Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/c286694b-7bc4-3bf4-af37-d2221787e3af.roa
File:                     c286694b-7bc4-3bf4-af37-d2221787e3af.roa (raw, json)
Hash identifier:          xum1e4EPxDh6FRTQJS4DDX6yy0uXi+dd+Q0eTZW0htc=
Subject key identifier:   C2:DE:A9:97:41:94:ED:84:CF:66:57:42:C1:E5:5A:CC:5E:9D:F8:12
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584D7203A1969B257E6C9152B3CC
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/c286694b-7bc4-3bf4-af37-d2221787e3af.roa
Signing time:             Thu 09 Apr 2026 04:11:03 +0000
ROA not before:           Thu 09 Apr 2026 04:11:03 +0000
ROA not after:            Wed 08 Jul 2026 04:11:03 +0000
asID:                     211273
IP address blocks:        45.38.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:72:03:a1:96:9b:25:7e:6c:91:52:b3:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Apr  9 04:11:03 2026 GMT
            Not After : Jul  8 04:11:03 2026 GMT
        Subject: CN=c2e43186-526b-480e-8ac1-039b6921210f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:df:02:e1:97:39:c0:ee:77:d6:c9:ff:81:fc:
                    92:63:bc:48:81:fa:86:6c:70:1b:e8:e7:2d:c8:a6:
                    6d:c1:30:75:e4:5b:6f:47:59:62:ac:d3:f7:4c:c3:
                    30:da:a1:e7:d3:eb:71:52:4c:ca:b2:74:9c:d4:f5:
                    69:b8:3e:11:97:f8:0c:ef:15:d7:a3:f1:a7:0d:d7:
                    46:0a:4a:03:1b:55:f5:a1:f5:2a:7b:77:b0:7a:bf:
                    63:8e:48:37:8c:42:89:d6:25:dc:7a:46:22:ba:7b:
                    ca:0e:cb:e2:d4:29:31:7f:b7:4f:cf:d7:46:87:52:
                    34:12:48:61:b2:58:d7:95:e4:e5:e6:48:ec:06:4f:
                    69:e0:99:59:aa:37:2c:ed:dd:1d:38:68:bc:5e:48:
                    bf:e5:27:59:c7:ef:54:10:36:12:ee:8f:29:79:89:
                    fe:0e:c6:c1:a4:b7:ce:3c:dd:06:72:19:db:02:cd:
                    b0:fc:f9:cc:0c:e3:47:f2:0c:2d:c8:f9:3f:a4:84:
                    a4:47:e9:a5:2c:7e:2d:e8:bb:16:bd:8a:0c:b1:37:
                    e7:22:f7:3c:60:9d:54:8a:0a:fa:bf:f5:c9:af:54:
                    f0:de:72:f7:6d:c3:7e:a1:c2:62:a2:39:c4:80:5a:
                    a2:48:5b:cc:2a:bd:09:24:1a:74:70:8b:af:4e:ad:
                    17:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:DE:A9:97:41:94:ED:84:CF:66:57:42:C1:E5:5A:CC:5E:9D:F8:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/c286694b-7bc4-3bf4-af37-d2221787e3af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:db:f2:d6:fe:51:64:d2:e8:d9:ed:05:ab:2c:1a:a0:a7:4e:
         bb:65:bb:39:45:a8:e3:3f:d3:01:d6:e4:e0:de:c8:0f:35:e5:
         1a:d0:80:46:45:7b:a5:e1:bf:00:08:dd:e6:bc:bb:07:d4:46:
         aa:1c:87:0f:c4:c9:b8:a2:b8:72:af:ec:54:29:a3:32:5e:f8:
         33:3c:27:93:76:95:e0:07:2f:0d:31:68:19:2d:64:7e:81:52:
         07:8d:af:8b:e8:8d:ae:78:92:6a:03:b0:c1:94:73:d3:c4:db:
         f7:fe:8d:10:29:d0:c1:35:e8:4a:d8:49:25:da:6f:62:72:14:
         52:04:76:4f:26:c5:52:5f:2d:cb:1c:a5:83:a3:44:54:23:80:
         db:42:ce:3e:64:56:fd:7c:a4:4c:48:14:05:1d:f4:55:e0:be:
         47:51:b5:66:c4:f0:50:79:ae:34:af:f0:27:33:1a:b2:b1:30:
         cf:3b:f3:c8:ee:94:58:7e:66:5f:d0:13:ce:85:2a:3d:4f:e6:
         65:54:f0:dd:5a:e4:4e:d1:0a:3b:ec:7f:3a:15:1b:95:0a:cd:
         5e:4c:f7:fe:f4:50:52:5b:7e:78:56:d3:c6:05:96:e7:46:fc:
         82:ff:da:40:1e:9f:ae:dc:c8:ef:7b:07:5e:66:73:07:2d:ea:
         63:82:f5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:56:31 2026 by rpki-client