Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2f969ed5-020f-3372-a743-ef52a80adba7.roa
File:                     2f969ed5-020f-3372-a743-ef52a80adba7.roa (raw, json)
Hash identifier:          19vs+e8mU7KGhTFF+xbuoT4g/rdOFrXahQbr8Usg9lw=
Subject key identifier:   89:A7:85:F0:EE:FD:C7:9B:DF:77:87:EE:1B:EA:32:5C:5F:DB:FD:30
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E147EA1B1E489EBB2CD223D20
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2f969ed5-020f-3372-a743-ef52a80adba7.roa
Signing time:             Sat 06 Jun 2026 08:59:50 +0000
ROA not before:           Sat 06 Jun 2026 08:59:50 +0000
ROA not after:            Fri 04 Sep 2026 08:59:50 +0000
asID:                     44559
IP address blocks:        45.38.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:14:7e:a1:b1:e4:89:eb:b2:cd:22:3d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun  6 08:59:50 2026 GMT
            Not After : Sep  4 08:59:50 2026 GMT
        Subject: CN=a98ec056-1cc8-4d03-b927-821ec80ac107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7d:5c:c9:51:95:13:c4:28:be:14:7a:c2:4d:
                    8f:4a:9e:8e:24:f4:21:d8:1c:7a:d8:23:21:6d:a3:
                    7d:6c:59:66:67:a1:0a:5b:77:f7:be:6b:63:7b:d8:
                    5f:dc:97:00:f2:54:7d:ab:c3:15:03:53:7f:32:27:
                    74:1a:12:2b:7e:d7:42:26:cd:c9:82:39:0a:d9:04:
                    90:03:b9:e7:d0:b5:c6:6f:b0:bd:e6:dd:ac:cc:e5:
                    69:f5:96:c9:96:09:1c:63:f4:a5:f5:c8:db:67:8d:
                    c4:22:22:d9:7f:f9:d0:9a:96:2a:7e:fa:e2:84:d2:
                    19:67:60:f9:83:c1:af:9e:b2:08:f8:84:6d:08:10:
                    7b:9a:05:48:53:c9:6d:d1:c2:71:5c:d4:2b:ae:2f:
                    4b:ac:72:56:33:c6:62:cf:b4:66:a6:63:2d:10:cb:
                    bc:37:50:6b:c4:3f:4a:68:bc:6a:9a:b9:29:69:10:
                    76:3d:b0:30:94:53:19:07:ae:46:d4:f9:5d:45:97:
                    1f:4b:4e:73:f1:a3:5f:8d:82:15:55:07:21:55:90:
                    24:92:88:03:8a:85:ef:fb:3e:07:fe:70:fd:1e:40:
                    16:de:1b:f1:cf:9e:07:4d:0b:b0:71:bf:61:31:f1:
                    5f:ab:87:82:ab:e4:6c:2a:37:cf:be:be:3a:94:eb:
                    ee:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A7:85:F0:EE:FD:C7:9B:DF:77:87:EE:1B:EA:32:5C:5F:DB:FD:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2f969ed5-020f-3372-a743-ef52a80adba7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:95:47:23:21:44:50:3e:18:97:39:32:1f:75:08:a3:be:1d:
         13:06:46:5e:be:29:af:98:2d:d8:6d:df:49:91:5f:80:be:f7:
         1c:96:3a:eb:ac:e6:f7:fd:a1:d7:0d:68:78:a0:d5:a1:73:9a:
         17:d5:2f:66:68:79:24:fa:75:eb:32:71:71:fb:80:45:7e:38:
         2e:5d:3a:a9:50:9d:09:84:e5:3c:dc:db:4a:b8:ee:56:5c:fb:
         88:d7:75:ce:75:4e:17:f2:4b:ba:2b:96:3e:00:20:11:f5:76:
         9c:7f:30:77:5f:c7:7f:17:2a:42:ba:9f:ff:72:e2:fb:7d:d9:
         5b:19:f1:ae:c5:a4:60:c5:76:b7:92:fe:a7:a3:14:63:75:2c:
         ec:29:ad:91:df:40:6b:d8:fd:e5:14:90:4e:3e:17:f4:6a:10:
         5e:a9:a4:de:43:eb:48:fc:15:22:1e:9f:7e:a5:2f:c0:1c:0d:
         d5:0a:11:a8:85:d6:ac:1a:dd:ab:f9:f3:5b:27:83:a4:20:3a:
         8a:1b:89:50:a4:7a:17:65:29:c7:92:65:44:e9:82:2f:0e:10:
         ee:6d:1f:8f:97:9d:ca:60:ba:80:62:89:93:82:02:be:38:29:
         94:c5:5d:ff:7b:c8:e4:35:a6:cd:d5:03:e1:7c:92:3f:41:d5:
         52:b9:0e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:17:33 2026 by rpki-client