Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/afe432cc-d460-357d-bc44-52938e0985c0.roa
File:                     afe432cc-d460-357d-bc44-52938e0985c0.roa (raw, json)
Hash identifier:          JyqVURXvEN7tNHeXKz4LCAuFynyNd7oOjoQVwevts4k=
Subject key identifier:   A6:A9:9D:8B:80:D3:16:C3:D6:79:D0:65:F2:71:CF:5B:F0:2D:F8:E2
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584F3243B7203C2D6F1A2A98EA00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/afe432cc-d460-357d-bc44-52938e0985c0.roa
Signing time:             Wed 16 Sep 2026 17:42:18 +0000
ROA not before:           Wed 16 Sep 2026 17:42:18 +0000
ROA not after:            Tue 15 Dec 2026 18:42:18 +0000
asID:                     18779
IP address blocks:        45.38.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:32:43:b7:20:3c:2d:6f:1a:2a:98:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Sep 16 17:42:18 2026 GMT
            Not After : Dec 15 18:42:18 2026 GMT
        Subject: CN=a158bdd7-c044-4dce-a4c5-0be2a5c2d1fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:28:6c:09:4b:98:b3:7e:cc:a5:6e:ce:b8:58:
                    2d:b0:7b:02:4b:59:36:5c:6d:fd:3f:fa:4d:9e:82:
                    55:e1:e8:ed:ab:c0:79:c9:fd:da:70:de:f3:67:c7:
                    ba:54:7b:4e:8a:28:d5:c6:05:c7:fa:1a:01:93:6b:
                    11:3d:7d:e3:2f:25:43:0f:03:2e:4c:1d:da:ef:9c:
                    c1:5b:fb:6c:15:0c:c7:3b:91:17:a2:ef:c3:3b:0e:
                    26:9a:9d:69:49:4c:6c:2e:ea:a2:72:c4:3a:54:65:
                    c8:06:fd:a4:99:a7:ca:76:a8:73:05:ad:b0:b6:1e:
                    65:49:f7:5a:16:a8:fa:d6:39:c8:b4:d0:cd:7c:fb:
                    87:57:71:6e:a2:e7:04:92:02:93:41:46:d3:f6:7c:
                    49:06:68:99:f7:29:b0:a9:43:37:87:75:cf:4a:2a:
                    84:02:c6:44:5d:c6:65:cd:ab:70:1f:46:ee:c0:ca:
                    e1:f4:e0:24:02:a8:1c:bc:30:1a:7d:29:d7:d0:0e:
                    27:63:f3:b8:f1:cc:05:5d:e1:7f:19:89:01:18:28:
                    b2:9d:c2:38:bf:3e:6e:bb:d0:2c:23:ec:f8:ad:82:
                    3f:b7:0c:d2:ad:c9:d4:9c:04:6e:c6:5b:77:82:91:
                    85:7e:45:f9:dd:6d:4e:ee:c1:9d:53:db:27:09:dd:
                    ef:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A9:9D:8B:80:D3:16:C3:D6:79:D0:65:F2:71:CF:5B:F0:2D:F8:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/afe432cc-d460-357d-bc44-52938e0985c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:92:91:b4:8e:69:56:11:9b:62:55:09:20:a2:ce:6a:36:2e:
         8c:f8:54:f5:bb:e0:74:55:01:11:16:70:50:24:d4:29:54:01:
         a9:9c:93:20:60:ab:4c:bd:b0:f0:6b:1c:56:5c:49:cf:fa:8b:
         eb:f5:04:24:5b:ee:09:4f:9b:4d:ce:87:30:b2:15:c3:4e:53:
         67:3c:32:29:84:fc:4c:b7:03:8d:67:8d:19:d7:da:81:d4:6e:
         5a:15:9a:19:a1:86:bf:e8:3f:14:41:8f:f5:3d:52:95:9d:78:
         f8:11:3c:3e:11:64:76:3d:51:32:8e:f3:71:11:ab:6d:76:de:
         6e:f9:6e:7b:d3:4b:89:e4:80:f7:02:d8:5d:28:6a:58:79:c1:
         d0:cc:b2:8a:ec:94:76:26:ba:b7:a9:d7:c6:ef:5d:9b:65:a9:
         aa:5d:ee:d1:68:86:18:5a:6b:1e:7e:05:9c:b1:b5:62:b8:b4:
         76:56:8b:ba:e2:a9:03:a9:6c:c3:ff:da:f9:80:fb:e4:84:95:
         77:7a:d6:83:17:fd:28:77:87:56:ab:78:55:f1:7d:0a:33:ec:
         03:87:80:88:be:9e:71:2e:e0:2f:d2:f8:72:b7:b2:e6:bb:a3:
         1b:96:b2:29:a8:b3:c5:41:f2:5f:89:b2:5b:65:06:4f:09:eb:
         15:9a:81:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8yQ7cgPC1vGiqY6gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDkxNjE3NDIxOFoXDTI2MTIxNTE4NDIxOFowLzEtMCsGA1UEAxMk
YTE1OGJkZDctYzA0NC00ZGNlLWE0YzUtMGJlMmE1YzJkMWZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyhsCUuYs37MpW7OuFgtsHsCS1k2XG39P/pN
noJV4ejtq8B5yf3acN7zZ8e6VHtOiijVxgXH+hoBk2sRPX3jLyVDDwMuTB3a75zB
W/tsFQzHO5EXou/DOw4mmp1pSUxsLuqicsQ6VGXIBv2kmafKdqhzBa2wth5lSfda
Fqj61jnItNDNfPuHV3FuoucEkgKTQUbT9nxJBmiZ9ymwqUM3h3XPSiqEAsZEXcZl
zatwH0buwMrh9OAkAqgcvDAafSnX0A4nY/O48cwFXeF/GYkBGCiyncI4vz5uu9As
I+z4rYI/twzSrcnUnARuxlt3gpGFfkX53W1O7sGdU9snCd3vYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKapnYuA0xbD1nnQZfJxz1vwLfjiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvYWZlNDMyY2MtZDQ2MC0z
NTdkLWJjNDQtNTI5MzhlMDk4NWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSa9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEGSkbSOaVYRm2JVCSCizmo2Loz4VPW74HRVAREWcFAk1ClUAamckyBg
q0y9sPBrHFZcSc/6i+v1BCRb7glPm03OhzCyFcNOU2c8MimE/Ey3A41njRnX2oHU
bloVmhmhhr/oPxRBj/U9UpWdePgRPD4RZHY9UTKO83ERq2123m75bnvTS4nkgPcC
2F0oalh5wdDMsorslHYmurep18bvXZtlqapd7tFohhhaax5+BZyxtWK4tHZWi7ri
qQOpbMP/2vmA++SElXd61oMX/Sh3h1areFXxfQoz7AOHgIi+nnEu4C/S+HK3sua7
oxuWsimos8VB8l+JsltlBk8J6xWagb4=
-----END CERTIFICATE-----
Generated at Mon Sep 28 23:29:02 2026 by rpki-client