Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/7ae41e52-77d7-3378-8afc-7d61f7ac25e8.roa
File:                     7ae41e52-77d7-3378-8afc-7d61f7ac25e8.roa (raw, json)
Hash identifier:          lllucmcr4vYUqq/F3XJzAPYZqwbpXEI1HUMZHEfkoNk=
Subject key identifier:   04:C9:A0:E8:CD:F7:B1:05:42:4B:28:40:AD:E3:9A:8D:2C:64:6D:1E
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CD746A7E371C494C90940
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/7ae41e52-77d7-3378-8afc-7d61f7ac25e8.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     23511
IP address blocks:        45.38.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:d7:46:a7:e3:71:c4:94:c9:09:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=b1bbcc95-a76c-45df-9c41-c882af7e76c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:42:26:b4:a8:23:d7:22:e8:23:b3:94:d7:b8:
                    26:f7:2e:96:db:6f:c0:3f:7e:c0:d4:41:a7:81:04:
                    f9:a6:49:5e:97:ef:21:2a:2c:07:b1:48:f7:cd:8a:
                    47:73:c0:52:cb:13:17:ee:16:70:30:5e:eb:8b:35:
                    3f:32:f0:46:f0:f3:7c:d2:fc:cb:a9:7c:8f:14:ef:
                    7f:c6:f8:cf:37:89:0a:93:6d:28:47:a1:cc:45:ef:
                    0e:32:6c:05:c6:e1:e8:0b:aa:60:9f:34:e6:ab:cd:
                    56:39:4b:69:8e:6b:33:7d:69:e4:c8:ab:71:4a:65:
                    33:0a:91:d0:ef:c5:63:d8:4f:35:d7:33:62:08:6b:
                    91:4a:ef:e9:94:c1:aa:ea:87:0e:1e:7e:d6:06:ad:
                    10:d6:f1:74:29:ae:53:1d:53:11:4e:0d:84:94:6f:
                    dc:2f:de:83:d5:b8:44:f5:2b:d0:67:bf:7c:6e:d3:
                    d5:40:68:a7:64:93:40:4a:38:d6:02:bf:e4:43:b1:
                    1e:cc:cf:87:55:63:2f:29:f1:ad:f8:18:b7:8a:af:
                    7b:87:2b:18:1c:c8:7d:74:04:38:42:a2:bf:9a:47:
                    52:02:84:9c:55:3c:34:77:e3:82:8d:bb:1f:e0:aa:
                    f3:e9:f9:3b:d6:24:d9:34:98:60:7a:4a:03:4e:2d:
                    81:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C9:A0:E8:CD:F7:B1:05:42:4B:28:40:AD:E3:9A:8D:2C:64:6D:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/7ae41e52-77d7-3378-8afc-7d61f7ac25e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:f6:41:61:3f:a1:e0:c3:d2:07:97:c2:dd:77:71:eb:85:43:
         8d:b9:c3:12:14:20:54:bc:c3:c6:15:5a:a6:10:3b:53:b3:9d:
         49:4a:6f:78:4a:18:d5:8b:88:83:48:3b:26:56:2b:2a:ff:b9:
         dc:e9:e1:f9:c7:b3:eb:a2:a0:7f:91:e5:08:83:62:7b:92:f3:
         be:50:40:2d:43:15:49:0d:28:77:ea:e7:7c:01:88:32:a9:66:
         db:80:27:15:1b:26:4d:3b:da:c0:1e:7f:f6:87:f8:d5:a2:e7:
         a7:4c:f1:d4:f9:ee:90:16:b6:36:ac:7e:0c:e9:47:31:99:3b:
         4a:f2:73:82:04:f8:63:04:0f:e3:c2:2d:d9:8c:b4:75:fe:cb:
         2b:9d:24:68:f0:e9:b1:f0:06:4c:81:e2:72:03:bd:d5:05:d1:
         72:48:f5:a5:0e:68:8e:83:8e:4f:d4:fe:27:b8:91:22:c8:79:
         42:04:c2:24:6e:5e:eb:6b:89:4c:39:70:85:53:b5:65:84:9b:
         63:b2:f5:b2:a3:b9:5a:cd:98:57:b8:eb:ef:b4:81:a2:79:3e:
         0e:25:09:e8:b4:bf:ff:49:cb:7a:50:d6:92:e1:8b:da:5e:61:
         e4:88:fa:f9:93:0d:b6:1d:05:2f:d1:92:2e:c6:d2:7d:8c:2a:
         91:60:37:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 05:03:43 2026 by rpki-client