Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/de59ceeb-1afa-39b3-934d-1cd7d3df5f7f.roa
File:                     de59ceeb-1afa-39b3-934d-1cd7d3df5f7f.roa (raw, json)
Hash identifier:          UoTJFxHYDfva3D0sAK8Tk8ar8AJIW5UqumLD15QCbbc=
Subject key identifier:   7D:68:34:D1:DC:3C:C2:C8:EB:0A:4D:4A:BC:88:50:4A:99:FC:79:31
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584F1B6242C85D54A170CCFD28A4
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/de59ceeb-1afa-39b3-934d-1cd7d3df5f7f.roa
Signing time:             Tue 08 Sep 2026 13:00:12 +0000
ROA not before:           Tue 08 Sep 2026 13:00:12 +0000
ROA not after:            Mon 07 Dec 2026 14:00:12 +0000
asID:                     205397
IP address blocks:        45.74.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1b:62:42:c8:5d:54:a1:70:cc:fd:28:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Sep  8 13:00:12 2026 GMT
            Not After : Dec  7 14:00:12 2026 GMT
        Subject: CN=16101a24-bded-4ff2-8750-c0baa15ea96f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9a:c0:68:4e:11:a7:37:7a:28:1f:54:dd:f6:
                    de:e1:85:81:b2:94:ce:49:c6:3b:ff:6a:bc:bd:41:
                    75:8b:a7:bc:90:f3:3d:5c:db:be:26:e6:f9:d4:19:
                    4c:c9:09:0e:fd:e4:28:2f:08:ad:ad:fb:9a:d7:42:
                    c1:5e:3e:28:63:12:c7:86:f2:7f:14:08:6f:af:04:
                    c5:86:4a:41:fa:32:4e:61:c1:6d:37:af:b6:bb:00:
                    5e:78:29:ea:15:a5:0a:7d:38:7c:72:6b:f4:e2:8e:
                    55:4e:4f:f0:86:56:97:d0:f9:45:e7:e6:a9:8b:0e:
                    e2:36:90:3e:af:41:3b:07:4f:93:f8:20:f2:5b:04:
                    81:2d:25:ae:63:13:8f:3e:70:24:c7:0d:74:6e:78:
                    22:69:e6:cb:e6:a8:0c:dd:ce:29:61:00:9a:5b:ae:
                    08:21:5e:e7:5a:59:dc:77:dc:14:ca:e3:96:23:95:
                    90:f1:c2:76:1a:7a:21:1d:ac:ce:21:58:02:7b:44:
                    c7:d8:21:35:2c:89:b5:28:02:0b:a1:c9:f1:ce:cc:
                    29:da:b6:40:21:46:eb:24:19:1e:1d:86:8f:1f:b6:
                    0c:dc:56:0c:07:b9:32:c9:8c:2b:44:87:5b:52:00:
                    b2:c8:4f:d9:0b:db:3d:e8:76:ac:64:fe:ad:a7:d5:
                    07:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:68:34:D1:DC:3C:C2:C8:EB:0A:4D:4A:BC:88:50:4A:99:FC:79:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/de59ceeb-1afa-39b3-934d-1cd7d3df5f7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:56:d0:d1:b8:d4:bf:bb:69:f1:d9:ef:d9:60:39:6c:02:82:
         f1:2b:02:5e:53:a3:03:d4:57:0b:c0:05:a4:b8:69:28:05:ea:
         78:05:f2:c0:36:f8:0b:9d:8d:e3:33:fa:eb:02:a5:ba:54:c0:
         45:c0:7e:00:7e:b7:a9:01:0d:4a:f0:3b:67:79:af:10:95:3e:
         50:f0:51:28:49:4f:90:c7:29:ce:74:2f:8c:1f:2f:74:0d:cc:
         a7:39:00:f5:bd:00:c7:3a:8f:58:84:3f:07:47:07:1d:80:bc:
         84:5d:b7:a3:55:43:80:5e:16:81:da:41:f5:3b:35:c9:af:4e:
         de:af:db:c5:c7:68:94:f9:20:44:ec:9c:8a:ea:7d:a0:ee:a2:
         e4:3f:c8:de:30:1c:34:ec:65:5f:a4:ef:c4:43:af:fc:0d:4b:
         63:10:8e:32:34:da:b3:08:9c:09:7e:e8:35:8c:eb:10:2a:3b:
         97:e4:54:74:8f:42:33:ec:7e:e9:f7:45:f4:3c:78:ab:f8:30:
         ad:b1:7c:e2:4b:38:25:76:00:f5:62:92:aa:05:0f:f5:4c:57:
         58:38:96:f3:18:b6:12:89:4c:98:bc:d2:97:1d:4c:b0:c2:ae:
         f1:9e:38:66:5d:fc:1d:99:8f:2a:8b:9a:d6:b8:6c:4e:0f:7f:
         26:43:8a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:16:23 2026 by rpki-client