Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fcc873f1-97f4-3f03-9f0e-0640297d5a65.roa
File:                     fcc873f1-97f4-3f03-9f0e-0640297d5a65.roa (raw, json)
Hash identifier:          Hl2k4tbXTtBPUcjg+XlXQclM8jD0QkvDdSTh0ZggpAs=
Subject key identifier:   2E:07:1B:B0:5D:18:91:04:0D:E6:0E:58:6B:7A:54:16:25:0E:7B:FF
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584F4975614F35B30F63839FA100
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fcc873f1-97f4-3f03-9f0e-0640297d5a65.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     3223
IP address blocks:        45.74.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:61:4f:35:b3:0f:63:83:9f:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b1309429-68e3-4ce5-8a76-85d352f6b6c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0d:70:3b:42:d8:02:ed:3c:6a:86:b8:99:39:
                    fc:fb:a6:5f:fc:ba:e8:5f:d0:da:e8:0a:8a:89:c7:
                    fa:a5:99:5c:5a:ef:f5:14:a9:f9:57:e6:9d:bc:18:
                    af:11:0d:9a:d0:30:2b:e3:40:b6:bc:c2:53:78:84:
                    05:95:17:1d:ee:6d:19:27:3f:2d:6a:8b:87:17:52:
                    95:90:25:7f:83:9b:25:f5:f0:8f:df:70:a4:ae:99:
                    19:04:57:54:58:42:fd:7c:99:da:f0:8c:9a:e2:88:
                    54:7e:89:2f:6c:21:46:4f:0f:2f:82:00:50:d0:86:
                    07:f0:35:d5:6a:33:70:31:b1:44:66:2a:52:68:d9:
                    a1:ab:7c:df:a8:e4:2b:1a:50:b5:1e:ba:0b:33:ab:
                    39:32:74:16:ec:0b:b5:b7:de:fc:24:5f:33:33:07:
                    c0:0b:ff:e0:bc:0e:69:a6:0d:f6:de:80:31:7a:5a:
                    25:fc:1e:2f:fa:c5:bc:38:a3:28:72:8c:9d:d4:2e:
                    03:af:ec:0f:76:04:33:f4:d7:dc:99:54:90:89:2d:
                    84:cb:4b:50:f9:92:31:33:6c:9f:28:26:bf:0b:41:
                    be:03:d7:d9:8d:87:6d:64:1a:29:20:79:6e:0a:62:
                    cf:51:74:d2:4b:e3:ae:98:f1:e5:19:44:ea:67:55:
                    a2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:07:1B:B0:5D:18:91:04:0D:E6:0E:58:6B:7A:54:16:25:0E:7B:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fcc873f1-97f4-3f03-9f0e-0640297d5a65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:d9:ca:93:86:72:68:9a:6f:4e:31:95:5b:2e:f2:2f:52:ca:
         d4:87:41:98:fd:07:56:11:06:fa:c6:35:d7:b9:00:55:36:af:
         56:c5:fd:7d:6f:9e:4b:27:43:03:4c:6b:b1:a5:86:fa:ad:3c:
         47:3f:b5:9c:8a:34:94:b2:0f:8a:41:70:0a:86:29:09:a2:d7:
         d5:11:30:d7:e6:60:28:24:83:02:13:6f:8f:2c:45:2b:70:61:
         1a:50:5f:fa:d6:47:2d:c8:c3:67:3f:24:93:9a:a0:4e:cd:d5:
         79:1d:8d:cf:9d:00:07:7d:d9:54:3b:d4:b5:0f:6f:67:ce:b3:
         d5:93:95:f7:cd:5c:f0:a8:fd:74:cf:8a:a1:54:de:17:bb:26:
         47:74:7d:4b:d1:7d:c7:6d:55:29:f1:77:a9:4f:45:27:c0:3b:
         7a:c1:c6:63:c5:30:d0:da:d8:78:ed:5b:2f:37:34:6c:2f:ad:
         d6:08:88:71:ae:d7:de:69:8b:c4:b5:17:db:36:12:f5:bc:b2:
         0d:eb:30:1f:38:35:a6:31:01:eb:27:ee:85:29:b1:83:31:6f:
         66:9c:58:41:9d:26:44:fa:a3:d9:a3:8f:f6:4f:86:83:22:1e:
         64:ee:87:8a:ae:a0:45:6a:94:b4:32:ee:bd:79:66:97:20:b4:
         98:d9:87:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 20:40:19 2026 by rpki-client