Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/8d33516e-58eb-339f-893d-6f1de9eaca8f.roa
File:                     8d33516e-58eb-339f-893d-6f1de9eaca8f.roa (raw, json)
Hash identifier:          5vGdNUmHIekbcPCrHN0m/+nCLBHtqNzIIRgug/8pHws=
Subject key identifier:   BE:A1:A0:EF:E0:1A:96:4A:7F:FD:A5:B6:87:FF:42:BB:00:20:93:EE
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CEAF9DAB47A300F2E7680
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/8d33516e-58eb-339f-893d-6f1de9eaca8f.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     0
IP address blocks:        45.38.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:ea:f9:da:b4:7a:30:0f:2e:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=403a9261-9c6f-4f77-957c-9449f38c02a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7d:20:8b:24:b5:41:fd:0f:c3:66:63:6d:24:
                    bd:48:7e:95:fe:6c:b0:00:1c:b4:74:29:f5:5b:13:
                    ce:05:4f:7b:f9:c2:ef:86:6d:a5:a4:ed:b5:20:6c:
                    ce:ab:c8:63:54:63:9d:74:d9:82:0e:8c:f4:2e:f2:
                    bb:61:f8:55:0b:e5:ab:61:b3:a5:f7:a9:b0:7d:33:
                    bc:bd:16:0e:20:8f:24:34:42:4b:c2:ff:0c:72:e9:
                    b1:eb:60:a6:45:ff:59:37:b0:7d:08:97:fa:c7:ef:
                    4d:73:17:14:08:d8:40:83:e6:a9:10:c1:a7:48:ad:
                    c7:76:c5:6a:34:b4:41:ff:81:a2:5d:53:7f:fb:be:
                    3b:c8:c2:97:3d:a3:b1:fa:18:b5:ee:59:70:a5:be:
                    3a:d0:2b:95:fa:5e:70:3e:ef:ca:20:8d:c8:f9:2d:
                    1a:7a:40:7c:fd:51:88:ef:38:bf:3c:55:c0:2b:72:
                    98:47:2c:14:3a:e4:d6:07:60:36:c9:aa:e0:5c:99:
                    90:a6:54:73:8f:f2:c4:3f:81:70:b8:12:8e:5e:95:
                    a2:d8:1a:b8:9c:b5:c2:bf:ec:8b:a2:c0:7c:1d:12:
                    c5:4a:0f:ff:1c:cc:6c:71:31:40:2f:14:87:fc:5b:
                    2a:d6:34:a5:fd:04:64:35:30:27:6e:ab:b2:43:6a:
                    42:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A1:A0:EF:E0:1A:96:4A:7F:FD:A5:B6:87:FF:42:BB:00:20:93:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/8d33516e-58eb-339f-893d-6f1de9eaca8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:c9:58:69:f8:d3:32:69:b5:27:4c:b4:f2:48:cd:95:ce:69:
         7e:65:f1:3b:73:1e:74:5d:91:a7:6e:0d:a2:26:e8:3e:ad:87:
         7b:e2:82:d9:03:aa:e7:79:e0:81:6b:ee:b8:f0:8f:8a:d0:65:
         8e:93:18:12:55:56:7e:80:cb:7b:97:0a:5d:1e:64:8c:79:2e:
         36:f3:3f:8f:0b:0f:ea:a0:13:54:d0:11:81:5d:79:27:14:c5:
         38:69:4b:b7:74:1a:60:69:0c:43:27:cf:c1:75:01:9c:dc:6e:
         76:ea:90:1b:67:00:bb:6c:b2:40:e9:0a:71:e2:21:77:04:db:
         5d:5b:07:12:b3:ad:a5:a0:03:a6:c6:3b:7e:81:0e:64:16:31:
         58:c4:53:fc:69:c8:94:4a:e6:7c:bb:2b:7f:98:a4:c8:c3:e5:
         8b:61:1b:48:e5:d4:fd:b5:10:c2:b8:60:64:b8:08:67:9c:56:
         c5:3d:40:dc:94:47:3b:de:3e:85:71:95:d9:93:66:27:eb:59:
         30:4a:f8:81:2e:c6:0c:63:2f:cf:df:f6:ad:0c:38:07:f9:e9:
         48:af:1d:38:d5:82:0d:27:50:c5:25:0a:7b:ea:5b:b3:ce:e0:
         7c:0b:03:59:04:90:40:0c:9c:a8:f2:7d:87:ab:28:ea:8d:74:
         34:37:95:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:18:33 2026 by rpki-client