Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0f3a7418-3422-3c2f-b944-269bfd5a8c5d.roa
File:                     0f3a7418-3422-3c2f-b944-269bfd5a8c5d.roa (raw, json)
Hash identifier:          GnlVzKk6FZdkyw24CDvEgtRnjhJMoR/cZbhbhH/rRo8=
Subject key identifier:   AD:78:67:1D:9F:F1:C3:76:1B:D3:4A:0F:A3:F4:F8:CA:0E:FF:66:4E
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655DF8B468C8428D3370F300
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0f3a7418-3422-3c2f-b944-269bfd5a8c5d.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     396491
IP address blocks:        47.45.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:f8:b4:68:c8:42:8d:33:70:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=c9bcecc5-be42-478a-b41d-8d0836e3cfa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2a:3d:c0:7d:0c:b5:74:17:f9:a1:bc:10:e2:
                    1f:dd:74:b9:2a:02:be:c6:bc:f3:aa:ae:73:6c:d2:
                    53:c8:b9:a5:55:8a:42:7b:67:4d:68:18:10:0c:3c:
                    4c:4f:73:0e:2b:cb:a8:de:55:b7:43:54:aa:50:18:
                    d9:85:3f:da:15:30:a6:04:b7:60:c6:0f:5a:dc:c5:
                    5c:a3:c9:a6:cf:e6:9c:c8:b7:b3:52:59:7f:44:7f:
                    ec:66:b4:f9:3b:7d:b3:d8:30:82:41:cb:53:66:f1:
                    78:d0:7a:b5:32:96:5f:2d:ef:6c:04:43:50:f0:0a:
                    de:d2:de:34:aa:6d:28:0f:c9:32:c9:56:a3:cc:69:
                    96:bc:c1:9d:ec:ae:38:07:26:b0:fe:5d:7e:fd:d5:
                    54:9c:70:e9:22:cc:b8:87:78:b4:c0:cc:68:bc:3c:
                    36:15:7d:05:e9:00:d7:7b:91:31:21:8f:3b:e1:15:
                    68:6f:d5:28:d1:3b:80:c7:1a:c7:c5:bc:9a:2a:d2:
                    17:d9:cf:86:6e:09:af:c5:2f:17:a1:a2:29:7f:5c:
                    54:c8:82:43:4c:13:57:2a:87:1a:d4:0a:ae:5a:28:
                    bb:5e:c8:03:6c:48:5b:b8:23:4d:57:96:60:b5:8b:
                    3f:6d:d0:ec:74:17:18:90:d3:98:11:f6:f3:95:e4:
                    dd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:78:67:1D:9F:F1:C3:76:1B:D3:4A:0F:A3:F4:F8:CA:0E:FF:66:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0f3a7418-3422-3c2f-b944-269bfd5a8c5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.45.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:86:7a:3f:a2:d7:aa:23:6b:cb:e3:46:ef:39:8f:87:4e:6c:
         cf:a1:2f:cd:3a:5c:f9:02:c3:1a:4d:13:ed:7c:69:5e:2e:1b:
         7c:6a:b7:72:eb:e7:9d:80:8a:89:19:a0:e9:39:9b:a4:c8:42:
         d6:c8:8a:ea:5b:d5:04:bd:0c:4b:eb:47:8a:ec:20:5e:8d:ae:
         d0:53:48:65:fc:97:7c:61:7e:81:45:32:b9:c8:e6:5b:13:33:
         0e:b8:87:13:58:16:b9:8c:c6:c4:2a:59:e1:25:42:d4:28:b3:
         42:b1:ab:c0:82:ad:f0:db:d3:db:d5:4a:bb:47:bd:3b:62:15:
         1b:58:6c:17:e1:fd:43:b7:de:10:77:09:4d:f9:bb:43:e4:f5:
         71:d5:d0:18:81:93:a2:e7:4e:c5:7f:49:47:42:32:10:be:26:
         9d:ae:01:94:34:73:81:69:23:05:fb:b4:47:5a:01:c9:fe:4c:
         5f:93:c1:74:bf:21:b6:24:1f:d0:0c:88:a2:c7:8b:7b:8e:01:
         65:af:65:35:fe:0f:3a:53:8f:f4:75:6d:2c:e8:e0:17:cb:22:
         78:65:f8:7e:88:74:2c:87:2c:85:18:8a:fb:4c:05:15:1d:59:
         0f:84:00:89:b4:51:bd:9a:85:1d:2e:94:66:bd:73:ff:c8:f0:
         8c:d5:54:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:53:02 2026 by rpki-client