Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/125f13b5-341b-316c-95fb-94fde4988deb.roa
File:                     125f13b5-341b-316c-95fb-94fde4988deb.roa (raw, json)
Hash identifier:          qT0+OKHuc5TJNYmZpP3RSalO3nE+wxUbByxNa8NNBLY=
Subject key identifier:   08:57:6B:61:B3:FC:20:08:1A:F3:46:2A:5E:11:F9:57:20:27:FC:FD
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CDE4A2193FB6CA5F0A700
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/125f13b5-341b-316c-95fb-94fde4988deb.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     8881
IP address blocks:        45.38.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:de:4a:21:93:fb:6c:a5:f0:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=dffb3dd2-4a50-458c-bc65-cc7aeb277da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3e:ce:e0:cb:06:14:f1:da:f8:a8:2e:e5:0c:
                    f0:c5:3e:47:6b:51:8b:36:7c:c6:6e:e6:92:e2:81:
                    0e:aa:73:43:6f:27:4c:f1:5a:5a:91:35:69:c5:be:
                    3b:e9:b7:3d:35:32:fe:43:9b:8f:d8:c6:02:60:e8:
                    44:2f:c7:9c:9c:33:33:ac:c6:3a:7c:ee:b7:8a:b2:
                    85:b8:c9:a4:3c:3f:a8:5a:da:06:99:42:1c:e5:33:
                    85:f9:78:9a:fe:79:20:d4:40:57:a1:a9:54:85:55:
                    05:dd:92:36:05:d3:90:c4:e3:7f:3f:51:ea:a3:45:
                    39:74:2c:aa:6d:6e:bc:21:05:60:20:d7:4a:c2:29:
                    ba:4a:3c:79:2b:94:22:97:24:a6:d2:33:f2:e9:08:
                    d9:60:c5:f3:9b:56:d0:69:38:e1:26:d0:91:3b:2d:
                    03:a7:56:ce:0a:c9:d2:bc:b8:3c:9b:1d:b7:bc:d0:
                    25:49:df:6d:6d:a0:3c:21:b8:22:c9:9f:51:6b:91:
                    73:29:45:4a:44:4d:16:15:ba:49:95:21:46:de:44:
                    0a:c6:ab:ef:4f:1a:b3:1a:1c:93:59:1f:96:d0:5a:
                    8c:b8:95:88:9c:41:64:52:d1:53:b1:b4:1d:7a:62:
                    09:db:d8:de:05:3e:1f:f0:56:2b:56:f9:9e:38:6e:
                    92:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:57:6B:61:B3:FC:20:08:1A:F3:46:2A:5E:11:F9:57:20:27:FC:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/125f13b5-341b-316c-95fb-94fde4988deb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:d4:aa:cf:5e:4b:00:c3:a2:4f:9c:c9:13:1d:f1:ad:30:2c:
         98:f9:ff:e3:1f:3a:d7:69:29:92:66:5b:12:5c:20:ad:1b:fc:
         4f:34:f7:9a:d8:65:8d:6e:1e:d4:a0:e4:4c:c6:a4:11:20:61:
         8e:7d:b9:62:7b:5c:d6:41:cc:4e:78:1a:7e:17:29:80:59:af:
         70:b9:fb:72:03:29:bd:33:14:12:23:29:9e:11:84:a4:07:ad:
         40:42:83:b4:28:f0:89:66:58:b3:e2:92:71:f0:75:f7:71:20:
         cf:5e:7f:5d:7d:69:71:01:08:1e:bc:44:3a:6c:02:ec:f1:e1:
         de:a0:9c:af:ca:b9:43:ab:a6:db:dd:b9:fc:af:6b:fb:d5:60:
         1a:ac:bf:9e:04:60:77:f0:16:d7:14:69:db:d3:b8:70:1b:b7:
         74:89:35:28:b4:84:36:86:6e:6b:ee:3d:17:85:c1:8a:de:14:
         64:39:3b:1d:00:35:af:e3:4d:e2:34:18:b5:a1:cc:08:5b:8a:
         62:56:b9:86:3c:f5:e6:41:b8:c9:df:22:0e:43:f7:f6:bd:d5:
         dc:57:ca:cd:71:9c:78:38:44:b6:3b:39:47:ec:a4:84:42:89:
         0c:a0:93:a6:9d:ef:fb:fe:8c:0e:19:0f:ca:d8:d6:bb:a9:55:
         3c:af:1f:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHN5KIZP7bKXwpwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk
ZGZmYjNkZDItNGE1MC00NThjLWJjNjUtY2M3YWViMjc3ZGExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAij7O4MsGFPHa+Kgu5QzwxT5Ha1GLNnzGbuaS
4oEOqnNDbydM8VpakTVpxb476bc9NTL+Q5uP2MYCYOhEL8ecnDMzrMY6fO63irKF
uMmkPD+oWtoGmUIc5TOF+Xia/nkg1EBXoalUhVUF3ZI2BdOQxON/P1Hqo0U5dCyq
bW68IQVgINdKwim6Sjx5K5QilySm0jPy6QjZYMXzm1bQaTjhJtCROy0Dp1bOCsnS
vLg8mx23vNAlSd9tbaA8IbgiyZ9Ra5FzKUVKRE0WFbpJlSFG3kQKxqvvTxqzGhyT
WR+W0FqMuJWInEFkUtFTsbQdemIJ29jeBT4f8FYrVvmeOG6S8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAhXa2Gz/CAIGvNGKl4R+VcgJ/z9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvMTI1ZjEzYjUtMzQxYi0z
MTZjLTk1ZmItOTRmZGU0OTg4ZGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSZ9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHXUqs9eSwDDok+cyRMd8a0wLJj5/+MfOtdpKZJmWxJcIK0b/E8095rY
ZY1uHtSg5EzGpBEgYY59uWJ7XNZBzE54Gn4XKYBZr3C5+3IDKb0zFBIjKZ4RhKQH
rUBCg7Qo8IlmWLPiknHwdfdxIM9ef119aXEBCB68RDpsAuzx4d6gnK/KuUOrptvd
ufyva/vVYBqsv54EYHfwFtcUadvTuHAbt3SJNSi0hDaGbmvuPReFwYreFGQ5Ox0A
Na/jTeI0GLWhzAhbimJWuYY89eZBuMnfIg5D9/a91dxXys1xnHg4RLY7OUfspIRC
iQygk6ad7/v+jA4ZD8rY1rupVTyvH48=
-----END CERTIFICATE-----
Generated at Mon Sep 28 21:59:40 2026 by rpki-client