Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/c409cfce-5939-33ae-b88b-6de488a72456.roa
File:                     c409cfce-5939-33ae-b88b-6de488a72456.roa (raw, json)
Hash identifier:          tPWf6Ewu8z+xo5GKC1m9RYfyyej+AX1RSsfW48X77Mc=
Subject key identifier:   84:76:E5:50:61:0A:9B:3D:E5:9B:99:A0:78:F1:6C:AE:94:B1:AD:79
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CF282A246C39DE25F2C00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/c409cfce-5939-33ae-b88b-6de488a72456.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     834
IP address blocks:        45.39.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:f2:82:a2:46:c3:9d:e2:5f:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=60fe97aa-5980-4154-a3d7-f8206637721a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a1:40:5f:ba:1b:bf:de:5b:30:57:59:d1:81:
                    d3:4e:4e:38:9d:18:da:ea:db:14:24:6e:5e:12:e3:
                    3c:48:c5:0f:f9:a7:bd:1f:f7:9c:bb:ca:47:0c:35:
                    6d:17:09:7c:cf:15:04:a2:0e:61:f2:58:e8:52:c5:
                    5c:ba:2b:39:78:b5:e8:d0:02:20:28:22:7e:f9:01:
                    af:cf:47:c6:f4:08:2a:a1:94:d8:3f:e8:99:da:f5:
                    58:7c:08:01:cc:92:c0:58:9e:67:99:7b:8f:57:ec:
                    3f:d8:1a:bb:c0:43:5c:60:f0:13:eb:9d:0a:dc:38:
                    4f:e7:3e:47:62:4b:1c:a3:45:35:01:58:d2:66:4d:
                    50:fa:c1:a9:14:d3:88:57:f2:ce:be:d4:bd:7f:d3:
                    e4:ef:93:e6:a9:83:15:d8:0e:81:05:6b:3a:58:77:
                    f8:44:e5:9d:fd:1a:52:8c:31:97:4f:a3:aa:ba:48:
                    b7:bc:6f:72:eb:91:06:7c:04:87:87:1c:40:b8:3b:
                    21:28:a8:b1:20:06:c6:b6:02:0f:ac:9c:ba:61:6d:
                    00:34:66:04:da:e7:81:d8:9d:9f:97:4a:0e:bd:54:
                    45:fb:2b:f8:c1:07:74:fe:4a:6b:96:c7:35:c0:aa:
                    94:0c:ff:76:a2:bd:3f:56:60:13:8e:5c:28:a9:69:
                    f6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:76:E5:50:61:0A:9B:3D:E5:9B:99:A0:78:F1:6C:AE:94:B1:AD:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/c409cfce-5939-33ae-b88b-6de488a72456.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:9d:7b:61:22:5a:be:75:c1:7f:81:02:f0:03:a6:9e:52:45:
         b2:01:ea:27:02:a4:1a:de:b2:33:8b:c1:84:81:d9:67:7e:79:
         40:bf:1b:cc:61:4e:c4:5c:92:cb:98:f3:b7:5f:7d:5c:4e:d8:
         92:d7:f7:84:e8:29:d2:1d:06:d2:a0:40:a5:f9:17:2d:a1:01:
         80:56:08:f6:a7:1e:51:6d:dd:26:91:bc:43:98:95:9c:3d:9a:
         8e:63:2d:06:d2:a7:27:f3:a9:22:8a:b4:42:20:8a:c3:a1:68:
         b6:f9:74:9e:44:19:5a:3b:c2:2b:eb:87:7d:23:be:91:97:c5:
         4e:82:96:4b:69:65:d1:8d:44:8d:80:65:b4:22:b1:9c:eb:57:
         72:db:58:0f:74:fd:86:83:71:84:5a:3e:3c:68:08:b8:64:fa:
         de:8d:06:5c:8e:96:5a:6e:4e:60:cf:3a:02:cb:d7:17:38:8d:
         3b:99:02:fc:f6:5a:3d:cd:d0:6b:fb:b0:8d:6e:b7:b8:73:ce:
         db:c4:80:51:11:e6:3d:be:94:b0:ea:89:64:ed:f5:43:32:8d:
         86:b2:da:5b:6f:1c:b2:71:29:2c:68:7e:10:48:1d:64:82:03:
         84:52:0f:03:45:7a:88:91:b8:f2:1d:7c:93:86:c3:7a:24:13:
         df:89:02:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:52:15 2026 by rpki-client