Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c458a013-6ebe-3f21-b760-c004edff3696.roa
File:                     c458a013-6ebe-3f21-b760-c004edff3696.roa (raw, json)
Hash identifier:          VLYoh9BD1/2RQDLZUSD3KspPQyB+nKCCc7k6EFiY+Xo=
Subject key identifier:   18:BC:C9:2B:EA:16:5C:44:36:62:55:5D:E4:48:04:23:2D:BC:4C:C6
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584D8C2A9FF59B69713E32EAB3F0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c458a013-6ebe-3f21-b760-c004edff3696.roa
Signing time:             Sat 18 Apr 2026 13:00:30 +0000
ROA not before:           Sat 18 Apr 2026 13:00:30 +0000
ROA not after:            Fri 17 Jul 2026 13:00:30 +0000
asID:                     9009
IP address blocks:        45.74.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8c:2a:9f:f5:9b:69:71:3e:32:ea:b3:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Apr 18 13:00:30 2026 GMT
            Not After : Jul 17 13:00:30 2026 GMT
        Subject: CN=5125d326-106a-4d99-8691-c3362ffacb3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ce:86:3d:10:2f:c7:c4:7d:61:2a:a5:c6:93:
                    16:92:d7:26:7c:4e:84:04:a6:6c:3e:ad:fe:aa:f2:
                    53:8e:01:63:40:d5:b5:3b:1c:c7:de:c3:93:5a:d7:
                    56:23:2e:ca:e0:a4:53:50:06:3e:a1:13:f3:44:e1:
                    ec:e7:a7:94:01:f3:35:a1:dd:83:a7:40:be:6c:94:
                    6f:d1:3d:e7:7d:6e:f0:cc:79:ae:ed:eb:28:8a:4b:
                    4d:42:d0:f1:e3:83:2f:ab:95:ff:21:a5:af:bd:da:
                    23:f3:af:29:f4:a2:2b:3f:1c:66:5c:74:cb:16:15:
                    3f:5b:09:8f:fa:c5:1a:90:c0:cd:7f:44:81:54:ca:
                    21:5b:14:51:7c:e9:89:ca:76:2c:08:e5:b1:e4:a3:
                    1a:60:e3:a7:39:c1:8b:4e:3a:55:4f:6c:aa:a1:46:
                    f9:75:db:c5:48:9b:13:64:80:2b:2d:d9:47:e5:ef:
                    59:f2:ed:5f:1e:d4:ae:7a:b8:e6:94:11:cf:28:c8:
                    f6:a5:e0:1c:44:65:cb:7f:85:4e:ff:0c:90:ea:f8:
                    0d:61:6d:a3:a3:ce:e8:e5:f9:0d:00:88:f7:ea:e5:
                    13:ce:36:0f:85:32:99:7e:64:90:1f:f9:3f:04:f6:
                    b8:9f:91:0d:e0:81:c6:9b:05:2d:59:2d:3b:f5:89:
                    9a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:BC:C9:2B:EA:16:5C:44:36:62:55:5D:E4:48:04:23:2D:BC:4C:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c458a013-6ebe-3f21-b760-c004edff3696.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:41:0a:62:1e:be:45:59:57:56:64:bd:cf:b1:f0:0d:7b:78:
         93:41:72:84:c6:68:f0:f1:fd:a5:63:55:d4:00:51:48:64:53:
         4b:a6:83:c2:a8:05:6b:32:bc:e6:24:33:99:8f:74:78:cf:76:
         a5:f2:22:52:d3:a6:db:2c:0d:cb:92:60:0a:97:d7:a5:6a:a6:
         de:59:e8:27:ae:8f:4d:38:32:61:8a:af:58:fc:12:cf:d5:35:
         2e:96:67:63:df:8b:ef:f8:09:92:23:4f:00:05:5e:79:ba:3c:
         3f:5b:8f:90:e9:a9:0e:cd:0b:ee:e0:21:39:cf:d0:3e:2b:de:
         66:4b:83:48:b2:4d:78:95:be:cb:49:78:93:be:77:ac:86:60:
         f8:70:0b:c6:43:13:12:20:fd:86:07:fe:c0:dc:9e:e5:bb:aa:
         12:b3:21:d8:f4:cf:53:19:8a:ac:04:e9:8e:d8:72:97:3b:b9:
         2f:10:85:be:df:c7:3c:2f:8a:e8:8c:73:a4:35:5f:11:05:75:
         02:c9:92:01:9f:de:82:d9:05:26:45:fb:79:b5:53:1d:b7:f4:
         d3:f3:c0:b6:3a:e8:bf:9e:93:01:be:e6:dc:f2:a5:69:6b:80:
         aa:5d:7c:bb:72:36:61:77:4f:f1:96:20:0f:d8:b4:f8:7a:52:
         c9:0c:94:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2MKp/1m2lxPjLqs/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk
NTEyNWQzMjYtMTA2YS00ZDk5LTg2OTEtYzMzNjJmZmFjYjNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs86GPRAvx8R9YSqlxpMWktcmfE6EBKZsPq3+
qvJTjgFjQNW1OxzH3sOTWtdWIy7K4KRTUAY+oRPzROHs56eUAfM1od2Dp0C+bJRv
0T3nfW7wzHmu7esoiktNQtDx44Mvq5X/IaWvvdoj868p9KIrPxxmXHTLFhU/WwmP
+sUakMDNf0SBVMohWxRRfOmJynYsCOWx5KMaYOOnOcGLTjpVT2yqoUb5ddvFSJsT
ZIArLdlH5e9Z8u1fHtSuerjmlBHPKMj2peAcRGXLf4VO/wyQ6vgNYW2jo87o5fkN
AIj36uUTzjYPhTKZfmSQH/k/BPa4n5EN4IHGmwUtWS079YmamQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBi8ySvqFlxENmJVXeRIBCMtvEzGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzQ1OGEwMTMtNmViZS0z
ZjIxLWI3NjAtYzAwNGVkZmYzNjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUo6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACFBCmIevkVZV1Zkvc+x8A17eJNBcoTGaPDx/aVjVdQAUUhkU0umg8Ko
BWsyvOYkM5mPdHjPdqXyIlLTptssDcuSYAqX16Vqpt5Z6Ceuj004MmGKr1j8Es/V
NS6WZ2Pfi+/4CZIjTwAFXnm6PD9bj5DpqQ7NC+7gITnP0D4r3mZLg0iyTXiVvstJ
eJO+d6yGYPhwC8ZDExIg/YYH/sDcnuW7qhKzIdj0z1MZiqwE6Y7Ycpc7uS8Qhb7f
xzwviuiMc6Q1XxEFdQLJkgGf3oLZBSZF+3m1Ux239NPzwLY66L+ekwG+5tzypWlr
gKpdfLtyNmF3T/GWIA/YtPh6UskMlOo=
-----END CERTIFICATE-----
Generated at Sat Apr 18 22:26:53 2026 by rpki-client