Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8ff2b5b0-3cb5-38e1-8a83-b206bfde7b57.roa
File:                     8ff2b5b0-3cb5-38e1-8a83-b206bfde7b57.roa (raw, json)
Hash identifier:          2NSGx4/s9Dtdctn+okl+XKgXNnn4lnGAi3JuQxji90U=
Subject key identifier:   78:E9:5B:74:71:8A:E2:DB:07:00:1D:0C:CC:C9:FE:A3:7A:E7:3C:A5
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584E428F28E9805DE44C2379C080
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8ff2b5b0-3cb5-38e1-8a83-b206bfde7b57.roa
Signing time:             Mon 22 Jun 2026 21:00:12 +0000
ROA not before:           Mon 22 Jun 2026 21:00:12 +0000
ROA not after:            Sun 20 Sep 2026 21:00:12 +0000
asID:                     213441
IP address blocks:        45.74.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:42:8f:28:e9:80:5d:e4:4c:23:79:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jun 22 21:00:12 2026 GMT
            Not After : Sep 20 21:00:12 2026 GMT
        Subject: CN=4c1df0ad-cb8a-48b0-94f1-b3ef905cb84b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:28:17:25:e7:66:bc:0b:3e:93:5f:41:04:c2:
                    0b:78:52:89:7d:2b:98:b4:07:2d:39:fe:c6:9d:d2:
                    70:8f:b8:11:5e:fb:17:56:03:65:8e:c2:ee:23:95:
                    ca:7d:88:04:a2:f0:e0:2d:99:ad:e3:a6:75:be:40:
                    4f:f5:d8:5b:0c:60:87:1e:c4:8d:d2:28:93:4a:5e:
                    f9:f1:b7:7e:c1:f7:e9:33:0e:54:ae:e5:1f:37:3d:
                    72:60:21:01:aa:ce:b7:b4:c1:39:f3:24:e9:19:68:
                    11:87:72:bf:4f:7f:56:77:ce:de:25:d4:39:19:a4:
                    0e:4f:c9:ea:8e:84:c9:c9:e0:99:44:17:2d:f9:ed:
                    a7:94:fe:8e:18:21:56:33:5e:86:34:8c:41:56:37:
                    c4:65:09:a0:0e:4a:46:07:4a:c7:f5:cc:8f:ad:5a:
                    8a:0e:39:8c:fe:03:4b:41:6d:c3:7b:03:4f:6e:ca:
                    8b:61:7b:96:c5:97:e8:af:79:9a:b8:bf:75:e0:63:
                    ff:43:6e:25:3f:be:6f:81:d2:9c:bb:1e:f9:2e:81:
                    64:e6:c2:19:62:21:f0:d5:5b:55:26:70:51:ac:e0:
                    6d:a4:70:7d:6b:54:50:35:0a:30:d6:6a:c6:dc:89:
                    49:98:b6:04:04:51:7e:f9:ac:6a:c0:b2:c3:69:a5:
                    c1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E9:5B:74:71:8A:E2:DB:07:00:1D:0C:CC:C9:FE:A3:7A:E7:3C:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8ff2b5b0-3cb5-38e1-8a83-b206bfde7b57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:45:e5:41:23:ce:2d:39:6c:91:a4:ea:d5:1f:2b:d6:79:6f:
         8d:1f:f7:ae:8a:72:eb:43:43:ee:64:54:d4:da:e8:ad:3f:89:
         19:0b:25:f0:9f:d8:00:8e:ef:ac:ac:b3:28:92:b1:aa:a6:26:
         c3:ba:d2:b3:8d:94:46:3f:96:9b:9f:89:31:4a:47:8c:27:29:
         0d:90:a3:f4:bf:5c:92:4a:ad:38:81:8f:d1:7b:20:5d:4f:2e:
         c5:96:3d:e4:c6:9c:22:ed:67:31:8e:16:e3:be:3e:30:4f:f4:
         27:d2:ca:c5:1d:16:14:fd:63:fd:69:5a:24:e8:18:1d:90:28:
         eb:2e:e7:aa:7f:b0:86:76:60:68:c5:ee:68:2e:b0:e9:61:5c:
         fe:a9:b7:1b:6b:9b:e1:15:2e:f3:5f:88:0e:d0:2b:d1:92:e7:
         1f:3a:28:b0:09:42:86:fa:56:0f:0e:2f:a2:41:fd:ac:df:6a:
         d7:38:40:68:9c:6e:13:db:77:5b:66:f0:f0:ec:37:23:6a:be:
         ed:59:43:ef:7c:2d:51:50:96:ca:74:b9:4d:35:f7:86:32:89:
         b9:01:aa:42:38:6f:7f:0c:56:3b:9f:65:06:82:44:8a:8f:ed:
         95:8d:b2:58:e3:67:5e:ab:ae:39:18:af:64:52:b1:7a:84:b5:
         36:44:60:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:56:09 2026 by rpki-client