Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/7e2fe97a-2127-3968-8c77-4521d41e7f1b.roa
File:                     7e2fe97a-2127-3968-8c77-4521d41e7f1b.roa (raw, json)
Hash identifier:          DNRMvzLH52XKzp64GvwNRG2wpCIZ5dAXN3GXFVPnWSU=
Subject key identifier:   2F:96:56:9B:61:FE:E7:42:D8:FE:8C:BD:6B:83:21:76:FC:D4:83:A6
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CBB925E7828131F0C1500
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/7e2fe97a-2127-3968-8c77-4521d41e7f1b.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     44559
IP address blocks:        45.38.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:bb:92:5e:78:28:13:1f:0c:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=bc4ae639-cb62-4ddb-a0b7-ef20867c5847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:83:07:e6:0d:1e:f2:ab:22:47:9f:d4:87:20:
                    2a:7e:03:92:6c:13:87:1e:ed:3d:ef:cc:1d:a6:fc:
                    07:33:56:bb:b5:88:bd:9e:6e:fa:8d:8c:d2:de:8b:
                    14:7b:bb:16:8a:97:25:ee:16:71:72:cd:1a:7a:45:
                    57:03:7c:4d:63:0c:3e:f3:a4:7f:cf:e7:3e:7e:94:
                    8a:91:da:69:4e:f9:45:04:43:78:b7:6a:a3:5a:a7:
                    d2:7e:d5:17:ae:22:29:03:b0:18:26:7e:b7:da:0c:
                    e7:2d:a5:36:27:74:0e:54:c3:52:0a:46:cf:13:06:
                    90:e6:ee:8f:54:cb:4e:ee:23:79:f7:5a:ce:b2:a2:
                    1d:63:80:bb:11:5b:b4:a6:34:a6:0a:77:ce:6e:f2:
                    05:b1:4c:a1:f1:7e:66:20:1a:e7:da:f0:e1:8b:0c:
                    30:2f:e8:f6:68:6a:2e:6f:f1:35:87:d1:b3:87:87:
                    2f:5a:98:7b:c1:da:26:35:bb:73:ce:c3:78:ce:1d:
                    23:c8:38:92:bb:d4:54:dd:62:38:64:f5:98:e3:12:
                    ee:8d:27:73:6f:92:21:66:58:9c:82:6c:d5:94:ee:
                    e4:3a:39:00:82:24:2e:45:07:ee:08:f0:9e:f4:d9:
                    72:34:75:75:a4:14:20:bd:07:6f:3f:c7:5b:ce:5d:
                    86:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:96:56:9B:61:FE:E7:42:D8:FE:8C:BD:6B:83:21:76:FC:D4:83:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/7e2fe97a-2127-3968-8c77-4521d41e7f1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:e8:07:84:fc:4e:a3:f1:95:05:de:02:2c:8b:d2:df:42:65:
         2c:5b:4d:60:b5:a0:f5:8a:1d:28:38:fb:fe:54:c2:be:2f:63:
         27:fa:20:44:0e:00:8f:8d:b0:39:ca:d5:e5:78:3d:34:93:21:
         a5:ad:1d:65:26:e3:d9:59:db:5f:1f:27:cf:b7:cd:ff:7b:9a:
         3e:80:9f:71:8f:b9:09:c6:39:39:2a:eb:97:d6:d1:58:b0:be:
         5d:c2:60:f7:3a:99:ce:2a:d7:7e:b4:84:4d:ee:c7:02:69:78:
         7e:8b:31:d3:01:c5:81:a2:f3:1b:88:cc:5e:7f:c3:d2:c4:1d:
         ea:6c:81:72:3e:c5:c2:1b:6d:56:3a:5f:12:23:29:c1:cb:e7:
         b5:c0:33:27:fa:fc:12:a4:dd:ef:fc:12:07:43:3c:f1:eb:f2:
         63:38:fe:bb:37:2a:a1:d6:d3:92:12:b9:28:75:d7:c5:19:ab:
         2f:ba:3f:49:62:90:00:61:6a:91:49:8b:08:0f:37:14:c6:1f:
         94:39:ec:59:3c:2e:d2:8e:e7:99:19:d9:d1:a1:27:ee:d6:bc:
         eb:34:5e:6f:f5:dd:fa:fb:d8:e7:50:e4:3e:6c:1d:a7:14:0f:
         82:63:9c:04:6f:6e:08:02:b0:70:6b:9f:57:c9:8a:4e:6c:93:
         d9:c1:4d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:42:25 2026 by rpki-client