Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f1297d74-716f-345d-97df-8dc3b7ac9226.roa
File:                     f1297d74-716f-345d-97df-8dc3b7ac9226.roa (raw, json)
Hash identifier:          3FVYb85TctlEdOJzZI8WJZGYQS3d4ws1QxDiA1GQHhg=
Subject key identifier:   9D:F4:2C:BF:05:51:42:41:DA:FF:F8:EF:7A:4D:60:2D:0E:B5:DF:7A
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CB92CAE16F9299A206520
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f1297d74-716f-345d-97df-8dc3b7ac9226.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     8881
IP address blocks:        45.39.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:b9:2c:ae:16:f9:29:9a:20:65:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=5bb4530c-14a8-4d02-b7c0-3af42658f70f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:29:0a:92:8b:89:47:0b:ca:f7:11:da:22:90:
                    e6:ed:7a:67:8d:51:6c:15:63:34:b8:25:6e:5b:fd:
                    a9:10:63:b7:51:41:f4:fd:98:8b:fb:1a:94:07:4e:
                    5b:ee:ae:c0:3c:d7:db:99:fa:7a:b4:52:0a:fe:70:
                    ef:e8:c6:0e:14:1b:af:6b:78:a9:e7:9d:b6:3c:bd:
                    fe:e4:84:a7:f2:69:cd:1f:f4:72:22:a5:73:49:9c:
                    61:dd:8f:07:2a:fe:3b:55:93:72:cb:82:d5:3c:b0:
                    8e:ab:0b:c9:4c:68:b0:4e:72:fa:05:88:b7:8b:bc:
                    06:37:87:f9:85:a4:8e:f7:57:19:4b:ec:30:86:6c:
                    a3:b6:d2:3e:8b:bb:7f:60:57:5a:cf:ed:f7:6e:79:
                    08:33:55:2a:48:23:ab:dd:69:d1:23:bd:af:9f:5d:
                    d4:3c:05:2c:03:0f:d7:d0:b4:69:ad:ae:de:88:c9:
                    8f:04:c7:e9:0a:02:25:5c:ef:b6:98:16:b1:f0:8d:
                    87:92:ff:21:ae:d2:81:99:8a:91:49:ef:36:f9:13:
                    c1:8b:f1:fd:24:32:18:02:7e:6f:32:67:5c:cb:d6:
                    38:56:d0:b2:41:d3:41:9c:9a:44:e2:60:e2:2e:1b:
                    7d:31:a5:db:ee:88:e9:e8:2c:4d:cf:2e:16:34:a7:
                    f7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F4:2C:BF:05:51:42:41:DA:FF:F8:EF:7A:4D:60:2D:0E:B5:DF:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f1297d74-716f-345d-97df-8dc3b7ac9226.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:78:ca:9d:84:4a:c7:e8:d7:24:43:54:d8:69:34:e7:4c:aa:
         18:75:55:07:34:92:2b:4f:df:1a:1b:e1:d3:a4:06:07:de:63:
         70:b6:8f:6c:cd:98:f8:2b:4c:4e:2c:51:53:01:cf:81:bd:05:
         b2:9f:2a:e3:85:c7:f4:11:f8:85:e6:f9:e0:17:ef:e4:68:9f:
         ac:4c:bc:1e:67:c6:f6:96:b3:82:00:8e:9b:10:af:d8:0a:38:
         60:c4:ce:1c:f7:23:58:c9:3e:c5:2f:31:83:d2:34:43:ed:6b:
         d4:34:51:49:e2:a9:b2:52:99:6d:e5:83:66:1e:22:7a:72:62:
         69:be:af:1a:14:b6:34:3f:82:26:df:84:2b:79:7d:31:a7:91:
         39:70:2f:a7:35:d4:2b:fc:43:6f:63:fd:cb:73:7e:cb:1d:c2:
         26:fa:da:36:8d:a3:b5:60:c2:4c:55:4e:4e:82:80:b8:b7:43:
         ac:cb:9b:2b:88:af:f6:c3:5a:85:fe:a4:6b:2c:71:ad:45:91:
         45:91:de:db:a6:9d:02:08:a8:57:5e:78:8b:fb:6f:c7:97:b8:
         52:71:6b:fd:d9:83:57:e3:29:35:71:a4:c3:a8:9b:78:8b:c0:
         cf:3c:cc:12:c8:4d:fe:b9:fc:59:0c:3e:e3:17:d5:86:2c:ac:
         69:b7:5f:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHLksrhb5KZogZSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk
NWJiNDUzMGMtMTRhOC00ZDAyLWI3YzAtM2FmNDI2NThmNzBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCkKkouJRwvK9xHaIpDm7XpnjVFsFWM0uCVu
W/2pEGO3UUH0/ZiL+xqUB05b7q7APNfbmfp6tFIK/nDv6MYOFBuva3ip5522PL3+
5ISn8mnNH/RyIqVzSZxh3Y8HKv47VZNyy4LVPLCOqwvJTGiwTnL6BYi3i7wGN4f5
haSO91cZS+wwhmyjttI+i7t/YFdaz+33bnkIM1UqSCOr3WnRI72vn13UPAUsAw/X
0LRpra7eiMmPBMfpCgIlXO+2mBax8I2Hkv8hrtKBmYqRSe82+RPBi/H9JDIYAn5v
Mmdcy9Y4VtCyQdNBnJpE4mDiLht9MaXb7ojp6CxNzy4WNKf3OQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ30LL8FUUJB2v/473pNYC0Otd96MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvZjEyOTdkNzQtNzE2Zi0z
NDVkLTk3ZGYtOGRjM2I3YWM5MjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSeZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGh4yp2ESsfo1yRDVNhpNOdMqhh1VQc0kitP3xob4dOkBgfeY3C2j2zN
mPgrTE4sUVMBz4G9BbKfKuOFx/QR+IXm+eAX7+Ron6xMvB5nxvaWs4IAjpsQr9gK
OGDEzhz3I1jJPsUvMYPSNEPta9Q0UUniqbJSmW3lg2YeInpyYmm+rxoUtjQ/gibf
hCt5fTGnkTlwL6c11Cv8Q29j/ctzfssdwib62jaNo7VgwkxVTk6CgLi3Q6zLmyuI
r/bDWoX+pGssca1FkUWR3tumnQIIqFdeeIv7b8eXuFJxa/3Zg1fjKTVxpMOom3iL
wM88zBLITf65/FkMPuMX1YYsrGm3X1I=
-----END CERTIFICATE-----
Generated at Tue Sep 22 11:23:40 2026 by rpki-client