Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b45e4773-cb64-3532-be5e-cd256f6a3c76.roa
File:                     b45e4773-cb64-3532-be5e-cd256f6a3c76.roa (raw, json)
Hash identifier:          LnhHUuMbELyq+arrXmfXy1KcPiMTG4xi3n/UBShlSsc=
Subject key identifier:   31:68:A0:DD:50:64:CD:BC:60:53:4B:F0:29:D7:E9:E4:16:C9:AD:84
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CEF40DD7AAFB19CCCEB40
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b45e4773-cb64-3532-be5e-cd256f6a3c76.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     262287
IP address blocks:        45.39.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:ef:40:dd:7a:af:b1:9c:cc:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=03ad4150-cc2e-4bf0-bfa6-d236f68807c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:51:5e:de:84:7b:50:01:d4:1a:3b:be:25:f4:
                    21:ea:46:2d:0d:c1:7f:14:1e:41:9e:ec:c7:4e:f1:
                    d9:cd:42:fc:6c:b6:49:88:e3:91:2f:15:a5:42:59:
                    ec:8e:cb:74:c9:52:fb:0f:51:45:d1:09:2e:8d:54:
                    ea:82:ce:6c:c9:9f:c8:9c:24:d6:e6:d8:c0:b8:0e:
                    c8:65:9f:76:9c:b3:5a:4c:10:ef:f1:b5:e8:55:cb:
                    81:df:17:ed:96:a2:bf:57:f3:69:6e:f8:20:c7:7b:
                    84:d6:b0:c5:c6:22:1b:23:43:82:09:a7:c1:88:1b:
                    99:88:78:68:bb:a6:eb:a7:a5:42:e6:b7:5e:81:60:
                    e3:9b:d2:49:1e:99:1a:83:a8:2e:cc:b5:2f:25:64:
                    79:7f:0e:6a:5b:9f:f2:49:c9:0b:10:09:44:90:78:
                    15:cb:e7:d4:47:31:1c:e6:b9:6a:70:1c:88:f4:da:
                    be:d1:0b:24:23:f8:4a:06:08:aa:58:7d:3c:5f:78:
                    88:48:ef:8d:bf:83:04:f0:a1:13:6f:43:ac:40:1f:
                    80:ea:c0:af:73:b1:fa:97:3a:ff:47:ce:93:46:b9:
                    a9:c8:b3:9a:7d:c3:59:1f:6c:1a:ba:41:73:5f:cb:
                    dd:67:18:b2:12:23:92:c1:92:1c:47:88:ef:04:92:
                    c0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:68:A0:DD:50:64:CD:BC:60:53:4B:F0:29:D7:E9:E4:16:C9:AD:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b45e4773-cb64-3532-be5e-cd256f6a3c76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:40:af:11:af:d4:25:e2:21:d3:d5:89:12:80:5e:c6:4c:7d:
         6c:e2:44:0d:5f:b8:4f:f7:8c:de:c6:6c:a5:63:5d:c0:f3:ad:
         a3:3b:1d:4f:bb:91:ad:32:e0:74:1f:37:af:b0:76:f9:33:69:
         1b:a8:4a:29:73:c4:44:48:3a:12:07:55:30:88:bd:e2:c5:90:
         81:95:cc:e5:c6:97:26:41:56:08:6c:95:6b:b0:f6:cc:6a:cb:
         b4:c4:5d:41:4b:19:c3:6c:ea:78:75:7b:c1:91:6d:a2:e5:25:
         8a:c0:80:24:ae:a7:06:14:06:70:b8:df:49:04:5d:4c:b9:15:
         7d:c9:83:70:03:02:1b:e3:4a:1f:fd:4d:bb:a2:a1:c9:3a:37:
         7d:3e:f3:bc:ef:9c:5d:41:de:19:2b:ae:87:58:5e:07:b6:ba:
         73:38:71:9b:e8:92:f1:89:33:a9:0e:3b:db:e4:9d:40:42:03:
         21:88:88:2b:b8:28:7f:83:e6:c9:f7:34:6c:ca:3f:fb:f0:6c:
         c9:5a:95:97:b0:e4:63:9a:07:71:62:c5:59:dd:7b:d9:2f:c2:
         d6:f5:cd:c1:35:26:29:24:8d:a0:95:06:97:1c:6b:c0:7b:1c:
         8a:33:5a:45:7c:19:c5:93:ba:dc:49:3f:c6:be:75:76:b1:31:
         c0:24:43:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:02:30 2026 by rpki-client