Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/70d14262-2ab7-3a98-9687-275d27febea9.roa
File:                     70d14262-2ab7-3a98-9687-275d27febea9.roa (raw, json)
Hash identifier:          RrTB2WviJHsfOzmrVtPC3m0F1YfGrUvao4HpO3i4Nus=
Subject key identifier:   E4:34:72:EE:4C:EA:2B:DA:37:B9:D9:77:3F:C7:06:97:5B:D7:12:A9
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584DC63EB5BAA503AE65AB1CD240
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/70d14262-2ab7-3a98-9687-275d27febea9.roa
Signing time:             Sat 09 May 2026 08:17:59 +0000
ROA not before:           Sat 09 May 2026 08:17:59 +0000
ROA not after:            Fri 07 Aug 2026 08:17:59 +0000
asID:                     402215
IP address blocks:        45.39.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c6:3e:b5:ba:a5:03:ae:65:ab:1c:d2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: May  9 08:17:59 2026 GMT
            Not After : Aug  7 08:17:59 2026 GMT
        Subject: CN=9438149a-d1c5-483a-a425-d58f70f08a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:05:51:b1:d3:0c:f6:de:61:27:8d:c1:80:c9:
                    cf:84:d2:e7:8b:2f:27:c3:0a:1e:2f:bd:35:f3:d1:
                    9e:05:06:36:19:9c:58:e5:cc:6d:ea:b9:73:e8:75:
                    43:5d:3a:b7:f1:34:73:51:de:99:d8:18:c9:aa:8f:
                    9d:78:f7:30:ec:5d:f0:ea:a2:3b:cc:0f:78:30:f4:
                    ef:d1:66:ab:ec:a0:27:68:28:3e:43:7f:5c:0e:c7:
                    50:a5:e9:0c:63:a1:96:ba:98:23:d8:5a:af:b4:21:
                    d2:78:af:c8:56:32:7b:d9:7e:74:21:58:5a:90:25:
                    ca:5c:60:e7:74:9e:16:4a:b6:27:7c:b8:51:dd:e2:
                    07:0f:e4:0b:d4:4f:b9:54:87:1f:47:f9:a8:fd:df:
                    ef:1a:16:f8:b4:ac:3b:b2:c4:7d:f8:62:55:7a:f5:
                    1f:1f:68:d3:14:fd:c2:b0:e0:13:6b:3d:4f:39:d5:
                    15:14:fa:1f:f7:59:32:0d:a4:77:ef:48:f9:e3:a6:
                    5c:04:a9:80:59:87:fc:b7:6b:43:fe:3b:fb:4c:db:
                    86:da:a0:ff:ac:06:d8:cb:77:c1:2d:ca:3a:4c:3b:
                    45:2b:ca:b7:2b:97:e8:3f:68:4d:7b:14:a6:41:75:
                    48:bb:e0:86:e8:1a:66:4c:38:89:f1:d9:1d:ba:be:
                    f4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:34:72:EE:4C:EA:2B:DA:37:B9:D9:77:3F:C7:06:97:5B:D7:12:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/70d14262-2ab7-3a98-9687-275d27febea9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:6f:cf:a5:a1:08:71:db:08:e0:f5:2f:83:0f:3f:62:38:41:
         bf:7c:d8:cf:94:d2:31:9c:90:67:40:80:b2:1f:7e:29:b2:e0:
         a5:2c:3f:ad:ff:a3:38:c0:e1:c3:2b:4f:a0:bc:1c:b4:da:73:
         f4:54:f4:01:b4:c6:05:89:4a:fa:f3:58:20:02:f9:0b:32:25:
         e0:56:15:de:26:02:26:e2:eb:5b:45:0f:21:77:19:99:87:7c:
         e3:f1:f7:42:16:3b:bf:f1:49:7a:d9:a3:40:10:14:dd:91:3b:
         a3:4d:2e:0a:d7:0e:82:d9:52:11:0c:aa:46:1c:f1:f5:48:f5:
         79:90:c0:6a:8b:af:a9:de:25:08:f8:11:d3:5e:7e:41:33:d3:
         14:e1:29:36:fe:9c:a0:d6:d8:a9:0b:e2:89:2a:82:95:97:8a:
         9e:0a:23:d3:94:3d:18:4a:77:83:65:33:45:8c:f9:23:02:38:
         50:d5:77:fa:34:18:ed:3c:3a:0a:1c:3a:a8:70:ce:f8:6e:4b:
         e0:6f:77:cd:24:94:b7:92:c3:7e:0a:4f:73:79:1f:50:0b:b5:
         5d:48:8f:3a:fe:7a:71:5c:95:14:b5:18:ae:80:25:e0:a9:13:
         eb:5a:57:03:ad:6f:d5:14:2a:98:b7:6e:b3:5f:8e:9d:4f:79:
         6a:ab:67:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3GPrW6pQOuZasc0kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDUwOTA4MTc1OVoXDTI2MDgwNzA4MTc1OVowLzEtMCsGA1UEAxMk
OTQzODE0OWEtZDFjNS00ODNhLWE0MjUtZDU4ZjcwZjA4YTE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgVRsdMM9t5hJ43BgMnPhNLniy8nwwoeL701
89GeBQY2GZxY5cxt6rlz6HVDXTq38TRzUd6Z2BjJqo+dePcw7F3w6qI7zA94MPTv
0War7KAnaCg+Q39cDsdQpekMY6GWupgj2FqvtCHSeK/IVjJ72X50IVhakCXKXGDn
dJ4WSrYnfLhR3eIHD+QL1E+5VIcfR/mo/d/vGhb4tKw7ssR9+GJVevUfH2jTFP3C
sOATaz1POdUVFPof91kyDaR370j546ZcBKmAWYf8t2tD/jv7TNuG2qD/rAbYy3fB
Lco6TDtFK8q3K5foP2hNexSmQXVIu+CG6BpmTDiJ8dkdur70SQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOQ0cu5M6ivaN7nZdz/HBpdb1xKpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvNzBkMTQyNjItMmFiNy0z
YTk4LTk2ODctMjc1ZDI3ZmViZWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSdGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHJvz6WhCHHbCOD1L4MPP2I4Qb982M+U0jGckGdAgLIffimy4KUsP63/
ozjA4cMrT6C8HLTac/RU9AG0xgWJSvrzWCAC+QsyJeBWFd4mAibi61tFDyF3GZmH
fOPx90IWO7/xSXrZo0AQFN2RO6NNLgrXDoLZUhEMqkYc8fVI9XmQwGqLr6neJQj4
EdNefkEz0xThKTb+nKDW2KkL4okqgpWXip4KI9OUPRhKd4NlM0WM+SMCOFDVd/o0
GO08OgocOqhwzvhuS+Bvd80klLeSw34KT3N5H1ALtV1Ijzr+enFclRS1GK6AJeCp
E+taVwOtb9UUKpi3brNfjp1PeWqrZ7g=
-----END CERTIFICATE-----
Generated at Wed May 13 12:39:44 2026 by rpki-client