Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2079abd0-e10f-3fc9-8958-7a6d84f2bc35.roa
File:                     2079abd0-e10f-3fc9-8958-7a6d84f2bc35.roa (raw, json)
Hash identifier:          o7B4q8lHOAgFMR2GN+m625cVR9E7DEGDcIdgiFy2YWE=
Subject key identifier:   5D:EE:09:5C:5C:4B:40:02:E2:55:BF:BE:DA:8A:4C:1F:77:04:34:F1
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584B51F534CE09C2EEEDE2C7FB00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2079abd0-e10f-3fc9-8958-7a6d84f2bc35.roa
Signing time:             Fri 26 Sep 2025 07:02:14 +0000
ROA not before:           Fri 26 Sep 2025 07:02:14 +0000
ROA not after:            Thu 25 Dec 2025 08:02:14 +0000
asID:                     9009
IP address blocks:        45.74.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:f5:34:ce:09:c2:ee:ed:e2:c7:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Sep 26 07:02:14 2025 GMT
            Not After : Dec 25 08:02:14 2025 GMT
        Subject: CN=71afc4ff-b347-4910-8633-c1b3edc3e278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:71:69:fd:e2:dd:f2:ae:74:87:cb:15:fd:16:
                    2d:d9:23:cc:cb:56:10:ea:ae:fc:f3:5b:fe:ad:bc:
                    e3:bd:87:41:c9:35:0a:b0:95:37:33:d0:60:78:37:
                    2b:2b:be:60:14:58:28:43:ac:b7:61:e6:68:cf:ee:
                    44:88:98:f1:25:b7:31:48:d7:a9:8d:93:cd:f4:a3:
                    cc:ca:10:97:cd:57:b6:bd:9b:28:18:74:76:fd:29:
                    89:b8:e8:dd:a4:f7:61:55:67:37:7e:f4:db:4a:64:
                    21:2b:dc:15:e9:e0:67:22:68:9b:1f:66:9a:ba:6a:
                    07:89:e4:a3:9f:e1:cb:77:8c:e0:bd:36:fd:01:65:
                    d9:d7:bc:b4:23:29:93:29:49:ab:e3:db:32:1b:19:
                    28:a3:50:97:f4:d8:3b:1a:55:61:79:cf:5f:f4:83:
                    7d:86:5d:ea:a2:d0:77:6f:ab:25:87:77:7b:e7:37:
                    dd:7c:74:a7:09:72:46:a0:1d:b0:af:16:e4:bb:d3:
                    80:49:ec:f7:4e:62:bb:dc:9e:7d:e2:d7:a7:58:54:
                    10:3d:ce:20:16:0e:c7:cf:bf:91:5b:24:9d:d2:dc:
                    f3:94:04:1c:7f:34:35:02:40:49:79:9e:72:53:a7:
                    89:87:cc:ee:7b:f0:f3:b8:8f:7b:e6:0a:15:38:9e:
                    48:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:EE:09:5C:5C:4B:40:02:E2:55:BF:BE:DA:8A:4C:1F:77:04:34:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2079abd0-e10f-3fc9-8958-7a6d84f2bc35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:0c:9c:44:2c:38:35:f1:87:9f:80:87:ac:23:a5:02:0d:54:
         cb:93:20:35:51:bf:9a:90:db:7d:94:f0:11:ef:13:81:2c:a1:
         f3:92:d3:1c:5f:32:36:e6:e9:a8:82:2f:17:70:8d:43:56:98:
         ed:d9:91:c6:4b:ec:aa:43:a4:f9:e3:6b:38:b4:18:db:24:06:
         24:50:e3:10:1d:c6:55:48:37:2b:6f:c6:35:a6:44:7e:8e:15:
         46:84:1d:31:48:40:66:26:0f:d8:74:c9:bc:44:26:c5:62:e7:
         e9:e7:49:b5:a6:9d:bd:4c:7c:55:cb:bf:22:a9:7b:aa:74:1d:
         82:6a:ca:8a:a5:84:93:7b:e7:3f:c3:c4:e7:78:0a:e1:12:58:
         61:ad:03:a9:d2:e8:d8:8f:00:b9:57:1a:df:f7:c9:42:3b:60:
         7a:61:0e:46:37:c9:8f:57:0b:33:21:6d:cc:5d:55:7d:6f:2e:
         ea:aa:16:b7:91:06:2d:8e:7d:9a:ba:a9:b3:d2:ba:06:be:25:
         23:48:87:b9:80:6c:a2:2a:85:4e:35:ae:78:0d:1e:f5:c8:4b:
         ad:08:d5:09:29:b0:48:0e:ab:be:03:c8:dd:a0:28:f8:81:5e:
         12:c7:b3:a6:54:07:f2:08:66:91:21:2d:70:6c:44:fa:81:bb:
         ae:1a:81:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 07:15:30 2025 by rpki-client