Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a0958dc4-cebc-39ab-bf01-8c18efaad21a.roa
File:                     a0958dc4-cebc-39ab-bf01-8c18efaad21a.roa (raw, json)
Hash identifier:          B1ICO/DTra3oVoM4XoUH7RW9y8cxIGHLGW5c9OP8+Gc=
Subject key identifier:   94:6E:52:86:B1:44:45:9E:A7:77:F5:06:38:BB:63:03:D7:9A:B0:42
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584F6C583970C1F85FB2741B775D
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a0958dc4-cebc-39ab-bf01-8c18efaad21a.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     9009
IP address blocks:        45.74.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:39:70:c1:f8:5f:b2:74:1b:77:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=dc0d77b6-4656-4523-9735-39e3dd80797c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:16:60:50:0a:d1:db:52:8b:47:a3:8c:27:34:
                    07:86:e6:2a:69:b0:83:78:c9:75:bd:65:99:a4:f4:
                    3f:7b:ad:29:9b:80:27:9f:69:01:77:55:e4:69:03:
                    21:b3:9b:72:af:46:f3:7e:c8:e8:2a:3c:32:57:5e:
                    c4:c3:10:31:6d:5c:61:11:50:28:77:5d:41:eb:ec:
                    38:91:65:cc:c3:6d:24:c5:84:82:ef:20:d6:d9:36:
                    20:7b:df:bc:cb:e7:94:c7:89:a0:19:99:e4:3b:5a:
                    84:8b:c1:85:12:5d:5a:63:1f:a9:16:aa:f8:48:c9:
                    a4:cf:70:ef:69:97:cc:58:80:b4:85:ac:53:fc:00:
                    ec:ab:c7:88:32:17:ac:03:cf:79:a1:19:b4:82:b2:
                    0c:6d:5d:6b:0b:4b:c6:00:66:08:ab:b4:04:66:3a:
                    cc:dc:da:a1:20:47:80:a9:8b:bc:05:53:3d:36:07:
                    e3:3d:b1:0b:bc:f1:1b:9d:c7:3c:70:ba:e9:b8:9c:
                    22:4b:e8:c9:5e:98:4b:15:10:e1:86:f3:5d:8e:38:
                    46:f2:0f:ee:7f:c3:35:c8:86:3f:2f:a4:bf:56:7a:
                    80:d7:e4:8e:68:bb:9e:62:44:24:c4:7c:d7:20:d4:
                    2b:98:7f:33:81:bb:e8:de:b5:5b:37:4e:99:2a:58:
                    04:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:6E:52:86:B1:44:45:9E:A7:77:F5:06:38:BB:63:03:D7:9A:B0:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a0958dc4-cebc-39ab-bf01-8c18efaad21a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:66:e5:c3:21:df:52:5e:b8:5d:2e:a4:e5:b3:26:02:74:cb:
         8f:c7:4b:5a:40:73:23:3f:cd:28:ce:c2:30:01:7f:4b:ad:67:
         23:34:38:9f:74:55:7d:35:71:d2:7f:fb:83:74:79:73:7f:c0:
         68:84:bf:3c:a6:71:ec:94:00:e7:91:c1:2d:a0:92:7d:28:a7:
         6b:b7:32:09:0b:ed:2b:e1:35:31:3a:d1:ff:82:d4:11:9c:06:
         7a:a7:4d:22:f4:66:1f:1b:4f:88:3a:3e:0b:0f:0b:c1:c7:40:
         cc:34:aa:18:2d:da:18:df:ce:d9:5c:55:c1:06:59:88:ec:7f:
         dd:21:31:cd:0b:34:56:91:10:93:09:58:27:5b:38:a5:2c:73:
         5b:6a:79:5e:4c:f4:05:3b:a5:ee:28:9d:d3:a9:cd:be:0e:6c:
         94:01:16:82:7b:ec:56:b4:82:53:38:79:37:21:9a:3d:0a:e1:
         b3:98:c3:3e:4b:99:7d:ee:74:8f:a3:dc:a5:20:4b:8c:ff:16:
         d4:47:2d:b4:26:3a:af:b8:e2:5d:93:cf:cc:b0:ab:77:d6:48:
         f2:08:9e:f9:9d:ce:02:39:16:df:d6:04:60:66:e1:e4:25:b7:
         65:db:b1:6a:76:01:ee:9a:5c:1b:f6:aa:b9:a8:d0:5a:b7:3f:
         12:b9:4d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:45:25 2026 by rpki-client