Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/917f4ede-6367-3f99-a863-7b92d7fa73ea.roa
File:                     917f4ede-6367-3f99-a863-7b92d7fa73ea.roa (raw, json)
Hash identifier:          Iq6pbHIT5sSDRCUyAbaX7LeJBw+4LLLfhJiog5o0/Us=
Subject key identifier:   31:EF:65:61:26:B3:D5:96:9E:EF:CA:C3:07:E8:C3:36:AC:17:EB:83
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CDE99C59B60602DBEEF3C
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/917f4ede-6367-3f99-a863-7b92d7fa73ea.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     6939
IP address blocks:        45.38.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:de:99:c5:9b:60:60:2d:be:ef:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=ba10d670-c4cf-4f57-871d-ad1e104adf0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:97:96:e7:1a:e6:2f:db:5f:84:38:a7:cd:5c:
                    86:18:da:55:28:df:27:32:43:d1:25:79:9f:76:50:
                    0d:f3:44:a5:a2:ed:25:c5:be:40:15:4f:99:43:d9:
                    ac:95:43:2d:a4:4d:f0:f4:9a:5f:31:25:9e:4b:52:
                    16:ae:0d:9e:77:48:8e:8f:2a:04:e5:28:0d:f1:d6:
                    b0:8d:45:14:c1:95:7a:ca:82:76:1a:ee:9e:ef:8b:
                    1c:b1:f6:cd:a2:bd:fa:82:1b:d9:d0:20:14:f2:bd:
                    61:5d:3e:31:af:26:88:d9:dd:d3:6a:bc:da:b9:8d:
                    93:69:fc:e3:0c:e3:9b:89:4e:bb:a9:43:07:10:ea:
                    99:b6:76:4c:62:90:af:54:d3:b6:aa:65:d8:21:4f:
                    7f:2c:c6:f3:7f:46:0e:a7:ed:82:21:31:8d:a5:e9:
                    1a:31:0c:55:fe:ae:fb:3c:97:3a:d4:32:90:1e:bd:
                    09:67:6f:41:a0:ee:1a:42:bf:c7:db:e8:ab:00:c8:
                    6d:e3:80:c4:6d:78:9a:f4:56:b4:18:ce:01:ad:02:
                    1b:72:33:af:69:04:a8:26:3f:bc:0b:ce:2f:a2:11:
                    1a:61:46:b7:18:b1:80:87:13:1a:9d:d5:f6:83:02:
                    2e:5c:46:34:4e:17:96:d1:f8:33:b4:3d:b8:f4:89:
                    37:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:EF:65:61:26:B3:D5:96:9E:EF:CA:C3:07:E8:C3:36:AC:17:EB:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/917f4ede-6367-3f99-a863-7b92d7fa73ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:ef:74:e8:86:ac:82:05:0a:1d:14:6b:d4:f1:0a:79:86:9d:
         fb:e8:e3:2a:fb:fe:4f:be:61:a7:a8:67:f0:14:56:40:41:a8:
         0f:ce:41:f1:f9:f5:50:df:17:a8:5c:53:dc:43:2f:d7:0b:31:
         4d:ae:ca:c9:4c:21:18:0e:27:77:1c:43:be:2f:29:76:bd:54:
         f0:58:66:6a:93:85:d6:7e:67:0d:2e:2b:1f:5c:4d:6e:3a:cc:
         07:8e:8c:56:4c:fa:28:3f:21:1a:93:34:77:ad:2b:93:3f:de:
         db:d8:82:ed:4e:03:d7:5d:9e:1b:89:57:28:4f:d8:0b:49:ee:
         11:3e:5d:f8:47:95:e9:76:5d:9a:13:66:9f:99:6f:c1:31:d8:
         6c:3f:33:02:6f:12:41:0b:7f:ea:58:00:4a:c6:f4:87:5a:f6:
         b5:f2:2d:ae:b9:aa:70:7f:1c:c8:28:f1:87:40:59:38:8a:76:
         f0:7f:59:9b:2a:fd:c5:f3:9b:9f:c9:e8:e2:d9:52:7d:10:0f:
         35:e5:c2:33:d9:9e:a5:ef:10:2b:12:92:1e:56:bc:3d:24:32:
         52:c4:23:fb:f9:05:17:f2:97:9c:80:de:7d:17:2e:66:b5:b5:
         aa:02:73:f2:3e:63:35:e5:bd:a6:6a:31:02:a0:44:8f:f0:f1:
         5e:58:71:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:46:21 2026 by rpki-client