Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b00f0b24-759c-316c-80b2-6d90da298450.roa
File:                     b00f0b24-759c-316c-80b2-6d90da298450.roa (raw, json)
Hash identifier:          fAAwlBpmrZeCFmPuK8kkJJ+BImSdsiTBNWEyg+9zLyk=
Subject key identifier:   44:2A:61:B9:CA:1F:DE:21:38:32:7E:2A:81:88:7C:3C:60:A1:EC:BB
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CBE5D65336BE280157600
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b00f0b24-759c-316c-80b2-6d90da298450.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     211001
IP address blocks:        45.38.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:be:5d:65:33:6b:e2:80:15:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=e1af14ea-29df-42e8-85c7-027009aff989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:88:11:dd:e6:c8:09:a2:7a:7c:e9:ca:85:28:
                    9b:85:88:34:23:67:c7:7a:5a:8a:d6:58:ee:78:51:
                    df:34:9f:c5:fd:98:8f:c9:54:33:5a:dc:76:39:c9:
                    13:54:42:6a:3d:53:2d:3b:db:61:9d:fd:70:e7:06:
                    14:39:1b:b2:8b:3e:8d:d1:dd:ac:85:db:60:38:d8:
                    11:5f:2f:07:21:7a:6d:67:7c:ac:79:7d:c5:1a:d8:
                    63:dd:22:2e:ed:f6:88:30:00:20:12:c0:cf:12:22:
                    7d:bf:4f:bd:52:07:63:21:0d:82:48:bf:1a:fc:ca:
                    87:64:ec:1b:5a:e3:8e:90:73:cd:01:c6:3d:94:b8:
                    e1:b8:a9:f7:29:81:4e:5f:11:ee:2f:17:9f:8a:2d:
                    d1:72:d6:7f:83:f0:b6:43:1c:f1:9d:03:58:76:55:
                    1b:dd:66:df:ff:9b:3e:54:b6:8a:72:1f:5f:5b:ca:
                    34:ff:d3:c7:66:84:a9:49:5a:74:0f:2d:ed:9e:3d:
                    dd:1c:86:d7:38:dc:7f:85:fc:53:6e:61:14:05:8c:
                    7f:fa:a7:76:03:29:85:75:4f:21:19:02:0f:29:7c:
                    fe:02:25:cf:50:e4:ce:6a:b4:39:5c:9a:9b:f8:a3:
                    b4:97:e0:3c:da:12:65:dc:00:9a:43:40:c8:af:c7:
                    2f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:2A:61:B9:CA:1F:DE:21:38:32:7E:2A:81:88:7C:3C:60:A1:EC:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/b00f0b24-759c-316c-80b2-6d90da298450.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:5e:bc:16:bf:93:59:ff:75:3a:32:cf:ee:ec:12:8b:d2:da:
         d0:fb:b9:21:0f:78:ae:21:6a:43:95:89:78:e9:04:5b:31:f7:
         c4:79:b9:11:c5:7c:90:25:37:48:25:ef:e2:17:c2:07:47:66:
         27:0f:8c:94:1c:0f:37:a4:b8:ae:d9:b0:1c:d0:2e:e7:dd:73:
         da:10:bf:7a:e5:11:ef:c8:2a:1f:2a:9c:06:ff:ea:57:fe:ed:
         f3:88:78:ce:78:18:bd:24:59:50:cb:0f:da:1e:f5:6a:79:d7:
         a9:36:77:e1:be:7a:09:7a:06:4f:94:bd:92:14:7c:94:cb:b8:
         47:ed:a7:61:3c:11:27:a4:9f:2c:ad:65:0b:b1:a6:38:7b:8a:
         e9:5b:ad:fe:79:c6:8f:a6:55:c2:f1:c1:51:5f:0d:64:5b:0d:
         bb:e3:f5:90:d1:fe:a0:cf:8e:6a:ab:c4:67:1b:09:6e:5e:e4:
         28:ac:2b:65:04:3c:6e:18:25:4c:2e:3a:68:8e:21:5c:cc:e8:
         85:f5:7d:48:1c:6d:de:9b:77:05:7d:a8:95:a9:86:e2:7d:91:
         f5:67:e2:03:07:ff:e5:d0:e1:f3:41:05:9c:4b:7c:fc:e1:62:
         ca:38:db:d1:86:47:e1:30:40:61:25:9b:2b:95:2b:d3:ed:bb:
         b8:c8:26:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 18:06:43 2026 by rpki-client