Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/6eda2c3e-906b-3814-9278-00c5e967c0e9.roa
File:                     6eda2c3e-906b-3814-9278-00c5e967c0e9.roa (raw, json)
Hash identifier:          MdhTdlJenOZ4E8g37PcDMtpR+McxoUt1YLQ2YyHdP9Q=
Subject key identifier:   32:BD:C6:EB:F3:75:AC:A8:05:DF:70:0B:6C:CA:3D:7B:6A:46:99:1D
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CB397296828D563400A60
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/6eda2c3e-906b-3814-9278-00c5e967c0e9.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     12083
IP address blocks:        45.39.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:b3:97:29:68:28:d5:63:40:0a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=5f54c4ad-3047-4cbf-9811-edcac554e2ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f1:85:fd:8d:d2:c9:fa:2e:75:b5:ac:56:87:
                    34:27:c2:13:aa:28:e2:67:6e:21:b6:3a:4f:dc:21:
                    da:02:73:25:81:6c:d4:e9:42:71:78:de:d1:b8:d5:
                    93:0e:ba:33:b5:27:5a:d0:89:fa:01:11:4e:ed:44:
                    5d:c5:69:ff:78:8d:3c:31:3f:e2:e7:7a:ef:96:b2:
                    d6:57:c1:bd:05:d7:fd:10:7f:4e:18:45:10:5b:6a:
                    83:ef:80:c3:f0:42:05:9c:9d:c0:d4:c1:fc:ac:f9:
                    a5:ed:1e:1e:d6:71:4d:97:c6:24:f1:43:19:89:07:
                    d1:0c:38:5e:40:73:8d:6b:c7:1e:c9:30:22:99:0f:
                    f8:83:34:a1:01:33:f4:71:06:dd:08:f7:a9:bc:4c:
                    e5:ad:62:38:5d:68:52:a3:98:ab:6f:a1:0f:be:43:
                    32:15:5e:65:c6:7c:56:39:ed:cd:05:df:fe:67:a2:
                    55:d8:19:90:27:54:fc:39:3a:67:3d:0e:0a:97:34:
                    9c:be:5b:5c:65:1c:d9:5e:ac:14:ad:51:3b:b6:d8:
                    c5:23:65:25:77:be:dd:d8:ba:21:b2:78:f5:58:dd:
                    ce:83:5c:3f:62:09:fe:53:ec:80:4a:d0:e3:83:60:
                    c5:1f:f4:51:0c:d2:b7:0a:a2:21:85:b4:7c:09:6d:
                    7e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:BD:C6:EB:F3:75:AC:A8:05:DF:70:0B:6C:CA:3D:7B:6A:46:99:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/6eda2c3e-906b-3814-9278-00c5e967c0e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:e0:98:7f:ab:90:3e:ab:86:16:ed:34:bc:36:0c:b4:8e:c8:
         00:1a:5a:55:10:41:ed:fc:d6:c9:54:8c:9b:7e:da:cb:b4:08:
         f5:6f:b8:10:57:94:c3:cc:4d:f3:7a:af:e5:a7:4e:a8:e0:9a:
         f9:3c:d1:1f:06:b2:14:86:41:b5:98:cc:25:48:f0:5d:d6:5c:
         aa:8f:e2:3a:52:9a:b1:b2:82:ba:4c:07:ee:da:ff:68:f3:ce:
         05:f1:e2:40:bc:a7:6e:15:13:59:7d:77:fd:1c:49:9d:af:b2:
         12:74:fc:c1:54:b7:1c:59:e5:52:16:36:43:f7:9e:15:d1:65:
         23:19:f3:3b:39:b9:0c:76:1a:eb:af:9e:25:d9:db:5d:dc:48:
         75:e8:53:3e:3d:79:fa:2e:f0:d4:b4:cd:aa:f3:e5:48:65:dc:
         e2:b3:a9:77:c7:29:4d:eb:6b:28:cb:6d:3a:e5:61:78:cf:fd:
         f1:74:2e:76:8a:09:35:e4:10:0a:2d:30:a8:14:f4:4c:68:44:
         29:67:1f:72:19:46:4c:38:b7:a1:fb:b1:af:f3:f5:64:4f:f7:
         2d:67:8a:d9:7b:10:7e:46:30:40:71:e6:b3:7b:b5:9e:c2:b1:
         6c:20:ee:5c:55:df:df:0d:3e:8f:77:2c:1a:93:ac:b3:58:b0:
         34:2a:3a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:53:22 2026 by rpki-client