Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/3866e951-3438-341d-9030-ae32465d95fc.roa
File:                     3866e951-3438-341d-9030-ae32465d95fc.roa (raw, json)
Hash identifier:          uRag18txOwOkxaJG1iT0+XpUkTCI7ILOVYet1Vxj/KM=
Subject key identifier:   42:E7:40:27:50:10:DD:EE:70:BE:C6:C3:C2:FB:57:C5:C5:8A:A7:AD
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CCBC81FE475BD3FA8D170
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/3866e951-3438-341d-9030-ae32465d95fc.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     8881
IP address blocks:        45.39.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:cb:c8:1f:e4:75:bd:3f:a8:d1:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=e788f292-4cdc-45df-adae-5fd5965d1f95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:92:93:08:35:2a:66:2b:65:bb:c4:98:88:01:
                    c0:5e:58:e1:44:33:17:f2:5f:cf:14:1e:1f:4e:cb:
                    76:29:d2:50:8b:a6:16:54:99:12:83:bc:11:fe:47:
                    bc:f5:1c:e9:73:b7:48:fc:95:ab:f0:8f:f7:b4:83:
                    32:85:78:25:27:79:80:8e:ae:5c:24:20:4c:d8:56:
                    fa:e5:48:aa:1f:40:3b:75:95:32:a5:10:d2:c1:0a:
                    2c:1e:20:27:72:31:a2:f5:25:3d:f8:0a:53:ed:45:
                    c3:af:c7:bb:d5:49:08:99:cc:ab:0a:77:9c:4c:69:
                    db:94:31:d1:6b:99:d4:b4:d3:f4:4a:cd:5a:1e:d5:
                    f3:2e:d7:a8:39:43:14:ab:87:fb:54:19:7a:2b:7a:
                    03:3a:c6:2d:16:4f:0f:f5:a1:ad:07:9d:31:72:d8:
                    78:92:cd:1d:cc:e8:a4:3f:5b:cc:d9:8a:68:93:33:
                    ce:ee:98:5e:b1:cb:4c:10:db:b1:05:b0:fd:25:b7:
                    2f:56:9a:df:66:a2:95:28:86:65:f4:d3:2b:2d:b1:
                    78:ed:49:3a:17:d3:76:0f:27:60:39:64:7d:13:28:
                    0e:0e:51:bb:eb:b8:02:6e:db:d2:d9:9a:2f:8b:09:
                    73:4b:51:d9:d4:01:c1:cc:23:f3:a6:53:a0:e1:0a:
                    b6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E7:40:27:50:10:DD:EE:70:BE:C6:C3:C2:FB:57:C5:C5:8A:A7:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/3866e951-3438-341d-9030-ae32465d95fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:de:d9:fb:62:c2:48:21:e7:dd:2b:17:83:1c:52:ad:d5:54:
         1a:57:97:21:f6:c0:13:67:7f:62:30:1f:1a:c8:24:17:aa:7e:
         bf:0b:d6:eb:b4:2f:d3:0f:16:62:f7:40:9c:8e:42:ba:df:13:
         5f:c2:f5:68:fc:08:b9:0f:63:cd:e4:b8:1e:51:03:c3:d9:92:
         4c:8a:82:3f:43:a6:e1:9f:60:97:bb:8a:cf:26:e5:dc:9a:b6:
         59:92:af:ea:fc:df:ed:e4:d7:5b:a0:a2:a4:22:e8:5c:cf:a2:
         4b:b3:97:7e:ea:b8:5e:98:4a:d3:32:c6:b1:f7:8d:e8:a3:26:
         2c:2f:68:6b:c0:34:bc:49:fc:4c:a2:73:5c:7b:5d:6f:01:8a:
         57:66:0d:d7:f1:f9:3f:15:37:ec:f0:d5:a7:2a:7a:3d:3a:71:
         b9:6a:5d:05:77:fc:99:55:3e:cb:97:75:af:1b:62:48:41:6b:
         71:80:c5:80:c9:7e:c3:51:26:56:c2:4a:ed:ce:c3:0f:20:da:
         2e:aa:6f:a7:7f:16:eb:50:1d:ca:6d:5a:ae:85:36:12:f2:69:
         a1:0e:e6:fc:98:cb:e4:e9:3f:5f:1e:07:1d:ad:c2:ed:34:49:
         2a:39:a0:32:ba:32:b9:e2:8e:42:fd:80:5a:b9:e3:f1:0f:7e:
         7b:36:01:63
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHMvIH+R1vT+o0XAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk
ZTc4OGYyOTItNGNkYy00NWRmLWFkYWUtNWZkNTk2NWQxZjk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5KTCDUqZitlu8SYiAHAXljhRDMX8l/PFB4f
Tst2KdJQi6YWVJkSg7wR/ke89Rzpc7dI/JWr8I/3tIMyhXglJ3mAjq5cJCBM2Fb6
5UiqH0A7dZUypRDSwQosHiAncjGi9SU9+ApT7UXDr8e71UkImcyrCnecTGnblDHR
a5nUtNP0Ss1aHtXzLteoOUMUq4f7VBl6K3oDOsYtFk8P9aGtB50xcth4ks0dzOik
P1vM2YpokzPO7phesctMENuxBbD9JbcvVprfZqKVKIZl9NMrLbF47Uk6F9N2Dydg
OWR9EygODlG767gCbtvS2ZoviwlzS1HZ1AHBzCPzplOg4Qq28wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFELnQCdQEN3ucL7Gw8L7V8XFiqetMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvMzg2NmU5NTEtMzQzOC0z
NDFkLTkwMzAtYWUzMjQ2NWQ5NWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSedMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAETe2ftiwkgh590rF4McUq3VVBpXlyH2wBNnf2IwHxrIJBeqfr8L1uu0
L9MPFmL3QJyOQrrfE1/C9Wj8CLkPY83kuB5RA8PZkkyKgj9DpuGfYJe7is8m5dya
tlmSr+r83+3k11ugoqQi6FzPokuzl37quF6YStMyxrH3jeijJiwvaGvANLxJ/Eyi
c1x7XW8BildmDdfx+T8VN+zw1acqej06cblqXQV3/JlVPsuXda8bYkhBa3GAxYDJ
fsNRJlbCSu3Oww8g2i6qb6d/FutQHcptWq6FNhLyaaEO5vyYy+TpP18eBx2twu00
SSo5oDK6MrnijkL9gFq54/EPfns2AWM=
-----END CERTIFICATE-----
Generated at Sun Oct 4 07:08:39 2026 by rpki-client