Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9208aae6-7add-30f9-9eb2-ccfe34fb0896.roa
File:                     9208aae6-7add-30f9-9eb2-ccfe34fb0896.roa (raw, json)
Hash identifier:          SrO3HEx/cEIKaL6ukVcEyY4lWdm7ZMra1sfxqLMwD80=
Subject key identifier:   9A:C9:67:13:5A:8F:51:26:C9:F1:3F:E7:07:D1:20:4A:67:D3:37:B2
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584F7A4D9F0C3DDC2479E5C1EC00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9208aae6-7add-30f9-9eb2-ccfe34fb0896.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     9009
IP address blocks:        45.74.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4d:9f:0c:3d:dc:24:79:e5:c1:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=b47cd123-868a-451f-8677-0643c9ec60b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:04:54:f7:0c:90:3d:8a:41:ac:69:2d:76:92:
                    3f:47:b4:e3:9e:20:e3:cb:a9:b1:d7:04:3e:b6:66:
                    d7:4a:e4:b5:1f:72:ca:40:7b:41:71:18:65:60:ae:
                    ba:39:d1:01:7d:0f:d9:17:72:22:d9:81:31:e4:67:
                    de:82:c2:ed:0a:91:cb:e1:3f:7a:97:90:cc:2c:ec:
                    33:43:07:5a:84:5b:cc:b1:e1:52:d6:cf:fb:a8:3e:
                    ea:21:b7:ce:61:e9:0e:1c:a3:88:56:50:fd:44:03:
                    10:fa:c9:01:e8:67:9c:2b:9d:dc:4a:5d:e1:6d:2b:
                    56:88:b7:c1:8d:63:36:be:de:fd:71:74:79:2d:82:
                    27:c5:9a:d8:72:43:c1:d1:d3:7c:df:2b:af:67:ed:
                    c0:e1:b8:cd:a5:23:f5:25:ca:db:16:ef:bb:99:fc:
                    d3:e0:f1:1d:eb:d1:40:d1:79:21:45:4e:e9:c1:bd:
                    56:e9:76:9c:71:d4:07:f6:4d:61:95:5a:29:a1:d0:
                    1d:94:b1:75:e6:b3:2c:fe:ef:4e:71:d9:a4:3e:83:
                    e3:95:dd:78:0d:41:42:1e:d5:53:31:5c:a4:c2:2c:
                    55:3e:d1:41:ed:52:3d:ea:5e:f8:8c:a6:17:ab:53:
                    53:34:0f:50:85:19:23:9b:8a:d2:14:77:f7:37:2d:
                    33:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C9:67:13:5A:8F:51:26:C9:F1:3F:E7:07:D1:20:4A:67:D3:37:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9208aae6-7add-30f9-9eb2-ccfe34fb0896.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:f3:10:96:e2:1e:4a:93:8a:78:f4:e0:b7:ca:3b:1c:f5:fa:
         a3:fa:b2:d7:a5:d3:41:18:e2:6e:f2:77:74:55:dc:40:5a:0b:
         d7:47:23:a1:1f:0f:45:3d:4c:36:89:29:46:90:8e:ce:92:74:
         ff:24:0c:14:d4:47:f0:70:ee:1e:9d:7e:ed:22:b6:9e:94:e7:
         f4:53:73:63:40:8a:c0:03:ce:0b:7d:24:73:4b:8d:48:da:7a:
         14:65:cc:a4:be:67:2d:6f:be:aa:83:5b:23:9e:75:1c:98:0b:
         b8:e4:2c:7f:86:fe:ff:ea:4b:96:50:4d:00:01:ae:2d:4a:7e:
         61:18:34:28:44:d9:09:90:0f:77:4e:f8:c6:2d:46:94:45:2e:
         cc:38:8f:24:41:6b:a6:15:e9:0e:e5:46:12:4f:6b:d0:2a:f1:
         71:c6:3a:1a:28:18:9d:93:2b:b4:0c:8d:8f:ea:e5:d8:b1:f1:
         cd:25:d7:f0:50:66:48:4e:b9:0f:75:24:97:18:80:b5:7b:9a:
         2d:64:35:29:a5:d9:d4:6c:c3:bf:4f:69:5f:bb:bf:fe:87:08:
         24:8e:22:56:d2:38:8f:0b:a1:b5:08:d6:a5:72:05:bc:12:7d:
         44:f7:9b:32:1e:11:1a:69:26:41:26:a4:ea:9e:51:8a:5a:77:
         48:71:da:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:27:33 2026 by rpki-client