Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/08cbdf89-44ff-3137-8fcf-d3e14cc0ea2f.roa
File:                     08cbdf89-44ff-3137-8fcf-d3e14cc0ea2f.roa (raw, json)
Hash identifier:          wQb2BG7Bl4XTG2DsN5ZS9BYoN/1aow1PJFzEZCjwmT8=
Subject key identifier:   89:81:E7:FA:34:FB:2A:C3:35:47:0D:82:14:F2:A6:D9:7A:90:ED:68
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584DBDCDA54CD4E1196DCBDDE680
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/08cbdf89-44ff-3137-8fcf-d3e14cc0ea2f.roa
Signing time:             Wed 06 May 2026 07:43:42 +0000
ROA not before:           Wed 06 May 2026 07:43:42 +0000
ROA not after:            Tue 04 Aug 2026 07:43:42 +0000
asID:                     199707
IP address blocks:        45.39.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:cd:a5:4c:d4:e1:19:6d:cb:dd:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: May  6 07:43:42 2026 GMT
            Not After : Aug  4 07:43:42 2026 GMT
        Subject: CN=5e4ecb93-9a91-447c-8972-3a2acb7f3c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:59:f9:d8:58:63:d2:81:b9:23:36:51:f6:10:
                    31:0d:5e:c7:e0:3c:49:81:5c:04:ba:9b:d1:ed:bf:
                    2a:f0:68:f2:79:e4:52:d0:d2:69:a0:c3:1f:b3:73:
                    03:3d:40:31:d3:09:af:04:d9:8c:f6:03:fc:f0:06:
                    55:5b:06:97:19:c6:f6:d9:59:e2:18:25:33:35:e6:
                    34:91:9f:53:b8:57:8a:96:78:a8:9a:86:b9:9a:ee:
                    36:b6:4b:e3:55:21:1d:b9:82:f6:b1:e8:39:a2:ac:
                    39:78:2c:8c:ae:fc:46:58:c3:c4:8c:82:98:7e:bd:
                    d3:fd:4d:b0:60:11:f8:b0:37:e1:6a:b4:f1:58:3f:
                    40:c7:e3:1d:fd:98:d4:c9:29:eb:e7:29:49:8d:14:
                    28:16:5d:a5:83:90:be:48:06:71:e5:6b:b7:81:56:
                    41:39:6f:7f:41:b1:fe:bd:cd:d7:c0:1f:e8:04:9c:
                    26:80:22:52:5e:88:05:78:c9:d9:bd:e0:d7:d5:da:
                    ba:be:ac:e0:3e:4e:14:c2:7d:31:cf:3a:b8:f0:80:
                    ba:70:11:4a:51:c2:d4:cd:9d:e7:e3:d4:cd:5c:1c:
                    50:36:9d:8f:a3:5a:97:da:0f:48:d1:be:62:d4:ab:
                    ca:af:e2:42:ea:40:1e:4d:0c:5b:a4:1b:d1:44:17:
                    1d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:81:E7:FA:34:FB:2A:C3:35:47:0D:82:14:F2:A6:D9:7A:90:ED:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/08cbdf89-44ff-3137-8fcf-d3e14cc0ea2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:f7:13:01:3e:64:16:3f:98:01:c0:e5:f1:ef:2c:df:eb:77:
         ef:90:93:2d:96:10:10:6b:44:bd:c2:fa:2b:7c:ac:7b:5d:4a:
         91:8d:5e:68:a0:71:c2:de:2a:b4:53:e8:fb:5b:89:ad:de:a3:
         53:d7:8f:9e:52:2e:30:68:6a:39:4d:1b:a6:a6:12:9c:73:6d:
         76:07:c8:8f:87:c5:7b:e9:22:ee:b2:d4:b2:3a:d9:e4:4f:e8:
         92:f2:65:c1:4d:35:66:fc:9b:cf:73:02:73:db:09:69:33:53:
         f2:d0:16:7b:89:70:62:96:95:08:e1:0f:14:35:f4:76:70:91:
         a6:01:2e:a9:d0:d0:6b:8e:14:b8:5e:e0:18:39:de:e3:c1:b3:
         2c:6e:bd:c0:14:e3:d7:4f:87:f0:b0:60:1a:43:53:69:d3:2b:
         0e:c5:0f:91:91:51:39:ef:e1:bf:1f:08:07:30:4e:e5:64:c9:
         93:5f:3e:45:c5:21:8d:75:bc:ac:1b:95:92:ff:f7:6a:a0:eb:
         82:13:ed:ec:4e:e2:1f:8a:eb:aa:29:2b:07:06:08:88:f8:bf:
         c3:86:79:e5:62:65:a6:23:c6:d6:bd:f0:4d:fc:eb:94:a4:3f:
         19:8f:2d:2b:3c:30:aa:9b:17:69:c4:ed:09:79:fd:72:8c:64:
         e3:1e:30:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:52:52 2026 by rpki-client