Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/331e8ec2-9b76-3ad2-adc4-8b38edd7012a.roa
File:                     331e8ec2-9b76-3ad2-adc4-8b38edd7012a.roa (raw, json)
Hash identifier:          h31VMPVvk1sKWRqt4wB5Nlb/L98w1DauYZ0gP/leL08=
Subject key identifier:   15:2C:DC:52:46:BE:27:1C:A2:92:68:9E:B8:29:A5:8E:B6:E3:E3:B3
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584CBF171A748AF492E521DB5500
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/331e8ec2-9b76-3ad2-adc4-8b38edd7012a.roa
Signing time:             Wed 04 Feb 2026 02:00:31 +0000
ROA not before:           Wed 04 Feb 2026 02:00:31 +0000
ROA not after:            Tue 05 May 2026 01:00:31 +0000
asID:                     137409
IP address blocks:        45.74.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bf:17:1a:74:8a:f4:92:e5:21:db:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Feb  4 02:00:31 2026 GMT
            Not After : May  5 01:00:31 2026 GMT
        Subject: CN=47ac0593-34f0-4532-85c6-aeb106eae6c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:91:8b:61:5d:23:05:42:13:38:02:d3:9d:1c:
                    cd:a5:7a:b6:b6:63:03:2c:07:ae:8c:0e:f8:40:0d:
                    49:89:d8:04:8e:6d:aa:f2:24:e2:83:52:6c:0c:8d:
                    a8:80:73:5e:d6:13:dd:aa:f7:50:29:97:d7:56:a2:
                    d3:78:34:68:86:53:f6:9a:ce:63:0d:5c:1a:fa:9e:
                    1f:14:b2:22:a7:f0:86:13:fe:ea:7e:57:4b:a7:1e:
                    49:1e:d4:df:09:0b:83:58:98:6e:f1:58:c9:db:2a:
                    31:15:92:6b:41:67:b2:1c:49:8c:06:e3:85:43:81:
                    90:71:62:e1:46:b9:bc:ee:39:c0:95:17:9a:5e:74:
                    da:78:cd:20:af:73:76:4d:4d:08:9d:92:52:49:09:
                    e9:a8:82:f1:df:ca:4c:64:db:30:72:81:95:0c:b5:
                    4c:e4:e1:ab:f2:0a:48:f5:d2:4a:61:1b:86:aa:c2:
                    36:83:52:d8:62:a2:08:22:5b:81:20:b0:8f:0e:54:
                    22:14:38:05:04:69:4a:0c:ee:d1:ba:f1:68:e9:07:
                    07:cf:a7:23:5d:69:21:ea:44:42:55:d1:77:5a:be:
                    32:00:9f:4f:af:28:87:78:50:ac:23:c0:36:e0:fa:
                    f9:ff:0c:bc:c1:af:23:2f:48:99:e7:5e:16:af:ab:
                    4b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:2C:DC:52:46:BE:27:1C:A2:92:68:9E:B8:29:A5:8E:B6:E3:E3:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/331e8ec2-9b76-3ad2-adc4-8b38edd7012a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:5d:60:98:cf:b3:63:d1:08:c2:eb:82:fd:0b:07:67:be:f9:
         f9:3d:d5:98:48:b8:1a:80:30:32:32:9e:d7:03:6e:6c:46:59:
         d5:db:a8:0d:c0:75:e2:63:07:fd:17:1d:42:d2:7c:87:9b:99:
         b3:52:93:44:02:76:c2:b1:bb:ef:ba:52:e8:24:b3:e1:7a:86:
         e6:90:57:4d:d5:0d:11:f2:10:b5:89:00:5c:e6:cb:84:00:d7:
         15:b0:fb:83:1c:4c:8c:e7:d4:c7:3a:bd:cb:e3:11:dd:ea:0c:
         48:63:22:5b:8b:6f:f4:88:6d:cb:a2:6e:9f:6c:48:3e:be:f7:
         52:dd:00:a8:f8:2f:07:c9:ac:12:df:09:4c:05:35:68:52:48:
         ab:56:f2:31:3f:45:5a:ad:df:90:2f:ab:ce:82:6d:44:31:1c:
         d0:57:16:64:7a:66:7c:15:13:8a:b9:ff:d4:02:99:f3:34:ca:
         e7:0f:1a:c4:e3:84:bd:43:43:5a:40:f8:1d:b7:ea:eb:cd:4d:
         92:00:36:84:36:18:ae:2e:14:f6:0e:44:24:c1:ac:2b:7f:63:
         28:3c:08:a1:81:35:02:5d:65:5a:49:53:97:8b:da:59:c2:b8:
         53:04:e2:d5:87:87:18:80:f9:00:71:c2:ed:fd:4b:12:7e:ed:
         a7:69:2d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:26:32 2026 by rpki-client