Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/bc15a814-8f48-3f0e-bd1e-b649baab45c7.roa
File:                     bc15a814-8f48-3f0e-bd1e-b649baab45c7.roa (raw, json)
Hash identifier:          elVb7ls4/k8AiNW2YnjmlSEvrJ5Ebk5rQjn/Q1Cd3GU=
Subject key identifier:   4E:59:55:A7:C3:BC:C6:48:25:86:56:28:E5:DF:03:78:02:09:77:84
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CCADDF36E120CA91F64C0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/bc15a814-8f48-3f0e-bd1e-b649baab45c7.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     62160
IP address blocks:        45.39.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:ca:dd:f3:6e:12:0c:a9:1f:64:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=240cbed2-9343-4855-88ea-e33e038171a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3f:67:95:1d:46:15:69:e2:2f:4d:a7:ec:ab:
                    05:5c:04:cf:b7:0c:2c:b8:eb:4a:a6:12:d8:a8:7f:
                    1f:7a:af:7d:d9:c4:83:e3:62:cf:5a:01:95:f0:c0:
                    c6:8d:0e:34:91:19:ac:1d:14:37:59:da:ce:65:09:
                    41:a0:e1:67:4c:99:bc:85:40:b8:f0:c7:05:0c:0f:
                    e0:e8:11:ac:c4:ed:71:d7:f6:35:f0:2a:54:48:35:
                    47:59:51:ce:d0:ed:ba:a9:89:1b:84:ca:fb:14:5b:
                    06:58:f7:03:e6:42:a5:13:d6:79:b8:3d:32:45:83:
                    13:18:1a:33:63:e4:4d:47:f7:a1:d2:ed:c5:59:58:
                    80:c6:29:ca:2d:cb:05:91:9f:b7:40:79:40:ea:6e:
                    37:ab:d0:41:a9:36:90:cd:c5:45:a2:d6:e9:79:16:
                    33:8a:3f:b7:fd:95:0d:d9:48:72:1b:35:44:ae:ed:
                    7e:e1:5c:24:7a:2a:5d:41:bd:13:bd:cb:54:e1:ae:
                    33:03:74:f9:d3:82:82:33:f2:9f:59:5a:0b:f6:85:
                    27:2d:b8:6c:0a:42:9e:2b:dc:d4:5f:a7:d2:50:51:
                    ac:16:14:38:9c:2c:40:06:d2:f5:1a:c9:62:94:43:
                    a4:4b:11:37:99:c4:8e:f1:e4:b2:15:03:fc:8b:e5:
                    a4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:59:55:A7:C3:BC:C6:48:25:86:56:28:E5:DF:03:78:02:09:77:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/bc15a814-8f48-3f0e-bd1e-b649baab45c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:96:40:37:84:4a:ae:ab:fa:0c:d8:db:c1:f9:09:1a:53:46:
         e5:3c:87:cc:ac:b8:bf:2f:f2:60:c8:c3:a7:1b:ee:5f:9c:15:
         36:8c:0d:98:c5:bc:d2:e3:f7:2d:53:b9:37:55:84:df:54:35:
         08:9c:57:f1:94:74:f1:67:48:57:55:62:bd:3e:db:75:73:f0:
         56:89:fa:7f:5e:8a:ff:22:ba:b3:6b:16:bd:71:a6:9d:0d:41:
         b6:03:ca:6a:3a:26:1d:f2:16:97:3c:36:cd:bf:92:40:1f:78:
         6a:b4:99:e8:52:06:46:82:c7:ba:4f:c9:c0:66:73:f1:fa:67:
         94:61:ca:ae:77:42:e9:0b:ef:e6:3d:ed:18:67:26:0c:17:34:
         4f:80:8a:f9:08:0b:9f:0f:da:1b:43:cb:00:96:d2:bc:6a:08:
         8f:93:43:d1:08:33:e2:2c:2c:b4:78:0f:18:63:be:47:22:57:
         92:1d:61:76:e1:42:cd:79:ad:6e:77:b6:48:b4:0c:ec:1a:11:
         60:7c:4f:6c:d1:2a:a3:bf:77:ae:16:21:3e:fe:4a:54:4d:69:
         05:62:f1:e8:23:9e:a4:1f:15:35:79:d1:b4:a6:37:12:f6:f0:
         ac:43:91:6e:53:68:b9:a0:39:16:28:d9:78:24:b2:0d:91:31:
         c5:6d:43:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:29:23 2026 by rpki-client