Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7bd97e6f-8a06-3df9-a962-df72660561f6.roa
File:                     7bd97e6f-8a06-3df9-a962-df72660561f6.roa (raw, json)
Hash identifier:          k+KCb6gdBhOFIUIWNPlFpQfW1hdqw878jU/RyIwwV7s=
Subject key identifier:   90:D5:8B:B8:55:AB:E6:26:01:35:76:B2:3F:78:75:56:6D:BA:A0:20
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA1617A6F628EEB4B9D199CF0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7bd97e6f-8a06-3df9-a962-df72660561f6.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     395498
IP address blocks:        47.45.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:7a:6f:62:8e:eb:4b:9d:19:9c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=8c312b68-210b-4a0f-9527-144d7b9657ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a2:fe:57:41:6e:bf:47:fa:91:db:60:ae:42:
                    ac:97:14:20:21:fc:2a:e5:af:7a:b5:b8:2b:af:9c:
                    e7:57:10:ea:89:13:f3:19:20:9c:f5:1f:74:0b:53:
                    5f:8a:8c:93:df:9f:0e:94:d3:5f:88:9c:46:f1:ca:
                    82:52:75:f4:35:f9:65:90:46:f1:32:5b:9d:8e:4b:
                    31:3b:69:b9:0b:45:36:32:17:7b:09:27:c5:57:68:
                    8b:62:4e:8d:37:90:6c:d7:ed:e8:06:23:d4:b1:cd:
                    59:6b:e2:44:77:ae:10:ae:a3:6d:31:6e:64:36:6b:
                    f3:f6:33:b8:bb:10:d3:50:9a:3a:3e:01:a5:88:3b:
                    12:dd:4d:4f:ab:d3:41:f8:82:0e:04:60:58:3d:1b:
                    e7:32:68:2d:21:85:11:d5:8c:86:83:f3:9e:ba:91:
                    aa:ed:11:dc:ba:83:af:df:7e:38:a0:f5:bc:2d:a6:
                    e7:58:11:35:de:76:5b:04:ab:61:d6:9c:46:91:fc:
                    90:ca:ef:3b:26:1e:b7:a0:de:7b:97:1e:0a:cd:97:
                    1c:21:f6:1e:e6:12:f2:31:52:a1:bf:93:7f:d8:e0:
                    c3:e7:2d:cc:71:07:9f:f5:5b:2f:d4:f5:8d:46:cb:
                    11:4d:47:d5:9a:41:08:cf:19:64:a8:b2:cf:3d:99:
                    7a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D5:8B:B8:55:AB:E6:26:01:35:76:B2:3F:78:75:56:6D:BA:A0:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7bd97e6f-8a06-3df9-a962-df72660561f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.45.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:9a:89:d5:7b:4d:6d:22:6b:3a:1c:dc:6c:32:d6:0a:68:7c:
         6c:d9:aa:10:0e:53:d6:c6:f9:35:72:b3:0e:b0:84:1f:b5:b7:
         bd:e7:b9:9d:00:5c:d4:79:6e:2f:05:cc:bd:0c:19:05:e6:5a:
         79:d1:2e:32:0c:39:bc:39:bc:f4:e3:3f:2a:5d:2e:ff:04:9e:
         0b:69:dc:de:a3:e4:20:3c:2e:48:1d:ff:fe:ea:6d:8a:9e:a3:
         2e:b9:0c:bc:da:10:5d:28:56:a4:5d:00:bf:68:ab:ef:e4:23:
         d1:7a:ce:2c:25:c7:31:90:bf:df:2c:d3:63:df:1d:2a:76:c0:
         67:eb:fa:4a:22:29:79:ce:b1:0d:21:55:01:b6:d8:e1:a7:af:
         a4:ea:6b:93:f8:08:b5:bb:81:16:86:7b:69:7d:f2:ae:cd:43:
         f0:70:a1:35:dd:59:51:f4:63:59:01:ab:fa:11:85:72:57:46:
         04:a0:4a:dd:d8:75:a0:82:94:31:ee:63:c4:cb:05:74:80:8c:
         f0:92:1d:e8:67:be:fe:c1:0e:47:e8:dc:a9:3c:9c:1e:72:b0:
         1d:69:45:58:50:dc:7a:e0:32:b3:10:9e:e2:59:c3:d5:c4:39:
         48:f6:a6:2b:83:50:52:ff:bc:be:8e:df:7f:b0:ca:1e:3e:ac:
         df:13:24:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYXpvYo7rS50ZnPAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk
OGMzMTJiNjgtMjEwYi00YTBmLTk1MjctMTQ0ZDdiOTY1N2FkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KL+V0Fuv0f6kdtgrkKslxQgIfwq5a96tbgr
r5znVxDqiRPzGSCc9R90C1NfioyT358OlNNfiJxG8cqCUnX0NfllkEbxMludjksx
O2m5C0U2Mhd7CSfFV2iLYk6NN5Bs1+3oBiPUsc1Za+JEd64QrqNtMW5kNmvz9jO4
uxDTUJo6PgGliDsS3U1Pq9NB+IIOBGBYPRvnMmgtIYUR1YyGg/OeupGq7RHcuoOv
3344oPW8LabnWBE13nZbBKth1pxGkfyQyu87Jh63oN57lx4KzZccIfYe5hLyMVKh
v5N/2ODD5y3McQef9Vsv1PWNRssRTUfVmkEIzxlkqLLPPZl6rwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJDVi7hVq+YmATV2sj94dVZtuqAgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvN2JkOTdlNmYtOGEwNi0z
ZGY5LWE5NjItZGY3MjY2MDU2MWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALy0AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGWaidV7TW0iazoc3Gwy1gpofGzZqhAOU9bG+TVysw6whB+1t73nuZ0A
XNR5bi8FzL0MGQXmWnnRLjIMObw5vPTjPypdLv8Engtp3N6j5CA8Lkgd//7qbYqe
oy65DLzaEF0oVqRdAL9oq+/kI9F6ziwlxzGQv98s02PfHSp2wGfr+koiKXnOsQ0h
VQG22OGnr6Tqa5P4CLW7gRaGe2l98q7NQ/BwoTXdWVH0Y1kBq/oRhXJXRgSgSt3Y
daCClDHuY8TLBXSAjPCSHehnvv7BDkfo3Kk8nB5ysB1pRVhQ3HrgMrMQnuJZw9XE
OUj2piuDUFL/vL6O33+wyh4+rN8TJP8=
-----END CERTIFICATE-----
Generated at Wed Aug 6 12:33:47 2025 by rpki-client