Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2c3122e2-3aa1-371f-a046-467ae3f60b0f.roa
File:                     2c3122e2-3aa1-371f-a046-467ae3f60b0f.roa (raw, json)
Hash identifier:          TE1QEyc7xzvRhFa4DZ69EsTgCPIenoSBEvSvN2xTqBw=
Subject key identifier:   71:5C:09:41:9D:E1:F6:07:1C:27:C6:B1:9A:D4:76:48:33:8D:C6:73
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584EFE1223CCE87B34FC810AA0F0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2c3122e2-3aa1-371f-a046-467ae3f60b0f.roa
Signing time:             Sat 29 Aug 2026 01:00:12 +0000
ROA not before:           Sat 29 Aug 2026 01:00:12 +0000
ROA not after:            Fri 27 Nov 2026 02:00:12 +0000
asID:                     9009
IP address blocks:        45.74.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:12:23:cc:e8:7b:34:fc:81:0a:a0:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Aug 29 01:00:12 2026 GMT
            Not After : Nov 27 02:00:12 2026 GMT
        Subject: CN=238ca3a8-3eeb-48be-972d-2faaf67d23ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2c:77:4f:c5:b2:d0:83:6d:09:dc:53:7b:10:
                    ce:b8:ca:15:19:c9:38:28:d5:d1:40:9e:94:e4:7f:
                    ae:83:da:73:43:d0:53:fc:e9:e6:a1:dd:ca:4f:ad:
                    95:e4:75:4e:a6:72:8b:fa:3b:be:54:34:03:84:a5:
                    58:0b:69:56:1a:6d:3d:dc:b6:51:b2:05:2a:ce:dc:
                    b4:76:31:c0:36:93:c8:f3:98:05:54:cb:f3:f9:26:
                    eb:63:7e:30:d8:02:35:37:88:4e:0f:60:dd:7b:21:
                    f5:36:1f:cd:8b:26:50:54:53:f9:0e:7d:09:c1:f3:
                    b3:ca:2e:1a:36:11:15:a2:27:16:29:d8:95:4f:c6:
                    1a:02:c6:3d:aa:8e:32:01:62:62:18:19:91:67:89:
                    20:b7:d5:dd:56:2b:99:be:c0:0a:ea:08:9f:c7:8b:
                    94:f5:46:5b:21:7f:cb:08:ae:2f:e3:18:70:49:1f:
                    b3:d1:0d:97:85:63:33:59:e4:3a:5e:3c:81:38:91:
                    fa:c2:83:71:f5:cb:03:b9:aa:1f:3c:90:9b:2c:36:
                    1a:85:51:4b:58:c6:70:b2:06:87:52:fe:a3:ee:39:
                    74:16:91:5f:b6:bd:b9:78:e6:5b:6c:86:b1:73:4e:
                    86:66:f6:b7:e8:cd:e6:57:b1:7a:c0:f3:72:1c:cf:
                    85:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:5C:09:41:9D:E1:F6:07:1C:27:C6:B1:9A:D4:76:48:33:8D:C6:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2c3122e2-3aa1-371f-a046-467ae3f60b0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:5b:a9:45:d8:b4:a0:44:a8:66:aa:5d:32:07:0a:c1:34:c3:
         12:1a:e2:89:c9:e2:f0:0c:c2:66:37:75:c1:f1:93:26:18:6e:
         c7:bf:b1:d7:c4:4d:e1:87:7e:67:ae:f5:e9:07:4a:f9:ee:1b:
         44:37:d5:95:ca:02:7d:f6:f2:dd:53:2b:f7:e9:f2:6e:ea:ba:
         54:5b:04:cd:49:32:f6:9d:da:07:0b:49:e2:86:2f:41:b3:f5:
         be:d2:f6:a7:57:80:e1:bf:74:7f:a0:b6:4f:e8:cf:12:38:10:
         75:7c:14:07:ae:80:24:d1:c4:e1:4a:19:3a:fa:d9:b9:c7:ab:
         1a:b6:4c:3d:e3:5d:2b:1b:73:41:1a:86:10:cf:6d:72:57:c9:
         29:8a:fd:21:8f:42:ca:62:50:e6:fd:97:43:f8:d4:31:49:d4:
         6c:d0:68:c7:68:2f:64:7b:4d:b3:d2:96:75:94:e6:b8:0d:ce:
         6f:45:7c:2a:2e:24:34:3e:c5:cb:93:94:7b:57:c9:c7:71:c4:
         a0:41:73:61:0a:18:f1:aa:e6:96:34:5e:01:15:de:c9:87:85:
         fb:b5:72:71:b9:11:33:0d:e9:8a:16:e5:65:5d:d9:a7:92:75:
         f5:3f:59:73:3f:49:9c:38:e8:e1:04:de:3f:14:e7:18:03:2c:
         46:35:1d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:31:37 2026 by rpki-client