Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/5240b21b-fb7b-3189-afc4-a0dc7d66b549.roa
File:                     5240b21b-fb7b-3189-afc4-a0dc7d66b549.roa (raw, json)
Hash identifier:          EWkIjEYe3TpPPikrPlJKd8BpsFgLSh8G2Nlasa8Lt48=
Subject key identifier:   C0:DF:D7:98:88:18:3D:4E:2D:3A:54:BE:A7:87:55:95:AE:1E:5F:99
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584E0CC271D835BE08C4119C6900
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/5240b21b-fb7b-3189-afc4-a0dc7d66b549.roa
Signing time:             Wed 03 Jun 2026 14:30:00 +0000
ROA not before:           Wed 03 Jun 2026 14:30:00 +0000
ROA not after:            Tue 01 Sep 2026 14:30:00 +0000
asID:                     3561
IP address blocks:        45.38.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0c:c2:71:d8:35:be:08:c4:11:9c:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jun  3 14:30:00 2026 GMT
            Not After : Sep  1 14:30:00 2026 GMT
        Subject: CN=86d50a85-6c6e-46ab-a020-34e0eacd8be3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6c:92:4f:11:b9:7f:c3:8e:5a:33:01:67:66:
                    68:ab:e5:96:3a:19:9f:a1:ec:07:f7:f5:a6:d4:49:
                    cb:48:24:02:02:45:e7:7a:df:ab:44:b2:25:16:7b:
                    fd:19:e6:fe:42:25:52:3b:e2:62:0d:e1:54:df:f7:
                    f8:de:f7:d0:9b:bc:91:39:80:be:39:22:48:70:0c:
                    79:76:ca:fe:b7:76:40:2c:64:95:94:8f:29:54:fa:
                    f2:95:8f:7e:44:66:73:d2:4e:33:66:de:c1:1e:ff:
                    c9:29:c4:91:08:e5:fa:b0:80:41:c3:d8:e4:92:dd:
                    96:86:aa:28:ab:05:7e:e9:c8:8b:f4:fd:56:b2:02:
                    79:82:9e:e2:b0:9b:d1:84:d6:74:06:5a:81:14:89:
                    db:c3:2d:49:58:03:74:eb:b4:85:44:c2:76:2e:51:
                    fa:cb:83:41:2b:2b:8b:4b:7b:c3:d5:05:7d:95:ed:
                    b8:f2:56:c9:36:13:11:56:8f:46:77:11:55:4e:b0:
                    1a:07:f0:03:aa:11:e5:c9:d8:ef:42:86:55:5d:ee:
                    e8:46:16:59:a1:9c:b2:c9:e2:02:31:48:ce:3f:e4:
                    12:f6:e0:a9:ed:77:5f:a4:2c:7c:40:8e:73:4d:cf:
                    d7:1b:35:d2:9f:44:4b:55:49:fd:ed:63:98:bf:f3:
                    3f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:DF:D7:98:88:18:3D:4E:2D:3A:54:BE:A7:87:55:95:AE:1E:5F:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/5240b21b-fb7b-3189-afc4-a0dc7d66b549.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:c7:7b:51:49:b3:fe:7e:f3:58:2e:b9:cb:4d:ed:4e:49:1a:
         3c:85:ad:bc:76:6e:1b:9c:b8:fe:bc:69:50:f8:4e:bb:fc:f9:
         bc:ef:5b:88:80:14:b5:10:bd:6d:0f:55:47:76:3b:c2:61:cb:
         c7:a2:96:14:b7:4e:aa:4e:60:93:45:e5:79:08:4e:9b:77:f3:
         fa:c5:e8:36:5c:cc:86:88:be:80:d3:92:1b:16:ba:68:6d:d0:
         19:60:6a:34:06:16:30:1b:8d:06:9f:e1:d3:bc:e4:74:b2:af:
         95:37:2b:cc:a6:03:df:13:34:92:1d:54:10:c7:a5:7f:75:99:
         74:79:55:ae:7c:55:7f:fc:ec:0a:90:60:bc:3c:cc:90:d5:91:
         13:06:ce:4d:08:c0:ea:0b:37:2d:38:3f:f8:c4:cc:e5:88:b2:
         83:00:aa:c5:93:44:7e:6d:03:72:36:95:de:de:73:68:09:a5:
         29:fd:c2:e2:4c:fc:1b:78:7a:62:8f:e9:d1:b9:64:60:fd:bd:
         10:6a:bd:79:dd:4b:f3:5b:cc:88:16:e1:ae:01:60:97:91:3c:
         ee:49:13:e9:dd:d7:b8:5a:9a:84:03:1d:8d:f6:d0:b0:d0:bd:
         33:9a:46:b5:d4:38:9f:94:f7:25:8a:a8:88:83:83:03:e5:eb:
         c6:57:30:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:29:31 2026 by rpki-client