Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f78a4c1f-fd68-31f6-8997-1d63d8e68600.roa
File:                     f78a4c1f-fd68-31f6-8997-1d63d8e68600.roa (raw, json)
Hash identifier:          a//DkPDJ43Xibd9dVXslH/5PvtKbeX/os/rR4PYjh/w=
Subject key identifier:   0B:06:8B:E4:C2:53:88:E6:04:87:1F:3C:63:F9:80:E7:E1:29:19:A0
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E4DB9F69B7630EBC4E87EBB80
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f78a4c1f-fd68-31f6-8997-1d63d8e68600.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     212238
IP address blocks:        45.38.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:b9:f6:9b:76:30:eb:c4:e8:7e:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=fb422165-b18a-442b-b7d9-b82c15a36216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9a:57:31:a2:c2:d4:e5:84:08:c8:81:92:69:
                    97:31:ae:02:8b:94:6d:c8:5a:df:15:ff:45:b6:37:
                    84:d8:1c:f9:4a:14:23:68:55:0d:62:38:62:02:96:
                    b2:89:88:5e:65:bf:b5:31:10:8a:76:bf:27:67:96:
                    9d:16:d1:74:b2:ac:6f:e4:d3:b9:e5:da:cc:7e:25:
                    2c:5f:e4:d0:15:fb:fc:a5:2f:cb:eb:ed:66:f0:c9:
                    cb:1f:d7:a4:50:30:69:ab:ae:f3:0d:d7:b5:52:cf:
                    7b:eb:ae:9a:0a:24:3f:66:a5:32:5f:7f:6b:80:10:
                    83:09:ae:ff:b0:3b:58:d6:cd:93:fd:dd:01:ab:de:
                    fb:d8:75:b5:48:01:e2:6e:af:2f:36:46:52:3d:dc:
                    43:ba:f7:e8:01:1b:6e:40:13:19:30:39:bc:f7:90:
                    ea:88:d0:c2:8a:03:a3:99:e6:0a:15:f6:a4:28:82:
                    14:35:a9:c2:5a:8e:02:cb:f9:ec:2a:82:c1:e7:49:
                    7c:7d:2c:57:55:1f:c9:66:47:2b:e5:d0:59:28:be:
                    ed:e9:0d:48:74:20:f7:24:34:37:79:c0:1c:d7:78:
                    6d:75:70:d7:6f:c4:27:28:88:f0:b3:d0:1a:ae:66:
                    14:07:4d:36:6d:4e:19:20:58:95:8e:8c:2f:e0:ec:
                    ff:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:06:8B:E4:C2:53:88:E6:04:87:1F:3C:63:F9:80:E7:E1:29:19:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f78a4c1f-fd68-31f6-8997-1d63d8e68600.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:92:18:da:cc:d0:92:63:9c:ef:28:7e:06:51:55:08:7a:cc:
         6b:bc:f4:5b:7e:54:c6:b0:c9:96:0d:9a:16:c9:d8:9d:6e:98:
         70:09:30:bf:15:e5:a5:62:be:e2:83:f1:12:0e:7a:84:e4:73:
         ce:10:fe:1c:69:52:10:b8:52:de:d8:b8:84:00:c7:09:df:37:
         f7:b1:2d:9f:ed:15:4c:f2:8a:fd:fa:4c:7a:af:f3:92:e5:8c:
         11:84:65:d7:f1:f1:f0:7e:c6:b2:8d:0d:25:80:af:83:bb:a1:
         78:e4:6a:ef:ba:4f:27:92:14:34:ec:f4:b3:4c:2c:5a:9b:97:
         12:b9:fe:b9:f5:88:be:40:49:53:3a:22:93:8f:c3:6e:e0:82:
         f8:b0:29:e2:5e:31:98:57:f4:15:dd:d4:84:4c:be:93:fd:db:
         04:5b:f9:36:64:82:5f:2c:85:b6:f2:3e:19:15:9e:90:d0:0c:
         6f:d7:12:87:65:10:d5:12:0c:c4:ba:8f:da:09:47:7d:ef:2b:
         4e:5b:f5:d9:5f:f3:41:bb:ea:76:df:51:48:82:97:63:63:29:
         30:d9:03:9b:e9:cb:f2:17:5a:13:c4:fc:13:b0:12:b7:34:1d:
         34:b2:8e:66:35:32:4e:38:00:f9:ce:5a:a0:fa:6a:2e:71:9d:
         15:ae:72:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:54:34 2026 by rpki-client