Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/57c76e72-9804-3b6b-bdea-b214a075e69e.roa
File:                     57c76e72-9804-3b6b-bdea-b214a075e69e.roa (raw, json)
Hash identifier:          OVmgAi4FucsXxSuXenm3J27n2eVTIdEFYrlzKLa2N2w=
Subject key identifier:   9B:5D:20:1C:48:2B:8A:DD:67:B4:C0:3A:24:88:9B:BF:19:38:20:77
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584F90A32B4026714353C1E05400
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/57c76e72-9804-3b6b-bdea-b214a075e69e.roa
Signing time:             Tue 20 Oct 2026 13:00:13 +0000
ROA not before:           Tue 20 Oct 2026 13:00:13 +0000
ROA not after:            Mon 18 Jan 2027 14:00:13 +0000
asID:                     142019
IP address blocks:        45.74.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:90:a3:2b:40:26:71:43:53:c1:e0:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Oct 20 13:00:13 2026 GMT
            Not After : Jan 18 14:00:13 2027 GMT
        Subject: CN=0e4bd8c8-9d8b-417e-a85b-0c3501de46fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d4:c7:f7:8d:5d:a9:fd:4e:7a:50:43:4f:9e:
                    98:6c:75:63:e9:72:2f:7c:fc:7c:4e:ba:77:88:1c:
                    16:6e:f7:7e:ee:dd:84:73:f2:e9:cc:e6:db:f9:5e:
                    22:30:1d:b2:e1:19:6a:fd:2a:80:92:b8:0a:15:35:
                    87:56:bc:c7:ae:5b:16:5e:2f:77:31:00:34:95:0a:
                    d8:d9:ef:af:9b:ed:a7:2c:9e:e1:65:02:60:55:79:
                    4c:83:13:95:be:5f:a9:40:1d:95:88:3f:6e:41:b2:
                    b8:ff:8b:3e:0d:19:d4:20:56:d2:12:cc:c1:1c:65:
                    9a:39:33:6d:96:6c:8e:5d:c0:46:5f:23:85:f7:10:
                    0c:9c:dc:4e:e6:7b:f3:f4:f7:a7:98:b5:15:18:7d:
                    63:c9:3f:ca:78:69:35:32:94:2f:54:05:2b:b2:6f:
                    34:25:df:f1:e1:e5:d2:32:6b:cf:d1:57:ba:16:71:
                    70:a3:c7:27:4b:08:3c:fa:56:95:61:da:03:c7:de:
                    93:55:e1:ab:47:de:db:28:a1:d2:e4:3b:39:91:59:
                    a0:84:62:b4:15:6a:06:34:1b:f8:a5:9d:bd:27:f4:
                    de:32:b6:32:18:29:9b:55:65:15:60:27:1e:16:2c:
                    14:b8:c7:06:e1:5d:14:4e:1a:54:7b:0a:1d:52:11:
                    35:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:5D:20:1C:48:2B:8A:DD:67:B4:C0:3A:24:88:9B:BF:19:38:20:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/57c76e72-9804-3b6b-bdea-b214a075e69e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:4e:ee:d5:f1:bb:1e:93:38:5e:69:49:57:35:4a:02:12:69:
         e9:10:86:cc:a2:e7:72:25:18:14:bb:99:5b:50:df:e7:af:04:
         a0:81:98:46:e9:46:01:29:55:c8:43:7a:8b:d9:ee:33:28:74:
         ca:e1:3f:34:cc:a4:3c:0d:9b:41:ee:2b:c8:71:73:75:9f:cf:
         5b:8e:72:3f:7f:ff:5e:76:16:a3:bc:f1:9c:27:0a:f5:b1:a0:
         98:ca:f0:e4:f5:d7:1d:48:bf:06:d2:d1:90:d0:25:f6:56:71:
         55:50:55:05:94:90:b6:94:f6:36:41:f2:b6:b0:6c:49:cc:99:
         a0:93:ba:09:fc:9a:fe:8f:09:33:37:ae:02:aa:8f:12:66:4f:
         23:84:cb:56:15:d1:72:36:53:d6:d0:88:dc:93:68:7c:74:8b:
         20:14:50:f4:f1:08:f0:5d:86:24:97:62:1f:2a:dc:77:7b:11:
         53:2e:3e:1f:e5:63:7c:16:f1:5b:75:1a:4a:12:db:33:f5:59:
         f3:a1:4a:2c:91:c2:dd:47:15:a2:eb:3c:1b:b7:25:0d:8a:72:
         a9:fd:1e:7f:e0:6d:b9:01:c2:be:fb:fc:e5:ee:ae:29:02:92:
         4d:e1:27:29:3b:23:90:89:5d:81:6d:bf:7e:74:5c:bd:25:fb:
         8e:a3:dc:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:44:49 2026 by rpki-client