Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/114ca078-bde5-362e-8e06-b59907911791.roa
File:                     114ca078-bde5-362e-8e06-b59907911791.roa (raw, json)
Hash identifier:          +EzNd2pbE6lFi9vicaC8Fb6JsW6XDnaFCYd/IIUO/8g=
Subject key identifier:   FC:97:14:25:F6:3C:2C:C3:75:B9:19:15:46:ED:D1:ED:AB:96:6A:C1
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584B36CCD5FB2E037A41A304EF00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/114ca078-bde5-362e-8e06-b59907911791.roa
Signing time:             Tue 16 Sep 2025 13:34:04 +0000
ROA not before:           Tue 16 Sep 2025 13:34:04 +0000
ROA not after:            Mon 15 Dec 2025 14:34:04 +0000
asID:                     9009
IP address blocks:        45.74.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:36:cc:d5:fb:2e:03:7a:41:a3:04:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Sep 16 13:34:04 2025 GMT
            Not After : Dec 15 14:34:04 2025 GMT
        Subject: CN=d6d2d324-9ae2-4c3e-a624-4cf9484202fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:58:df:20:aa:86:11:8d:39:94:2e:4e:5a:66:
                    7d:28:34:bd:23:37:2d:09:4d:0b:d0:94:fa:ba:58:
                    29:1a:ef:e1:06:15:fc:f0:40:2b:68:26:22:90:01:
                    5b:57:76:d8:58:22:43:1f:2e:6f:6a:0c:b7:7a:a2:
                    3c:75:58:86:19:6c:8c:07:55:e6:4a:b7:4d:c9:e2:
                    1e:c3:2a:a0:f5:ce:59:86:bd:1f:03:bb:6b:1c:44:
                    45:00:90:e3:a8:10:7c:54:03:7d:d3:22:31:f4:d2:
                    24:ae:5b:ed:34:af:5b:d0:57:97:75:2b:cf:3a:b3:
                    e2:e3:d8:4b:28:71:07:11:64:a0:a6:ed:18:1c:4b:
                    56:0c:84:c8:3c:1e:5c:41:1c:67:ae:bd:f8:73:8f:
                    ac:55:06:9b:e4:78:54:a8:ff:ed:ae:d4:36:3b:a9:
                    b4:be:3f:de:c0:71:9a:13:66:d7:ae:93:d0:03:55:
                    c6:32:58:b5:e3:61:f1:e5:ed:0e:0c:2e:8a:94:a5:
                    06:f1:d0:0e:9f:c7:52:49:04:4f:97:47:d6:b1:ec:
                    cf:ad:62:7e:a6:eb:99:d9:c2:fd:76:fe:c1:7c:fd:
                    c3:65:33:56:30:ea:70:be:77:43:5d:48:eb:bb:01:
                    f5:fd:21:7e:69:8e:d8:3e:69:b8:e2:8c:ba:a4:58:
                    dd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:97:14:25:F6:3C:2C:C3:75:B9:19:15:46:ED:D1:ED:AB:96:6A:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/114ca078-bde5-362e-8e06-b59907911791.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:e2:ad:43:07:c8:ef:11:a4:52:b2:4c:aa:7a:18:9a:9f:3a:
         af:47:92:df:41:cf:32:3e:d9:5e:bf:44:c8:66:ec:6d:73:36:
         df:ac:ee:e7:3b:e4:f0:37:c6:62:b9:0a:52:ac:11:5d:e3:a8:
         f1:d3:f7:ce:ad:08:ef:71:43:4c:d7:a2:f1:d4:0a:fc:66:d0:
         2b:43:d0:c7:38:8f:3e:4f:54:a9:ae:c4:3c:d8:d7:77:c6:42:
         c6:4e:3b:4c:2a:f6:12:45:be:f3:5d:02:59:c4:b6:00:3a:05:
         77:88:d6:16:10:d2:b7:bc:d8:34:ae:e7:6f:aa:ed:60:bc:2b:
         36:1a:3d:70:cb:3b:df:a9:0f:cf:09:5b:9b:13:5e:84:a1:66:
         60:f6:9c:d1:20:2b:1a:6b:81:f1:c6:b7:3a:85:e0:8d:1b:f7:
         37:04:0e:bb:a2:1a:90:1c:aa:98:0c:7d:25:ce:40:95:a3:db:
         48:41:50:d3:b6:77:a1:dc:9c:9b:fd:7a:4d:35:cf:f3:e1:48:
         8b:51:f2:d6:e1:78:5d:b5:62:f2:0b:bb:a6:fc:57:8f:d7:85:
         db:b5:e8:7f:bc:05:42:f6:25:9e:7e:4f:6a:62:07:e9:36:8a:
         20:e9:b0:5b:18:aa:aa:2a:a2:a4:35:df:d5:ac:4d:f5:41:92:
         b7:28:bb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 07:08:04 2025 by rpki-client