Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/df297805-5731-3d5b-a20e-5fd77c0611c3.roa
File:                     df297805-5731-3d5b-a20e-5fd77c0611c3.roa (raw, json)
Hash identifier:          6OLuvLw89JnRO72yOlUC+vIoW3kPf8QhqhtIEuan7v8=
Subject key identifier:   2F:EE:51:41:01:47:EC:F6:49:A0:88:A2:E3:D2:2B:B5:C7:27:EF:9D
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584A8B0B62888A4672F9D9C65780
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/df297805-5731-3d5b-a20e-5fd77c0611c3.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     9009
IP address blocks:        45.74.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:62:88:8a:46:72:f9:d9:c6:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=124b3e23-f002-4303-8914-12c01a8ebc46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:cb:75:21:1d:05:ef:f5:dc:c5:dc:aa:c2:d4:
                    d1:14:65:cd:c0:88:51:15:da:86:82:9a:96:cb:d2:
                    63:70:ef:5e:6a:b7:08:bb:8f:02:b4:86:34:93:d2:
                    45:ea:4f:7e:80:d8:ad:65:0f:5d:77:11:d6:41:47:
                    b9:f8:e6:99:01:41:57:9e:9e:97:11:43:8d:ec:53:
                    df:37:b7:a4:e8:c3:11:fe:57:fb:81:65:d2:3d:2a:
                    37:0b:db:3f:91:c1:aa:9a:5d:f6:ca:b4:73:ce:29:
                    89:b2:22:b3:fe:e5:dd:31:d4:84:ee:f3:e7:1d:d3:
                    20:d0:a5:2f:41:a3:b9:60:70:3b:3f:fd:fe:22:b7:
                    fa:ca:a0:77:62:59:1b:fc:73:35:31:81:00:7d:5c:
                    92:02:3d:ef:33:d7:81:b6:ea:63:eb:0b:6a:2b:3c:
                    57:a0:d0:55:f5:6e:d1:e1:c6:52:d3:a5:88:3e:2c:
                    80:bf:bb:50:4b:1f:92:fd:bd:0b:8b:c3:c1:cd:f9:
                    55:cb:5f:17:15:2c:ee:ce:d4:3a:49:2b:d1:5b:95:
                    ef:8f:68:ca:d9:dd:05:d4:6c:93:ab:90:70:79:27:
                    99:e9:75:89:4c:f8:e6:44:74:c7:75:b9:18:64:4c:
                    73:4f:8c:c3:1e:5f:bf:b8:14:9f:52:4b:52:42:df:
                    2f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:EE:51:41:01:47:EC:F6:49:A0:88:A2:E3:D2:2B:B5:C7:27:EF:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/df297805-5731-3d5b-a20e-5fd77c0611c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:ce:30:30:68:b2:3a:65:97:ba:c8:23:26:3e:9d:fd:e0:cd:
         b4:cc:68:25:e7:a5:4b:3f:5f:ef:80:f2:c9:6c:6d:0d:53:c8:
         95:f6:c9:04:9e:6b:41:ab:85:40:65:29:d2:48:b8:3e:58:ce:
         60:b5:fe:0a:62:b7:1f:41:b1:8a:72:69:56:c5:9d:f2:b8:3e:
         b3:96:2f:52:f5:e1:e1:ac:e3:db:7f:07:cb:9d:ba:57:aa:d8:
         35:c4:8a:a5:87:81:db:fd:54:3a:37:77:cd:84:f1:78:da:ce:
         d4:54:bf:a7:26:39:8e:6d:46:93:8a:fb:62:a6:73:90:c2:59:
         f9:0b:e9:98:ae:45:77:74:73:c7:3b:2f:88:1a:b2:16:de:2a:
         d5:d3:d4:0e:cb:8e:68:9e:91:39:9f:17:5f:5f:5c:58:5b:a9:
         34:a2:80:d6:5f:d2:fc:2f:13:08:aa:02:c9:b9:bf:00:2b:78:
         3d:48:74:48:7f:b4:26:04:8e:aa:47:46:ae:04:63:91:a2:de:
         3e:51:8b:52:f0:50:86:81:b6:34:47:1c:1f:e2:e6:e1:ba:92:
         a0:e3:b7:43:af:d9:a1:95:ea:79:df:dc:34:9e:a4:69:9e:0c:
         a5:3b:e9:2a:d7:a3:d2:84:27:af:7f:e4:e4:65:52:42:f1:8f:
         72:9a:14:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:19:02 2025 by rpki-client