Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2cae34de-4baa-314c-9fad-5e2b1ee68f21.roa
File:                     2cae34de-4baa-314c-9fad-5e2b1ee68f21.roa (raw, json)
Hash identifier:          GXWiIivJsPBicyFw/0LMCsIRgIyqzirUZ7Eo34I6azU=
Subject key identifier:   3A:FB:29:9D:F3:7E:07:14:70:8E:AE:DA:41:96:D1:FE:BA:A6:D8:48
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CB452338B89FF0C8111C0
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2cae34de-4baa-314c-9fad-5e2b1ee68f21.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     18779
IP address blocks:        45.38.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:b4:52:33:8b:89:ff:0c:81:11:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=4d148758-3b84-4ef4-954a-f3eb29fd9871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:aa:82:59:e7:45:27:27:58:f0:ba:4d:75:90:
                    e6:95:52:4c:a2:1d:dd:68:20:ed:6a:66:71:66:3a:
                    8d:2c:5b:76:11:74:37:c1:06:5c:d0:c7:65:cd:a2:
                    f2:e9:e9:37:2a:04:51:fb:64:d3:60:0e:02:41:f1:
                    63:f7:40:a5:e3:39:34:15:79:65:59:c5:cf:62:6f:
                    38:ae:8c:27:82:98:fd:9c:db:7b:3b:ed:7d:74:56:
                    a7:81:10:b1:d8:32:df:2c:9c:4a:73:9e:99:4d:5b:
                    a8:64:f3:57:5a:9c:a7:07:c8:01:7c:51:1f:44:91:
                    13:b1:ea:a9:a9:73:00:16:ce:97:14:1e:49:4b:6e:
                    42:11:72:0e:e3:09:35:5d:40:84:36:c8:7d:a9:d2:
                    cc:0d:85:1e:40:cb:ba:72:0e:99:ee:0d:97:5b:c7:
                    b1:90:37:4c:09:e1:07:88:0a:ef:fa:98:73:20:cc:
                    c8:c8:37:72:51:43:87:16:91:32:04:ae:6c:0f:34:
                    30:e4:b0:7e:4f:0a:7e:59:2b:32:8a:78:1e:94:d5:
                    eb:68:ac:fb:2c:93:a7:55:a7:4f:40:e7:ed:5d:ec:
                    59:b8:d9:92:05:af:79:78:07:ec:60:f1:1e:03:ef:
                    b9:39:f1:b3:9a:72:24:2c:ec:62:8e:55:b7:6e:67:
                    0e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:FB:29:9D:F3:7E:07:14:70:8E:AE:DA:41:96:D1:FE:BA:A6:D8:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/2cae34de-4baa-314c-9fad-5e2b1ee68f21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:33:ea:0a:e5:80:9d:26:7c:87:e5:ed:da:d7:38:52:be:83:
         5f:17:65:02:ea:2f:28:13:47:b3:fe:73:4a:2a:14:e7:30:2e:
         dd:e3:05:63:35:76:fc:78:d2:d2:ca:99:6c:50:db:38:9c:cf:
         cd:06:3c:83:ca:7a:20:46:e3:5c:e9:11:1b:6c:d7:f4:e8:c7:
         fc:19:c3:20:f5:a9:72:c4:16:0c:16:ce:36:1b:04:e1:68:54:
         66:0f:32:19:2b:1a:0a:d1:f0:5c:16:3a:21:f9:84:13:90:ac:
         00:c8:76:fa:08:9a:11:dd:21:4e:73:01:f3:bc:1a:19:d0:34:
         d4:8e:85:6a:fd:ed:c3:25:37:b2:70:1d:46:ca:37:00:bd:3d:
         ce:fe:51:eb:73:d6:1d:ee:58:2f:ed:42:dc:fa:78:2b:03:dc:
         ab:e9:29:fe:3e:04:3b:e4:b6:7a:95:36:6b:19:9f:ff:5b:c9:
         c8:b6:b0:23:5d:a9:3e:13:cd:4f:9f:e5:6c:55:91:b7:3b:6c:
         ec:8b:5f:3a:0f:39:d6:29:91:24:86:37:24:dd:de:76:1d:79:
         29:89:40:4e:b2:98:4e:51:c2:01:58:f3:49:ab:be:5e:28:16:
         17:ad:03:08:1a:6b:7b:79:a2:ca:5c:73:09:ab:31:2c:a5:84:
         31:fc:48:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHLRSM4uJ/wyBEcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk
NGQxNDg3NTgtM2I4NC00ZWY0LTk1NGEtZjNlYjI5ZmQ5ODcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6qCWedFJydY8LpNdZDmlVJMoh3daCDtamZx
ZjqNLFt2EXQ3wQZc0MdlzaLy6ek3KgRR+2TTYA4CQfFj90Cl4zk0FXllWcXPYm84
rowngpj9nNt7O+19dFangRCx2DLfLJxKc56ZTVuoZPNXWpynB8gBfFEfRJETseqp
qXMAFs6XFB5JS25CEXIO4wk1XUCENsh9qdLMDYUeQMu6cg6Z7g2XW8exkDdMCeEH
iArv+phzIMzIyDdyUUOHFpEyBK5sDzQw5LB+Twp+WSsyingelNXraKz7LJOnVadP
QOftXexZuNmSBa95eAfsYPEeA++5OfGzmnIkLOxijlW3bmcOEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDr7KZ3zfgcUcI6u2kGW0f66pthIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvMmNhZTM0ZGUtNGJhYS0z
MTRjLTlmYWQtNWUyYjFlZTY4ZjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSY/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACEz6grlgJ0mfIfl7drXOFK+g18XZQLqLygTR7P+c0oqFOcwLt3jBWM1
dvx40tLKmWxQ2zicz80GPIPKeiBG41zpERts1/Tox/wZwyD1qXLEFgwWzjYbBOFo
VGYPMhkrGgrR8FwWOiH5hBOQrADIdvoImhHdIU5zAfO8GhnQNNSOhWr97cMlN7Jw
HUbKNwC9Pc7+Uetz1h3uWC/tQtz6eCsD3KvpKf4+BDvktnqVNmsZn/9byci2sCNd
qT4TzU+f5WxVkbc7bOyLXzoPOdYpkSSGNyTd3nYdeSmJQE6ymE5RwgFY80mrvl4o
FhetAwgaa3t5ospccwmrMSylhDH8SJo=
-----END CERTIFICATE-----
Generated at Wed Sep 23 04:40:44 2026 by rpki-client