Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a72c5070-d600-3b24-8034-9605d7bfa0af.roa
File:                     a72c5070-d600-3b24-8034-9605d7bfa0af.roa (raw, json)
Hash identifier:          cC0wx+WYc0Zjc5BvSbssGhff6qcqGzFALNYAWXLhnnw=
Subject key identifier:   4A:2E:E9:27:44:E9:34:DE:92:D4:B0:9C:3F:E8:39:25:74:5E:5D:85
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CD8060535CAA96E85E780
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a72c5070-d600-3b24-8034-9605d7bfa0af.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     40676
IP address blocks:        45.38.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:d8:06:05:35:ca:a9:6e:85:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=a34d43d4-bc37-45a6-853c-42a69874720e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d5:8e:6d:47:c6:6f:a5:a6:c5:cb:07:d8:b4:
                    9b:99:36:4a:13:3a:7d:40:15:3e:2b:77:fd:be:1a:
                    05:10:42:03:e7:b1:02:e1:6e:9b:71:d4:99:5b:bc:
                    03:6b:6f:b4:18:f5:1a:65:cc:73:87:da:81:ee:2d:
                    1e:4a:44:97:79:7a:3f:ba:d2:b7:76:63:e7:70:50:
                    16:94:ba:bb:c0:67:46:3b:0e:13:85:b9:b3:90:50:
                    f6:c6:6c:28:18:e0:91:12:1c:bd:32:76:95:89:3a:
                    de:92:59:c8:84:97:b5:f9:ec:48:a5:cd:24:ee:29:
                    6c:01:a1:7a:ae:ae:15:f2:34:fd:5b:2b:b2:d8:02:
                    03:6c:b0:19:56:f6:ca:48:e3:22:b3:03:99:f4:e5:
                    f6:a0:b1:ca:6b:b3:34:40:f7:5f:46:a0:f6:4f:32:
                    a1:46:41:28:fe:29:f6:27:58:18:08:56:9a:0f:d7:
                    1f:f3:73:3f:e7:82:a5:3f:5d:50:46:fe:41:f3:52:
                    cd:36:20:9c:80:4f:5b:88:ce:5b:31:00:63:ea:2e:
                    e2:0b:6f:b1:2f:3b:21:90:ba:2d:5b:e1:a9:ff:53:
                    01:33:3b:d9:4e:e4:e8:ed:a3:6f:16:87:02:1c:c8:
                    c4:50:9e:7e:79:0b:f5:99:a0:fa:52:7f:bc:bd:cd:
                    f3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:2E:E9:27:44:E9:34:DE:92:D4:B0:9C:3F:E8:39:25:74:5E:5D:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/a72c5070-d600-3b24-8034-9605d7bfa0af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:f1:34:42:0c:0d:65:3d:e5:8a:ab:06:14:04:f8:8d:7a:87:
         51:25:0a:b8:a6:5c:14:d9:84:ec:e8:d4:8d:94:0b:34:10:f3:
         26:d7:b8:ad:29:51:e9:b5:b6:88:31:fe:db:b2:ca:75:7f:94:
         d1:5a:6a:88:fa:3d:c2:d3:c9:12:c2:f9:d1:ba:25:76:e2:cf:
         b6:3b:52:67:96:a2:44:90:96:92:68:e6:b6:c1:ce:9a:21:53:
         ff:69:7e:2e:cf:bd:e4:c6:b5:0b:6c:a6:ee:6c:08:2f:e5:f4:
         41:79:07:8d:71:70:59:51:f3:05:f8:b8:dd:37:22:b1:67:11:
         a6:84:9d:87:98:6a:ec:09:95:d2:d3:52:aa:0e:05:c5:f4:04:
         f4:1b:96:7d:37:63:bb:42:29:85:fa:c1:cc:cb:f6:46:6e:68:
         80:bd:26:0d:b4:81:d5:2e:ed:69:55:f2:22:a9:e2:a0:de:a6:
         78:e3:c4:cc:3b:84:d9:4d:b6:ef:3c:5a:94:dc:fc:92:f2:c5:
         17:21:69:fb:9b:f6:f8:7b:cc:58:61:54:ed:66:83:c9:07:87:
         97:61:64:49:f9:0e:da:ab:92:67:72:46:eb:da:49:e1:3b:df:
         d8:9e:a3:93:ca:da:61:a1:81:e7:85:75:f5:fc:81:06:f2:84:
         26:38:62:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHNgGBTXKqW6F54AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMzYjM4MjctNGI0NS00N2JhLThjNDAtMzJjZGU5OGRk
MDY4MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk
YTM0ZDQzZDQtYmMzNy00NWE2LTg1M2MtNDJhNjk4NzQ3MjBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdWObUfGb6WmxcsH2LSbmTZKEzp9QBU+K3f9
vhoFEEID57EC4W6bcdSZW7wDa2+0GPUaZcxzh9qB7i0eSkSXeXo/utK3dmPncFAW
lLq7wGdGOw4ThbmzkFD2xmwoGOCREhy9MnaViTreklnIhJe1+exIpc0k7ilsAaF6
rq4V8jT9Wyuy2AIDbLAZVvbKSOMiswOZ9OX2oLHKa7M0QPdfRqD2TzKhRkEo/in2
J1gYCFaaD9cf83M/54KlP11QRv5B81LNNiCcgE9biM5bMQBj6i7iC2+xLzshkLot
W+Gp/1MBMzvZTuTo7aNvFocCHMjEUJ5+eQv1maD6Un+8vc3ziwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEou6SdE6TTektSwnD/oOSV0Xl2FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNi
MzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNkZTk4ZGQwNjgvYTcyYzUwNzAtZDYwMC0z
YjI0LTgwMzQtOTYwNWQ3YmZhMGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzMzYjM4MjctNGI0NS00N2JhLThj
NDAtMzJjZGU5OGRkMDY4LzczM2IzODI3LTRiNDUtNDdiYS04YzQwLTMyY2RlOThk
ZDA2OC5jcmwwHwYDVR0jBBgwFoAU3TFn6p2eljb45xKY8+DO6EJ4mrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83MzNiMzgyNy00YjQ1LTQ3YmEtOGM0MC0zMmNk
ZTk4ZGQwNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSaAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFjxNEIMDWU95YqrBhQE+I16h1ElCrimXBTZhOzo1I2UCzQQ8ybXuK0p
Uem1togx/tuyynV/lNFaaoj6PcLTyRLC+dG6JXbiz7Y7UmeWokSQlpJo5rbBzpoh
U/9pfi7PveTGtQtspu5sCC/l9EF5B41xcFlR8wX4uN03IrFnEaaEnYeYauwJldLT
UqoOBcX0BPQbln03Y7tCKYX6wczL9kZuaIC9Jg20gdUu7WlV8iKp4qDepnjjxMw7
hNlNtu88WpTc/JLyxRchafub9vh7zFhhVO1mg8kHh5dhZEn5DtqrkmdyRuvaSeE7
39ieo5PK2mGhgeeFdfX8gQbyhCY4YgM=
-----END CERTIFICATE-----
Generated at Sat Sep 26 09:43:15 2026 by rpki-client