Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/1dc14bf0-96b3-3c37-963d-26ca1c5723d6.roa
File:                     1dc14bf0-96b3-3c37-963d-26ca1c5723d6.roa (raw, json)
Hash identifier:          wX7wkzc2KgJiG8KxtY8MZdsCEGc78EdTlOMOhsAp7Bc=
Subject key identifier:   E9:54:D4:81:F8:B5:68:EE:EF:CE:6E:4B:1F:98:68:5B:11:E5:B0:C4
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CE74042C9A8453E4ED0C0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/1dc14bf0-96b3-3c37-963d-26ca1c5723d6.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     30058
IP address blocks:        45.39.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:e7:40:42:c9:a8:45:3e:4e:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=60d4f004-9310-4ba8-8598-b874fb1202b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:59:b8:54:fb:66:95:fa:5e:71:73:09:4f:21:
                    3c:6e:70:ad:8b:b7:ce:96:5b:b7:80:1b:6b:fc:23:
                    24:b6:42:99:4c:d2:5a:60:a6:31:2f:bf:f6:c7:42:
                    16:fe:b6:f1:e9:53:f1:1b:fe:50:ed:3e:26:b9:df:
                    b9:d5:2d:ed:ef:1a:da:54:b6:21:b3:1c:42:aa:7b:
                    f8:ee:1c:b5:3e:7d:9b:32:45:e8:d8:9f:fb:7c:b3:
                    57:0e:dc:4e:11:f9:39:35:92:da:e6:1f:ab:fe:50:
                    f9:ba:ff:70:64:c5:05:72:00:00:50:7f:5a:56:7f:
                    a5:3b:5d:8a:03:a8:78:16:92:85:fd:e0:ec:f4:84:
                    89:22:b5:73:27:c1:ab:49:a1:7a:f5:a4:ba:36:70:
                    d3:d7:b5:ee:8b:08:c2:e9:c6:b4:b8:b9:a1:82:6c:
                    b1:60:fa:e7:91:bf:9c:10:19:ba:ab:00:95:14:31:
                    65:03:28:4a:20:dc:95:76:35:22:8c:82:6a:41:82:
                    53:9b:9f:2b:06:4b:7b:68:00:61:d1:59:02:d4:f4:
                    a2:0e:41:b0:2f:42:2b:5e:55:01:45:06:a5:a6:e4:
                    c4:6e:30:f5:46:90:7b:74:54:7e:04:58:07:12:9c:
                    e7:9a:ee:b1:c9:e5:87:10:88:b4:86:1f:16:bb:c1:
                    ba:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:54:D4:81:F8:B5:68:EE:EF:CE:6E:4B:1F:98:68:5B:11:E5:B0:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/1dc14bf0-96b3-3c37-963d-26ca1c5723d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:64:97:dd:cd:21:83:1f:a1:c5:97:47:df:aa:b7:61:91:cd:
         93:d6:04:e8:b1:ec:35:94:18:14:0a:9c:03:62:a0:bc:5b:1f:
         d9:a9:fc:93:98:6a:eb:7f:88:17:51:ae:ab:2e:16:6a:57:27:
         6d:0b:fb:55:98:14:5b:93:3a:08:f0:09:19:1a:50:c4:f1:e1:
         f6:8e:30:9e:3e:f5:f7:da:d2:74:48:ea:73:c7:1c:18:f2:de:
         4c:c5:08:bf:31:c3:b4:53:6a:af:3a:cc:d1:2e:7e:72:a8:b4:
         93:8d:2d:a9:01:e2:13:0d:21:cf:ad:a8:90:15:fc:85:ba:8d:
         e9:74:e5:b9:05:11:b9:e0:15:0a:c9:a6:96:66:8b:fb:98:10:
         bb:48:db:94:c1:64:b0:96:0f:e4:06:77:67:cc:c7:72:76:2b:
         f2:30:94:48:7e:6e:19:c9:a1:aa:6d:5d:21:8b:33:38:95:45:
         8a:13:7a:03:83:7c:80:20:fc:a0:09:24:d0:0c:66:e3:05:fe:
         27:ce:28:91:40:ee:c4:d2:d2:7b:e3:04:24:78:49:27:56:13:
         c8:81:c3:4d:61:52:13:86:84:e0:8a:cc:5a:12:c3:73:e6:c9:
         c4:c0:5d:5a:1e:52:b1:5b:b3:16:e2:7d:c4:5f:05:49:08:8c:
         e5:f4:1e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:38:03 2026 by rpki-client