Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f3bcc08b-1241-3fe2-b246-e7eab197af67.roa
File:                     f3bcc08b-1241-3fe2-b246-e7eab197af67.roa (raw, json)
Hash identifier:          51hKAWVvN8hRiFQ+Aaj4LsZza6K6cQJFQDfv5DME3U8=
Subject key identifier:   70:E3:9E:91:F3:B6:34:16:28:6B:75:9F:CA:AC:9D:B2:5A:36:65:B2
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584E4AEF4BEB24E47407C7358580
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f3bcc08b-1241-3fe2-b246-e7eab197af67.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     45671
IP address blocks:        45.74.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:4b:eb:24:e4:74:07:c7:35:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=dd36b5f4-ff04-455c-8278-2c9c6075cbd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f4:e9:10:87:3f:16:fa:b4:44:dd:6a:e9:be:
                    82:bd:fd:97:e6:34:c4:2f:84:89:de:a8:fe:e9:d5:
                    d4:14:fa:49:3d:8f:0c:ab:ba:71:66:a1:16:fb:53:
                    03:37:4e:03:37:f0:81:3f:30:14:81:bd:22:0c:68:
                    ab:63:00:f1:46:42:60:34:15:55:eb:e5:19:f2:f2:
                    08:06:fd:ab:5a:dd:0a:60:18:2e:f5:cc:e8:4e:64:
                    cd:4b:bf:01:c8:f2:34:b1:e6:e2:51:af:53:95:8b:
                    34:3a:9a:02:ff:af:3b:0c:91:13:93:6b:7c:45:3b:
                    f9:f2:2a:ca:65:ce:04:b1:b9:15:fe:c6:ee:0c:b9:
                    43:69:4e:88:69:2c:14:b7:ec:e7:10:a9:1a:41:ba:
                    d8:83:88:da:3d:a6:44:06:fe:c1:9c:d0:fc:9d:de:
                    ad:f8:e3:e8:39:c7:db:09:16:ce:c0:dc:88:d2:e8:
                    5d:37:58:e1:1f:1b:f1:bc:9c:9c:2e:08:79:42:6c:
                    87:b1:ce:dc:ca:a3:bd:8a:db:b5:5c:d5:7b:d9:28:
                    a2:49:29:ad:95:4a:87:0a:23:a3:73:df:c1:26:48:
                    64:68:3d:83:04:88:53:5c:1a:74:56:a7:05:57:ee:
                    53:d3:62:b2:03:24:62:ee:c8:04:05:64:9e:56:da:
                    ea:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E3:9E:91:F3:B6:34:16:28:6B:75:9F:CA:AC:9D:B2:5A:36:65:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f3bcc08b-1241-3fe2-b246-e7eab197af67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:f8:da:62:ac:50:89:55:2a:e7:e2:b4:de:81:2c:9c:b9:57:
         da:a5:2a:8b:38:dd:4f:6e:60:8b:81:24:6d:9b:61:1a:2b:02:
         d8:46:bd:d0:68:f3:a5:26:90:ed:80:d4:46:e1:60:18:d4:67:
         1b:1d:5c:0b:35:d1:f8:dd:5f:d4:09:bd:b3:d8:65:32:8b:9c:
         91:4d:03:4f:2a:04:bb:ba:a2:f7:73:49:75:36:8c:a1:e4:55:
         6a:a1:96:6b:47:d6:6d:24:58:ff:3e:d5:f6:c7:ef:96:84:f3:
         f9:98:b7:58:33:18:75:d5:1e:9f:a6:ce:a1:0b:6d:0a:2e:ee:
         d8:f7:9d:e8:c9:d6:d5:51:6f:8b:6f:0f:c0:db:1f:58:e2:1e:
         f5:dd:ee:81:62:fe:5a:77:d1:94:de:74:e3:69:95:9a:ea:ed:
         e9:5a:64:d9:76:83:0d:b3:ac:00:97:90:e3:d0:f1:62:50:12:
         76:7b:b5:98:0e:45:8e:4a:06:8e:f4:8c:99:65:81:6a:e8:ed:
         c6:94:08:0c:9e:e8:e3:17:a8:ad:7c:ea:9c:5f:17:4a:1d:e9:
         22:a4:97:97:32:f3:3a:42:0e:60:d5:07:87:a8:b0:23:8b:39:
         20:17:e4:6d:4d:ce:32:91:0c:3e:a6:71:3f:74:a0:e8:0d:7a:
         a3:f8:c2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:38:27 2026 by rpki-client