Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0f3a7418-3422-3c2f-b944-269bfd5a8c5d.roa
File:                     0f3a7418-3422-3c2f-b944-269bfd5a8c5d.roa (raw, json)
Hash identifier:          f5I9Ch0OQjmcsGZ3VzdTn05JwRcphQdNgCIj7zRHtFc=
Subject key identifier:   8A:6A:95:ED:A5:5D:28:B5:D2:04:1A:4D:91:09:F2:E6:FE:44:BA:B5
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E210F70B92EBEA803BA77D2C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0f3a7418-3422-3c2f-b944-269bfd5a8c5d.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     396491
IP address blocks:        47.45.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:70:b9:2e:be:a8:03:ba:77:d2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=89162fa7-2ea5-4f6c-a467-7fd4b0dbd4ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fc:9b:a8:18:a0:8d:bb:13:a5:2c:74:7f:c6:
                    77:89:8d:73:e1:93:52:7a:d9:ab:1d:7f:65:8a:90:
                    bb:7b:a2:40:4f:b2:c5:9a:3d:dd:c9:23:3d:4d:34:
                    4c:2f:e9:f2:65:25:b6:d4:9e:f9:58:b0:f2:f0:dd:
                    b7:8e:67:ff:bc:88:c5:5f:33:4c:f9:45:fe:7e:e4:
                    bf:93:be:5c:c7:58:51:29:58:39:11:cc:64:08:30:
                    fc:27:1c:71:8c:d9:73:e6:19:b2:fb:01:38:89:de:
                    de:34:f7:ed:f3:48:f9:d8:d7:b6:62:f8:c0:83:3b:
                    bd:bb:ba:54:cc:0e:47:a2:e2:22:96:c2:37:88:23:
                    f0:96:32:6d:17:87:3b:f1:d4:ae:3a:2e:a6:0e:f8:
                    37:ae:4a:3c:40:76:c3:5c:94:31:df:1a:05:ca:87:
                    05:2e:bb:9a:94:c7:44:11:0a:c4:07:26:c6:ff:df:
                    a6:f6:fa:92:09:c1:e0:7e:74:51:41:60:9b:b2:fe:
                    fe:11:d5:64:75:eb:b4:5f:51:e5:b3:df:c5:af:e8:
                    c0:c7:44:62:30:18:d8:68:14:9d:d5:bc:56:ae:78:
                    8a:e7:37:c7:62:89:dd:8a:23:ef:08:9f:ae:ca:62:
                    88:e8:07:9a:61:cc:67:ef:a7:9e:cf:12:2c:9e:72:
                    2a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:6A:95:ED:A5:5D:28:B5:D2:04:1A:4D:91:09:F2:E6:FE:44:BA:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0f3a7418-3422-3c2f-b944-269bfd5a8c5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.45.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:af:4a:86:8b:9e:da:ac:90:c8:bd:97:c3:d2:d4:1c:2c:7c:
         21:52:c5:8e:0c:50:3f:45:cb:ad:99:23:97:82:0d:63:cc:88:
         79:7e:40:af:c6:d9:1f:16:3a:36:c7:54:3c:29:b2:3f:52:24:
         12:4a:0f:51:73:63:9f:fc:53:f2:22:53:1f:10:41:53:20:ea:
         bf:4e:6e:92:ca:99:90:49:cf:43:ab:41:df:1d:37:b5:53:14:
         30:af:7a:e6:ac:fa:9a:f0:63:32:db:eb:6f:c2:88:09:49:b2:
         5e:62:1a:ce:68:cb:5b:23:6d:ce:70:f7:8d:5c:05:78:41:45:
         1f:72:ce:aa:76:aa:de:1f:9c:21:f3:c7:d1:c8:4e:aa:d1:82:
         98:ff:3d:b5:ce:5f:01:40:3f:62:04:6e:62:f8:2b:11:f7:93:
         c2:ea:96:df:74:6b:c4:93:0e:e6:4e:62:83:b1:7e:94:38:ac:
         44:0e:f8:db:02:97:30:4c:ab:32:5f:3f:b6:fd:33:3f:db:19:
         db:95:6b:84:27:bb:99:43:6a:07:b5:aa:e7:ee:75:7f:65:ca:
         45:df:e1:93:0f:72:b0:61:07:3f:5c:bd:5b:52:eb:3b:25:e4:
         a6:20:07:16:a3:04:19:9e:6f:2f:15:95:ed:04:fd:e2:4b:55:
         87:dd:a6:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4hD3C5Lr6oA7p30sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDYxMDIxMDAxMVoXDTI2MDkwODIxMDAxMVowLzEtMCsGA1UEAxMk
ODkxNjJmYTctMmVhNS00ZjZjLWE0NjctN2ZkNGIwZGJkNGZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvybqBigjbsTpSx0f8Z3iY1z4ZNSetmrHX9l
ipC7e6JAT7LFmj3dySM9TTRML+nyZSW21J75WLDy8N23jmf/vIjFXzNM+UX+fuS/
k75cx1hRKVg5EcxkCDD8JxxxjNlz5hmy+wE4id7eNPft80j52Ne2YvjAgzu9u7pU
zA5HouIilsI3iCPwljJtF4c78dSuOi6mDvg3rko8QHbDXJQx3xoFyocFLrualMdE
EQrEBybG/9+m9vqSCcHgfnRRQWCbsv7+EdVkdeu0X1Hls9/Fr+jAx0RiMBjYaBSd
1bxWrniK5zfHYondiiPvCJ+uymKI6AeaYcxn76eezxIsnnIqFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIpqle2lXSi10gQaTZEJ8ub+RLq1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMGYzYTc0MTgtMzQyMi0z
YzJmLWI5NDQtMjY5YmZkNWE4YzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALy0RMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ6vSoaLntqskMi9l8PS1BwsfCFSxY4MUD9Fy62ZI5eCDWPMiHl+QK/G
2R8WOjbHVDwpsj9SJBJKD1FzY5/8U/IiUx8QQVMg6r9ObpLKmZBJz0OrQd8dN7VT
FDCveuas+prwYzLb62/CiAlJsl5iGs5oy1sjbc5w941cBXhBRR9yzqp2qt4fnCHz
x9HITqrRgpj/PbXOXwFAP2IEbmL4KxH3k8Lqlt90a8STDuZOYoOxfpQ4rEQO+NsC
lzBMqzJfP7b9Mz/bGduVa4Qnu5lDage1qufudX9lykXf4ZMPcrBhBz9cvVtS6zsl
5KYgBxajBBmeby8Vle0E/eJLVYfdprE=
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:19:46 2026 by rpki-client