Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d0238fac-e671-3831-9a2d-e194855945f5.roa
File:                     d0238fac-e671-3831-9a2d-e194855945f5.roa (raw, json)
Hash identifier:          2OhRAcd5n/YfhFdzbSY/Y8IPyOgqBpQ6xLICnFQQClM=
Subject key identifier:   DE:A3:60:8F:FD:FE:17:BB:B3:48:A8:3F:47:24:86:E3:9B:4F:17:FA
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC3723FA1CA698E095F243F80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d0238fac-e671-3831-9a2d-e194855945f5.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     399520
IP address blocks:        47.45.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:3f:a1:ca:69:8e:09:5f:24:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=23a1de61-1c74-49a6-9c6b-1433b1700dd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c1:f8:3c:27:3b:f5:52:86:e1:a5:d4:58:e8:
                    b1:d4:82:f5:26:02:a5:8b:f4:c8:f6:fd:81:ad:03:
                    05:83:97:51:8f:22:df:93:1e:f2:1e:c3:ee:36:f3:
                    47:18:4a:8b:f1:51:21:33:68:fd:d0:f8:7e:71:f6:
                    b9:05:51:f3:cc:03:d6:08:8d:b7:6e:56:b0:52:f1:
                    08:f8:a6:08:3a:80:a2:41:18:45:85:20:96:cc:eb:
                    c8:ad:18:65:f0:51:6f:97:c2:8f:16:ab:f1:25:f0:
                    1a:e4:b8:57:6f:9f:0e:c3:f3:90:0d:66:24:f1:32:
                    7a:77:f7:c6:09:04:89:d1:9d:96:e9:4c:44:ee:76:
                    bf:ed:9f:3f:0a:e7:85:8a:33:e2:b7:dc:fa:6d:06:
                    19:20:59:15:1c:7d:cb:28:2b:0f:53:bd:a3:2d:69:
                    e6:e0:10:ab:20:64:93:cf:82:1c:3e:f8:5e:8c:ff:
                    de:3c:c3:a2:26:6e:c3:a2:3d:2e:c2:00:ce:cb:41:
                    27:fc:13:34:34:66:08:d2:95:c7:bd:cb:e9:eb:4f:
                    71:54:46:87:46:a0:e1:3e:17:40:90:cd:be:15:23:
                    b5:53:ea:40:7c:54:39:6d:be:bf:1f:fd:6a:cf:5d:
                    3a:5d:00:02:57:4f:78:b9:4f:59:b1:2c:42:c0:c3:
                    ad:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A3:60:8F:FD:FE:17:BB:B3:48:A8:3F:47:24:86:E3:9B:4F:17:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d0238fac-e671-3831-9a2d-e194855945f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.45.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:24:52:bd:dc:e2:2f:42:6e:b2:03:d5:56:4f:3f:7c:b1:6d:
         20:42:98:6d:b1:3b:24:de:a3:4b:8d:28:ac:2c:93:4e:52:dc:
         2e:8d:55:8c:7e:f9:75:71:2d:4b:ac:01:68:50:48:35:30:dd:
         02:94:7e:b8:70:1b:d3:df:f1:80:b9:eb:39:74:3a:fd:70:a0:
         cc:19:3e:eb:4a:15:85:10:56:17:d4:f8:c6:28:1a:97:d0:7c:
         7c:de:28:68:10:33:7a:77:a7:e7:5c:5f:1d:d6:9c:af:3e:23:
         0a:97:2d:7f:9a:b6:4f:4c:46:d3:bf:4e:b9:73:b2:d3:91:7a:
         01:4c:4f:27:00:dd:07:0b:5a:73:df:2d:86:9f:9a:2f:e6:cc:
         6c:ac:02:ff:79:b6:ce:36:fc:3a:12:40:5d:f7:ae:a4:16:43:
         17:63:12:d3:35:ac:00:d2:1a:e1:20:08:05:84:76:3d:08:6c:
         35:39:82:46:67:6d:ba:8a:2c:25:02:1d:47:21:10:6b:53:33:
         90:0b:2e:af:a5:07:97:8f:c0:5a:30:93:a9:6c:4f:ce:f1:af:
         01:36:56:c2:a2:9b:21:68:db:f8:4b:82:0c:43:7a:33:5f:e0:
         6c:58:ac:d5:43:15:3e:82:74:41:43:40:86:2f:1e:47:f1:87:
         4c:63:e7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 19:12:53 2026 by rpki-client