Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/7c1077b3-4f06-341d-9060-b9f8ced9f408.roa
File:                     7c1077b3-4f06-341d-9060-b9f8ced9f408.roa (raw, json)
Hash identifier:          RkOFRbhzPli+8StmoEGs47nDEuC17bNy/p6iZLw7UKE=
Subject key identifier:   7C:69:24:AE:60:95:4F:62:91:8B:7F:D3:EF:30:97:AC:BB:AB:4D:2C
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CCEE1C1531CDE3AC66C58
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/7c1077b3-4f06-341d-9060-b9f8ced9f408.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     62160
IP address blocks:        45.38.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:ce:e1:c1:53:1c:de:3a:c6:6c:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=a5aa7b72-007a-4d0f-a8db-ef4c7fc274ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:17:2d:66:f7:39:a7:2a:2a:89:f5:34:c2:1d:
                    9c:23:db:82:7b:a9:46:ec:4a:c9:f3:08:67:ca:8e:
                    07:88:3b:3c:fd:9b:fe:04:fa:67:0d:d1:8f:31:09:
                    8d:d5:09:12:a7:2f:72:9c:46:4b:b8:e4:c4:40:81:
                    28:c9:92:e2:02:2e:eb:99:9a:62:6d:45:86:eb:10:
                    3c:c3:4c:42:b0:e9:88:51:02:2a:70:61:52:89:9d:
                    e8:64:d7:9d:2d:61:a4:ae:19:73:a5:9b:63:b1:14:
                    51:85:0d:c2:d1:56:54:64:5a:90:f3:d7:e1:cd:fc:
                    b2:33:f6:d8:40:fd:ba:3e:04:41:7a:ab:35:61:cf:
                    b3:8b:53:09:8c:44:4f:f0:9c:97:e3:c0:11:cf:2e:
                    ba:d8:3d:8e:99:f4:56:34:f0:2a:8a:34:0a:f1:51:
                    68:a2:b9:30:a2:7e:b0:29:0c:a7:32:95:b0:f1:82:
                    99:d6:66:b1:37:c7:bd:bb:c1:9a:21:4c:63:b2:ca:
                    54:2d:65:5a:c0:0e:b7:f9:ee:90:7d:5f:38:7d:8f:
                    6b:2f:ec:78:53:76:50:e6:ce:f6:14:c4:94:ed:d3:
                    6d:75:3d:e1:4d:84:fc:15:34:f9:b0:87:0e:54:35:
                    68:e0:4e:c2:0b:61:7f:f5:e2:6b:b1:ad:2b:b7:e5:
                    13:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:69:24:AE:60:95:4F:62:91:8B:7F:D3:EF:30:97:AC:BB:AB:4D:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/7c1077b3-4f06-341d-9060-b9f8ced9f408.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:df:74:02:57:f5:47:9a:3f:8b:e8:37:5c:03:35:35:c3:fc:
         9f:31:b4:32:41:65:d9:c8:54:f3:b6:96:8a:7b:89:a7:93:26:
         8b:8b:b5:9c:db:b0:a6:c5:13:af:20:29:7c:81:c7:52:7f:5e:
         3f:79:e2:f7:ed:da:1e:31:f6:18:b5:7c:59:33:cc:3a:46:0e:
         f2:98:fe:4a:d7:4c:90:aa:e4:79:80:9f:7e:f1:28:fa:9b:cc:
         cc:77:15:8d:ac:29:1e:4d:78:21:5c:fc:70:7a:cd:64:2d:c6:
         b7:25:10:6b:31:60:36:03:6d:ca:ca:32:5e:08:98:cc:61:3c:
         bd:36:e5:94:ae:b1:b2:57:9c:76:63:6f:2c:01:3c:13:71:f2:
         b3:12:c1:58:e3:16:2e:3e:86:a1:4b:cc:f6:fb:65:41:dc:fe:
         48:1c:ff:7e:a7:03:1a:87:fd:6f:b5:97:eb:75:1d:62:e6:47:
         20:c5:19:d0:80:52:ca:47:1a:72:93:fb:ec:84:48:70:22:25:
         fb:73:f0:58:88:71:cb:f0:83:4e:2d:a1:67:3e:20:b4:dd:5b:
         85:36:b8:03:f7:e9:dd:7c:0f:36:6e:69:12:9e:df:c2:78:d0:
         82:bf:81:33:fe:f5:71:1e:17:93:15:6a:48:8a:a1:57:f6:97:
         88:04:a6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:45:39 2026 by rpki-client