Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/fe08a71e-3879-3082-8d3e-fe89834b78f6.roa
File:                     fe08a71e-3879-3082-8d3e-fe89834b78f6.roa (raw, json)
Hash identifier:          YiWUj6KAlXfnaqwgo5EaDabBgLzlMZbFUUAq81wyV38=
Subject key identifier:   A6:1A:35:BF:26:7C:CD:6C:0A:A6:39:A5:0A:8C:40:A2:58:0E:E3:ED
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CC599C4A46A9CD429C780
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/fe08a71e-3879-3082-8d3e-fe89834b78f6.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     202015
IP address blocks:        45.38.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:c5:99:c4:a4:6a:9c:d4:29:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=4c7edc3f-6eb7-4d7d-8aab-6599001a3df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:35:24:b2:a4:33:de:f5:55:fb:2c:82:30:a7:
                    67:33:ee:66:26:6e:32:8f:0d:a3:1b:65:af:cc:87:
                    ae:68:96:98:a5:92:6a:6a:4e:e4:b5:79:fa:54:4f:
                    c6:84:08:67:ac:ea:1d:8a:bb:ad:92:35:c7:d8:25:
                    f2:5f:5f:64:c2:e8:af:c2:61:23:30:7d:24:22:cc:
                    f8:b0:f8:77:00:fb:df:58:ba:1c:c9:21:19:70:e4:
                    b1:57:01:79:8c:b9:73:77:ac:e7:47:b2:e8:f8:4b:
                    27:34:a2:ac:95:dc:24:99:9e:92:fb:06:30:db:2f:
                    49:b8:fb:93:fd:df:4b:57:99:7a:00:01:54:ab:b0:
                    88:ca:b9:b1:d7:ac:ab:35:a5:97:cc:ce:83:fb:55:
                    fc:11:9f:b6:89:96:ef:d5:ef:ca:69:2d:96:e1:7b:
                    41:d1:9c:c3:44:6b:5b:83:68:2d:00:5f:1d:3c:b8:
                    4b:a7:e9:e7:d9:ef:b0:85:e4:c1:47:0e:5d:92:2d:
                    c9:a7:dd:c7:73:59:de:47:b3:81:24:dc:63:ba:19:
                    a8:5b:cf:18:89:45:c2:4f:f8:d0:ce:0c:86:8f:e1:
                    97:19:96:ad:be:c0:9c:08:73:2a:2e:1b:02:87:a7:
                    60:7a:e6:69:b4:f3:37:7f:3c:c1:52:9d:c9:56:a4:
                    a8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:1A:35:BF:26:7C:CD:6C:0A:A6:39:A5:0A:8C:40:A2:58:0E:E3:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/fe08a71e-3879-3082-8d3e-fe89834b78f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:ab:06:ad:7f:6d:6a:d0:38:27:df:28:c6:ec:6b:7d:64:0f:
         22:f2:1c:06:49:f6:c4:19:b3:55:61:97:4e:02:10:61:d6:6d:
         27:d0:c3:b0:c4:44:e2:75:a0:12:56:20:21:17:11:ac:f4:bb:
         8f:1a:d9:e1:14:c9:a6:96:9d:e6:1a:20:b7:eb:dc:1e:ee:92:
         69:69:bc:0a:e0:08:46:ac:8a:8c:c7:e2:42:7d:b7:2a:31:d4:
         8c:4f:d0:ea:64:ac:a0:27:0f:56:6e:2b:e2:b8:fd:0b:b6:06:
         a9:ac:dd:f4:de:31:85:cf:1c:8f:00:31:45:01:a0:b0:2a:08:
         a2:9a:df:ac:54:55:fe:bc:a3:1e:eb:46:a3:3f:95:1b:e3:70:
         6b:34:77:b0:d2:b7:f2:4b:1e:55:a2:83:82:c9:1c:7b:1f:93:
         28:86:aa:81:4f:fc:0c:bf:cf:cd:d6:50:c3:8b:c2:d6:a9:24:
         38:bd:5a:e4:86:f9:58:05:00:47:74:56:8e:9d:27:e4:fa:df:
         9a:3d:05:49:f4:f9:0e:78:30:c4:a5:00:f1:e6:e1:b3:06:35:
         fe:ae:71:3f:3d:9e:67:cd:c5:86:48:8e:bd:fa:82:3f:b6:92:
         fa:2e:c8:ff:a0:24:44:7f:1f:0a:ac:8b:5f:50:3a:03:18:3f:
         c7:96:d8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:49:03 2026 by rpki-client