Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/e5c41b92-fca2-3a27-96d6-1d87f9ade8eb.roa
File:                     e5c41b92-fca2-3a27-96d6-1d87f9ade8eb.roa (raw, json)
Hash identifier:          Mkgz7aFx+744ODXHbzssX/Jbsrd/d5nHYxLBm0MYovA=
Subject key identifier:   B7:73:92:83:D3:BD:DD:56:DD:4F:31:62:10:C5:3A:C7:6A:16:E9:85
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584EF01CB9ED2B8347FD9A9C9D00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/e5c41b92-fca2-3a27-96d6-1d87f9ade8eb.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     3356
IP address blocks:        45.39.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:b9:ed:2b:83:47:fd:9a:9c:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=76fd0753-1da1-4ba8-97a6-b4766dae6bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:86:1b:c4:cd:60:34:45:bb:d7:6f:9c:32:c0:
                    8d:17:b0:f8:66:a0:29:50:5b:1f:81:d3:b2:b1:ab:
                    93:1a:76:17:ad:43:1f:f0:5a:fa:af:e8:32:3f:bd:
                    41:2e:e6:ac:10:f4:e8:3a:9b:92:dc:7a:fe:92:da:
                    9d:54:50:d0:7a:4e:b8:ba:75:48:29:c3:6f:33:1a:
                    b1:ab:7a:fb:f0:75:e2:04:30:d0:da:44:3d:6d:a6:
                    45:3f:1a:16:97:42:5b:95:d2:58:e5:4f:e7:c2:a3:
                    c9:23:0b:71:e8:27:68:53:d2:30:c2:b6:79:6d:2d:
                    b2:20:aa:fc:5a:40:25:cf:0f:db:e9:2c:99:46:bc:
                    c6:23:5b:c7:b1:8f:5a:a6:c3:8c:dc:95:ac:fb:75:
                    6f:e8:4e:a2:ef:aa:aa:ce:91:db:eb:d0:e7:8a:a0:
                    1b:ca:e1:69:56:92:0d:bf:81:4e:df:8d:3b:72:19:
                    6c:3a:84:d7:de:4e:f3:77:ba:99:2f:bf:96:1e:b3:
                    4c:91:98:a2:45:ea:dc:3d:25:91:c6:7c:70:f1:87:
                    25:e0:99:54:a9:87:89:ce:14:f4:f0:eb:c5:7c:72:
                    44:3e:41:e0:20:69:83:48:1c:46:66:7c:fd:1d:d8:
                    58:ea:89:3c:b7:45:c8:4e:70:6f:ca:f1:82:12:50:
                    01:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:73:92:83:D3:BD:DD:56:DD:4F:31:62:10:C5:3A:C7:6A:16:E9:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/e5c41b92-fca2-3a27-96d6-1d87f9ade8eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:cc:09:32:8b:03:77:fd:11:ca:82:10:db:d1:a8:58:13:ba:
         3b:a3:c8:93:f4:d0:bf:66:4e:17:9d:77:95:8f:4f:7d:01:5b:
         6c:3d:e5:bd:e9:3d:a8:09:49:bf:cd:80:a5:9e:e1:db:b7:25:
         4e:6d:fe:67:b8:f2:39:04:ee:b2:7a:db:b4:14:70:66:d2:77:
         4b:42:fe:b3:4d:3f:42:92:23:7d:2c:ff:8e:27:63:5d:49:c3:
         f9:3c:db:87:4d:37:03:c5:ea:18:e9:be:cb:a3:c9:68:8f:5d:
         ec:15:e5:bf:79:86:1e:18:c6:63:3c:a8:6e:d8:40:10:d9:48:
         22:ce:66:0b:98:7a:f8:50:93:48:83:fa:9f:21:52:30:93:0d:
         16:fc:08:f3:af:27:d7:71:62:11:0b:c8:3c:74:78:e7:1f:c9:
         61:37:f5:3d:21:b1:0e:94:e0:10:40:27:5f:12:af:38:82:5f:
         b9:dd:7c:ef:ec:0a:a7:33:08:e1:2e:2b:23:96:4b:98:8d:8f:
         a4:6e:53:5a:4e:e2:42:67:7f:4b:a6:91:32:c7:d8:9b:3c:62:
         16:37:28:81:69:d4:5b:d9:da:79:f3:30:10:22:98:1f:87:8e:
         d6:2b:92:c4:cc:7f:78:d0:7d:84:64:e9:b3:85:2a:30:cc:7c:
         57:7a:6e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:44:08 2026 by rpki-client