Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f8c9344e-8f58-373f-8462-ad74375b3cdc.roa
File:                     f8c9344e-8f58-373f-8462-ad74375b3cdc.roa (raw, json)
Hash identifier:          N8BzLCLtrI6lb+Imq3JFh2oLV9nBxhVvp7F7NYLDRlc=
Subject key identifier:   4D:6E:10:69:26:12:3B:F5:10:05:8C:28:BF:B4:00:80:91:10:26:98
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EA7924D7CB4799EB48A1F6400
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f8c9344e-8f58-373f-8462-ad74375b3cdc.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     212238
IP address blocks:        45.38.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:4d:7c:b4:79:9e:b4:8a:1f:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d89810eb-4784-4116-8613-546fd5d31b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:70:44:ba:ed:15:b1:96:60:f0:f2:9b:78:c5:
                    1d:c7:e1:b6:ab:d7:ad:27:3f:e9:81:a1:e0:ef:2c:
                    c4:1d:43:e6:db:9d:0b:de:19:7a:72:54:6a:c8:1c:
                    91:af:c2:1a:bc:a0:8b:52:86:02:58:f5:d9:fe:96:
                    7b:1e:09:d1:dc:03:4a:59:f2:a4:bb:fb:f6:91:d4:
                    0f:a4:a9:44:ab:06:27:d4:96:60:90:4d:20:7d:35:
                    3c:f8:ec:bb:3e:66:a5:1f:08:ff:17:bf:d2:12:e8:
                    a5:d3:36:e3:f1:d1:c7:dd:aa:f5:b1:93:31:71:41:
                    d5:72:3f:58:09:74:3c:33:b3:a6:2a:25:f3:5a:34:
                    54:06:86:19:a6:05:d0:07:37:50:e1:48:2c:6e:79:
                    e2:1a:0c:4d:41:72:f2:0b:7f:4b:b6:34:d9:e4:c7:
                    ba:ec:5d:19:e6:dd:42:fc:57:7b:94:d7:28:a2:3b:
                    00:e5:93:9f:ad:6e:17:1b:e7:db:a3:7f:ac:d1:13:
                    37:91:35:42:90:3a:cf:42:b0:97:82:98:21:90:5d:
                    44:47:24:4a:5c:2b:e5:2f:17:ec:9d:42:d3:36:19:
                    be:62:b2:e5:81:04:5a:17:e3:57:18:e6:be:63:b4:
                    c4:79:ee:c3:f4:22:9b:16:99:b2:56:e7:83:d6:c3:
                    b8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:6E:10:69:26:12:3B:F5:10:05:8C:28:BF:B4:00:80:91:10:26:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/f8c9344e-8f58-373f-8462-ad74375b3cdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:4a:0d:49:90:b7:83:32:2c:5f:fa:b6:1e:3d:0f:2b:c2:a3:
         94:91:d4:55:c2:56:a4:7d:0b:f6:6a:45:78:94:8c:80:ba:a0:
         4b:93:97:1b:58:88:f1:9a:bb:7e:7e:d0:e7:21:82:08:a7:ae:
         94:3e:e5:e2:ec:3c:82:1b:dc:f7:02:36:82:33:b7:99:11:a7:
         95:6b:66:62:4b:ff:e2:02:c8:5f:6a:a2:bb:4f:f0:a5:78:5f:
         bf:f0:98:9b:90:fd:8a:3f:c6:3f:c9:be:50:c6:14:ea:fa:04:
         88:32:c1:e7:6f:5c:37:ff:e4:80:c9:7b:52:76:00:91:ce:e8:
         0f:aa:d7:48:4b:4b:55:77:65:b2:1f:f8:12:15:ae:65:4c:07:
         87:7e:f6:6f:26:89:fd:ad:08:2b:8e:cf:3a:19:f2:d3:88:02:
         d0:fd:c1:2b:a5:84:ef:40:ad:68:6f:a2:32:db:b7:b5:a0:1c:
         79:c6:07:c2:05:89:b1:d4:47:47:d6:ef:38:51:52:97:0a:1d:
         6a:c7:80:e9:a6:a3:16:00:32:74:c5:c6:c8:d9:d5:cc:dd:c6:
         63:dc:6b:a5:e7:4e:a1:b5:8f:96:ea:91:8d:86:e8:73:ea:08:
         a6:84:42:ba:85:d6:fb:dd:94:5c:7e:2e:1d:88:6f:dd:16:1d:
         12:d6:31:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:36:49 2026 by rpki-client