Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/e9b0ee43-240d-3806-b9b3-45d700402463.roa
File:                     e9b0ee43-240d-3806-b9b3-45d700402463.roa (raw, json)
Hash identifier:          Q5Z1Tfp7cJjgSUY7cp0c0/SRYihgSqy4o1kWA6usUW0=
Subject key identifier:   27:66:5D:40:0E:AA:82:E1:C1:40:B0:FE:91:DD:0D:31:2B:03:3D:59
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E147894DAE607CFAEDBA01880
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/e9b0ee43-240d-3806-b9b3-45d700402463.roa
Signing time:             Sat 06 Jun 2026 08:47:38 +0000
ROA not before:           Sat 06 Jun 2026 08:47:38 +0000
ROA not after:            Fri 04 Sep 2026 08:47:38 +0000
asID:                     214238
IP address blocks:        45.38.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:14:78:94:da:e6:07:cf:ae:db:a0:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun  6 08:47:38 2026 GMT
            Not After : Sep  4 08:47:38 2026 GMT
        Subject: CN=b0bfdf98-6ed1-4f83-8e3b-18ae9a4dac67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:49:69:5f:03:f7:7e:b6:9a:76:3f:2a:cf:ec:
                    1c:01:6f:14:61:3f:60:24:2b:32:1b:10:68:73:f5:
                    ce:2e:d9:7d:fa:4c:0b:2e:02:69:0a:ef:bc:af:df:
                    a8:40:33:8c:ee:11:0c:a4:ac:85:6a:cf:73:c4:20:
                    aa:fa:86:ab:d9:e9:26:91:09:aa:63:27:5e:b4:16:
                    7e:09:77:e7:91:7b:91:be:e2:21:2a:00:30:dd:8e:
                    04:8a:02:fb:97:0d:5d:a2:64:29:c2:55:e2:ba:5a:
                    1d:de:07:57:4a:ee:bd:21:03:fa:a9:3f:37:df:6b:
                    2f:36:b1:2c:d2:18:b7:5d:f9:86:bf:c6:b3:85:73:
                    43:5a:58:e4:d7:1e:76:b1:e8:d4:23:1a:6c:21:55:
                    8b:d1:55:f2:ce:72:b5:39:a0:f7:2a:fe:00:b7:f0:
                    90:29:4e:2a:1e:00:7c:91:9f:80:b0:09:09:bb:ff:
                    50:9c:2f:a7:31:3d:55:3a:1e:20:55:cc:54:5f:08:
                    d6:44:ad:9e:f0:de:c0:ff:c3:ae:58:05:75:24:e6:
                    06:9b:60:ee:4f:10:10:24:00:ad:03:f9:c3:13:2c:
                    48:2e:2d:e6:bc:71:fe:ca:4a:9c:4d:af:91:7e:7c:
                    74:b3:f2:54:59:09:0d:a3:ef:e9:03:47:7d:a8:76:
                    37:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:66:5D:40:0E:AA:82:E1:C1:40:B0:FE:91:DD:0D:31:2B:03:3D:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/e9b0ee43-240d-3806-b9b3-45d700402463.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:29:ab:a3:d9:65:58:61:44:29:85:ff:a0:af:37:aa:d0:ff:
         17:bc:2c:b9:fe:65:52:9d:54:9b:54:53:3f:10:98:e6:d5:a7:
         74:fc:aa:ce:7e:0b:d1:e5:7b:d2:dd:1d:70:58:b4:80:27:90:
         a9:28:bc:98:63:63:50:a9:d8:92:96:94:34:71:04:29:f4:0e:
         69:bb:fa:1d:9f:51:f3:79:05:ea:49:e0:98:d5:0b:cf:7e:25:
         41:6f:bd:47:31:ed:d9:92:c8:cb:64:a1:67:5c:b7:74:36:6d:
         c7:fa:ef:dd:ac:28:db:67:63:18:d8:64:32:dc:44:50:d7:63:
         dc:52:47:3e:26:21:5f:f9:2d:ee:43:b3:2b:5e:04:19:30:58:
         18:0c:30:6b:48:a1:1d:53:f2:55:a9:e3:ae:f5:03:18:b2:d2:
         d8:2f:4b:58:c1:7d:b1:89:5a:d5:29:92:ae:fd:6b:e9:0d:f9:
         ba:0b:15:da:00:82:30:9a:05:7a:1c:56:40:cd:23:7e:8c:74:
         65:e3:7e:ad:f9:01:ff:c9:29:bd:b3:6a:df:29:43:cf:c8:c9:
         92:23:42:24:ec:c8:5e:4f:d3:4f:45:de:34:ec:af:92:6a:da:
         b5:3e:2e:48:1d:de:40:82:fd:09:20:43:9a:80:3c:82:42:06:
         68:8c:9b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:49:39 2026 by rpki-client