a3:
         41:55:90:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 11:55:26 2026 by rpki-client