Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/704a489d-82d2-3065-9950-1e3d0d3612d7.roa
File:                     704a489d-82d2-3065-9950-1e3d0d3612d7.roa (raw, json)
Hash identifier:          Lsbl5dasld7fxBxr/LEtcVlN3Bb/IqhAFcnhRL+JwHw=
Subject key identifier:   13:ED:AD:2A:04:DC:4F:07:19:72:D4:41:4B:73:4F:5F:9F:34:9F:D0
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584B36F121307B94956E374380C0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/704a489d-82d2-3065-9950-1e3d0d3612d7.roa
Signing time:             Tue 16 Sep 2025 14:47:12 +0000
ROA not before:           Tue 16 Sep 2025 14:47:12 +0000
ROA not after:            Mon 15 Dec 2025 15:47:12 +0000
asID:                     9009
IP address blocks:        45.74.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:36:f1:21:30:7b:94:95:6e:37:43:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Sep 16 14:47:12 2025 GMT
            Not After : Dec 15 15:47:12 2025 GMT
        Subject: CN=7864fa7e-8853-40be-86f9-6e7cebebde0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:06:6b:3d:33:43:85:2f:03:87:ce:39:18:6c:
                    7a:9c:ba:66:f4:25:fb:41:c1:09:f7:1a:62:74:54:
                    9f:a8:73:e7:95:b6:ab:cb:97:c0:44:f3:51:d8:fe:
                    3a:3e:a7:e9:fd:9f:f1:2f:fc:cb:fe:be:69:8c:64:
                    3f:c5:a5:57:7b:81:b7:3d:e5:78:d5:30:4d:a8:9b:
                    0a:04:5d:cd:26:66:77:93:bc:dc:36:6e:4b:b3:35:
                    ab:df:ab:db:ea:c1:61:ab:49:8d:b7:02:a4:26:61:
                    30:a6:b6:47:f4:f1:86:77:58:9d:2e:04:e4:47:7e:
                    ff:08:a5:49:c6:3b:2b:ac:7e:25:50:c8:22:a9:79:
                    7b:83:6e:91:05:d2:11:f1:71:59:3a:ac:bf:66:ac:
                    a5:75:58:cc:15:77:92:53:2b:1b:6e:e4:da:e8:3f:
                    eb:c0:57:72:f3:aa:7b:fc:54:87:8a:ee:b7:91:43:
                    ef:88:9e:85:17:44:67:ec:66:ad:d7:00:d8:82:c5:
                    17:64:4b:2f:8a:71:9a:35:03:d1:fe:86:c5:91:a2:
                    70:58:c4:51:54:2f:66:23:a7:22:66:6d:8c:fa:78:
                    28:a6:5d:ee:3b:b1:7d:ad:be:b8:8a:82:67:48:a3:
                    68:7b:97:32:32:7b:43:56:e1:ef:97:be:3c:21:92:
                    07:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:ED:AD:2A:04:DC:4F:07:19:72:D4:41:4B:73:4F:5F:9F:34:9F:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/704a489d-82d2-3065-9950-1e3d0d3612d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:aa:bf:0e:84:32:12:74:8c:09:8d:7a:de:d0:bf:b9:92:27:
         af:b0:70:4d:d0:e6:7a:7f:46:13:e3:10:1b:e5:0b:53:2f:49:
         6d:eb:57:d9:99:72:4c:08:6b:90:74:95:2a:02:af:41:57:bf:
         e9:68:27:fb:92:f0:77:28:53:c3:9d:3c:3c:de:23:9b:73:09:
         4b:b7:0a:2f:50:9b:d5:9a:f9:54:2d:f3:98:14:d1:f0:d6:da:
         0a:9f:52:81:c7:62:34:9f:3b:ed:49:28:9e:1e:71:1e:52:9d:
         dd:5c:b2:1e:e9:e1:6e:32:38:e3:bc:56:41:2a:f2:20:33:75:
         25:81:74:a9:6d:0a:70:c1:71:b1:08:bf:68:7a:f3:fd:ab:93:
         88:24:af:cd:ca:fc:82:fc:20:b6:ae:62:0a:23:84:22:b1:36:
         10:37:87:a1:ee:6f:d9:20:61:72:c2:9f:5d:31:a0:69:80:e3:
         02:2f:35:50:84:df:a2:63:4b:dc:78:c0:56:f9:80:2c:d2:26:
         94:a0:ab:13:03:fe:d1:24:29:34:da:73:9c:be:d6:05:87:15:
         02:8c:7e:6c:6d:77:2c:41:b1:69:eb:40:f3:6a:e2:59:41:27:
         cd:27:9d:e2:19:6d:e1:e3:2e:f4:c5:97:d6:d1:ef:b2:85:ab:
         5f:04:2b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 07:05:56 2025 by rpki-client