Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/01fb642c-c214-34d2-91a7-c7c40aeca58a.roa
File:                     01fb642c-c214-34d2-91a7-c7c40aeca58a.roa (raw, json)
Hash identifier:          UDG/m/47C/ytucrnCAY0/5Cp6BjowyAsjdpMi3r0sRY=
Subject key identifier:   CC:73:24:94:BD:41:8A:3B:F2:4E:93:96:49:AA:92:3F:99:64:9B:17
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CBA0506F39079008FCE80
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/01fb642c-c214-34d2-91a7-c7c40aeca58a.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     202015
IP address blocks:        45.38.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:ba:05:06:f3:90:79:00:8f:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=d77ecb8c-7927-4924-8044-364c364c2026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:88:d3:79:05:9f:3f:fe:79:a5:44:9d:cb:ce:
                    54:12:7c:d9:95:80:2d:99:d3:42:b4:95:f3:f0:d4:
                    a3:e4:c5:be:b7:ca:d6:ea:be:b3:93:47:ca:3d:ee:
                    c5:33:f7:f8:48:1e:b1:60:7c:c6:7d:a0:7b:bc:72:
                    06:8d:ec:b6:ab:09:21:e2:1c:2f:2c:c7:65:23:8c:
                    86:0e:6c:74:a2:51:5a:03:17:1e:ff:c6:3c:d9:e6:
                    ff:02:88:e7:da:cd:d1:49:df:ae:5e:3b:b5:02:b7:
                    ea:f6:4a:48:d4:c5:cc:36:7a:a3:3a:fa:84:e3:4a:
                    32:ad:1c:54:bd:a8:0e:2c:cc:c8:a8:c5:d3:a4:68:
                    8a:74:8b:c5:b3:70:63:e2:29:e3:a7:5f:b4:e8:48:
                    42:27:2e:75:7b:78:db:c5:1c:c1:9f:35:a6:3d:ef:
                    14:a5:51:44:3b:94:3b:d2:96:c4:a5:ee:38:6c:ef:
                    cd:9e:3e:b3:62:cf:e6:1b:f8:0c:80:3a:48:2c:a8:
                    58:e3:23:b7:41:5c:5e:9b:e8:98:7f:2a:e6:7e:29:
                    2c:37:db:29:86:4b:fd:51:d8:d7:c0:fb:1c:37:15:
                    98:ca:d5:7e:02:2e:9a:21:65:05:56:1f:82:96:d5:
                    e9:f4:64:15:3a:c9:3d:76:40:80:5a:50:e8:2d:32:
                    d7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:73:24:94:BD:41:8A:3B:F2:4E:93:96:49:AA:92:3F:99:64:9B:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/01fb642c-c214-34d2-91a7-c7c40aeca58a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:64:13:ce:8c:38:3e:c3:6e:4e:6d:43:bc:6f:9a:31:79:a8:
         67:84:66:aa:a1:cc:aa:c1:65:a1:6c:de:a5:5c:2b:4b:d9:b2:
         74:40:b6:fc:ae:72:8e:19:3b:9b:f1:80:8e:be:fa:cb:de:61:
         85:b7:21:ca:02:91:72:db:33:a8:cf:c1:59:9b:d5:e2:ff:6d:
         b0:ce:c1:91:8d:98:06:d7:ed:fb:7b:52:bc:76:cd:b2:d2:7b:
         eb:b1:c1:a3:07:cd:eb:de:09:12:b5:9f:20:10:96:15:01:65:
         51:94:88:3d:e1:a1:1d:6c:36:40:3c:c4:1f:0b:6d:9d:45:34:
         5b:71:ab:46:5b:f5:10:2b:db:27:a8:76:e3:4f:20:c8:25:85:
         7c:05:04:6f:20:1c:b2:19:74:fc:3b:5c:60:96:8b:25:87:73:
         72:b5:e4:57:4c:54:c7:af:c7:60:9f:a5:32:90:a1:34:03:0a:
         ec:50:5e:66:31:17:db:8e:76:1a:12:ef:9f:7a:63:9b:8c:81:
         eb:f6:2c:c8:da:8d:9d:20:ff:30:e1:c7:13:cc:8d:7c:91:3a:
         8e:9a:97:9b:c6:fa:c6:56:45:9e:3d:3c:e4:89:b5:0e:06:42:
         bf:ce:97:53:2b:fe:1c:c6:02:51:d1:b9:67:dd:4b:5e:ce:dc:
         cc:60:20:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:32:50 2026 by rpki-client