Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/61bef471-d06d-3e1d-877c-228cb7d8461b.roa
File:                     61bef471-d06d-3e1d-877c-228cb7d8461b.roa (raw, json)
Hash identifier:          1UkxODsnRiZfV39XKr8ogx9AdLOj77SsBXzPSyGCNR0=
Subject key identifier:   D2:5C:20:A2:C1:13:89:AA:BB:C4:F2:44:F4:66:87:90:E0:B4:FA:13
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CC2D6DC2C28E261069900
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/61bef471-d06d-3e1d-877c-228cb7d8461b.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     22340
IP address blocks:        45.39.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:c2:d6:dc:2c:28:e2:61:06:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=5cc9f308-88fe-47bf-9226-0b6dd5828bc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5c:1c:cc:5d:4b:a1:e9:f8:07:72:db:3e:08:
                    f2:b8:65:67:ed:a7:56:eb:4a:97:64:24:e6:66:6c:
                    29:90:fe:65:08:17:7a:5a:a7:68:fa:7a:fa:92:23:
                    b0:55:d7:38:ec:06:62:8f:04:0c:60:33:6e:99:4d:
                    bc:b9:05:ad:1f:b6:8f:8c:12:08:aa:5a:b3:d4:cd:
                    20:cd:b4:a3:8d:6d:f2:cb:96:ae:20:5a:1a:3b:56:
                    82:8a:a5:cb:62:6b:11:2a:9d:fb:49:bb:55:c2:23:
                    1b:f5:10:80:ed:a5:6b:4e:9d:bb:0b:c0:5b:db:89:
                    91:2d:83:c2:ff:81:86:55:67:30:b5:da:39:e3:b5:
                    42:ab:e4:a7:13:4f:1e:df:19:24:16:39:4e:09:d8:
                    70:1b:4f:25:7b:09:d4:45:eb:0a:a6:2b:cf:c0:52:
                    67:12:01:de:d5:e0:7c:d7:ca:52:6a:d5:4d:83:1c:
                    1c:10:74:60:98:92:2b:66:6c:dd:91:6a:17:e0:ec:
                    03:dd:48:9c:7b:c9:55:fd:ca:99:ae:49:23:88:61:
                    b2:9b:62:68:18:2b:b6:ce:12:3f:4b:13:d5:66:ef:
                    70:95:a7:c5:3f:e0:83:3c:2e:b2:b9:ce:95:49:71:
                    aa:af:b9:76:01:85:67:cf:3e:54:ba:0c:8f:e1:17:
                    25:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:5C:20:A2:C1:13:89:AA:BB:C4:F2:44:F4:66:87:90:E0:B4:FA:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/61bef471-d06d-3e1d-877c-228cb7d8461b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:41:58:fa:f9:b7:35:e5:1c:b3:33:dd:2f:e3:01:15:90:6c:
         e1:b2:55:a5:27:23:55:74:74:33:24:eb:aa:36:e5:09:e6:36:
         0b:31:d6:e7:ad:50:1a:5b:d3:c8:ff:9b:8a:3a:d3:c3:69:3c:
         dd:46:29:53:31:39:a2:78:98:bf:e5:8a:df:75:ca:26:49:8b:
         12:2a:6e:6e:f5:7f:02:10:ff:e1:ca:56:7a:4f:07:41:ab:a4:
         94:f4:eb:a9:da:8a:93:19:23:db:81:a2:9a:c3:76:38:f4:e1:
         62:ce:6f:df:79:b5:de:4d:c0:a1:ab:9e:33:7a:21:e0:69:76:
         e9:b2:83:e9:42:83:6a:e1:58:c6:92:59:93:27:fc:ad:1e:1a:
         12:c1:9a:5a:40:0c:94:a0:23:14:26:87:c3:3f:c5:22:53:9e:
         c9:a3:ff:a6:eb:77:df:0a:ae:5a:b0:8b:8f:72:b2:53:26:fe:
         da:6b:fe:c6:3e:38:f8:a7:74:61:86:df:dc:88:c2:5c:ee:59:
         6f:e3:8d:87:9a:b3:b6:81:98:78:75:fc:42:2a:da:b8:f5:a9:
         16:f2:fa:e8:92:c5:6f:51:45:97:8f:ad:17:ba:2f:06:d2:94:
         21:b4:e7:fd:a1:8b:1e:34:c2:43:80:53:0f:7d:3a:ee:0b:77:
         7e:5b:ed:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:19:46 2026 by rpki-client