Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/e8b417ad-c903-3d8e-8ab4-3e86ff82bc02.roa
File:                     e8b417ad-c903-3d8e-8ab4-3e86ff82bc02.roa (raw, json)
Hash identifier:          dyate1iiAnIUUA0zpE4gbgOWyScmWGzMCGyG2QPT0SE=
Subject key identifier:   C1:38:12:F2:B8:68:8A:00:7A:A3:65:C7:CF:C3:A8:8A:68:09:67:81
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DB9F621FE3D098E4F8C7920
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/e8b417ad-c903-3d8e-8ab4-3e86ff82bc02.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     834
IP address blocks:        45.38.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:b9:f6:21:fe:3d:09:8e:4f:8c:79:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=ec48d401-044b-4bb9-968d-96ab9a0442e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bb:92:9a:1c:bb:6a:8d:60:ed:af:c5:b9:47:
                    73:98:37:c5:95:dc:23:de:8b:e2:36:1c:b2:2e:7b:
                    14:21:d5:f1:04:bd:7c:0c:92:17:68:1e:62:49:15:
                    82:63:1b:ef:d0:4f:3c:ee:d5:f3:16:90:29:b8:5c:
                    88:20:d4:bf:93:52:36:a0:8b:be:36:90:28:49:03:
                    63:4f:6b:c4:b2:f6:9e:66:21:4a:dc:1f:a8:24:ef:
                    e0:ff:57:15:a1:90:03:80:05:f0:4a:e3:7c:ae:17:
                    b0:ad:c4:62:9d:18:ee:51:55:57:83:42:59:20:3b:
                    8c:ca:93:63:b4:30:69:33:2a:73:c7:61:4a:ee:18:
                    1e:d3:ab:c3:c0:df:dc:f0:e2:b3:73:79:95:2d:95:
                    5e:b8:07:4f:b8:71:1c:6a:9b:d7:62:e5:bd:5f:f1:
                    d2:9a:15:67:2c:7a:9a:12:7d:e2:a9:ac:9f:1c:e1:
                    a6:14:d6:94:0a:76:57:c1:a8:20:20:e0:e1:3a:8c:
                    4c:ca:1f:e4:38:34:73:15:fe:7a:e0:21:ba:26:c8:
                    d4:fa:2a:51:d2:0b:d1:3d:e6:a6:1f:fe:dc:da:90:
                    3b:11:3d:62:28:bd:3a:e4:eb:c6:67:74:c3:46:b8:
                    cc:74:07:c4:b7:f7:56:6b:c7:e3:8e:61:2a:27:bd:
                    4c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:38:12:F2:B8:68:8A:00:7A:A3:65:C7:CF:C3:A8:8A:68:09:67:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/e8b417ad-c903-3d8e-8ab4-3e86ff82bc02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:03:26:3e:0e:af:a8:5f:64:61:2b:c1:26:30:a5:3d:d4:4b:
         7f:76:84:31:c8:c8:71:d5:37:7a:20:76:0d:39:29:43:2c:d8:
         6f:d7:95:47:24:4d:e7:48:5b:80:9f:3c:52:ea:79:74:74:ea:
         f8:46:a9:02:f9:74:39:c3:21:72:fd:56:a7:29:2b:e9:1a:20:
         35:59:90:24:4c:26:c0:7b:f8:ab:75:ec:30:65:e8:81:2b:1c:
         13:f7:d7:be:77:b0:ec:bf:e9:7a:78:9c:3d:f4:76:52:b8:ab:
         72:a2:a9:b6:c2:e6:c3:11:ea:c2:f6:64:32:2b:5e:5f:94:78:
         ab:fa:8b:8b:9a:a8:00:61:bd:34:25:81:07:6b:50:af:06:7e:
         47:63:4e:fb:29:ed:fc:f9:20:bb:16:5b:cf:34:82:f3:87:08:
         3a:c7:50:57:b6:6e:0b:07:a6:9a:29:53:08:6d:1e:c7:20:71:
         1b:fc:33:88:b3:0c:ac:71:19:9b:24:53:35:88:36:fc:c8:93:
         21:9c:10:44:a9:8f:b6:62:58:17:a4:08:98:f2:17:d9:d5:61:
         a3:4c:fe:77:e5:78:64:a5:be:97:dc:53:22:e5:68:1e:1b:0e:
         3c:b5:04:ba:31:8c:e7:5c:ec:40:a7:ff:08:ea:71:b7:27:b2:
         94:ac:7b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:51:56 2026 by rpki-client