Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d60b22ae-9455-35a8-ab4a-121fb4406b0e.roa
File:                     d60b22ae-9455-35a8-ab4a-121fb4406b0e.roa (raw, json)
Hash identifier:          AX0RpCUNEOKGKFbuz2DMc8dMpild1iac2D75QXCtMYo=
Subject key identifier:   A9:AE:A8:DE:E5:25:DC:21:52:63:6D:96:A5:A3:4C:73:E8:A6:CE:C1
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655DF35522A3B7D5C75C2880
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d60b22ae-9455-35a8-ab4a-121fb4406b0e.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     30426
IP address blocks:        47.45.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:f3:55:22:a3:b7:d5:c7:5c:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=71bee0dc-f55e-4a0d-9863-d7f7f2dc47e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a0:43:54:4a:ae:4e:bf:7b:be:de:c6:d2:b0:
                    fb:31:da:68:44:53:c1:c6:fe:ea:0d:07:ca:db:32:
                    bb:36:46:27:b4:8d:70:1e:5b:4b:9f:18:f6:b7:6e:
                    2b:c0:61:97:13:25:46:ad:e0:df:4f:54:51:c1:9d:
                    00:fc:cb:9d:70:68:44:af:d7:00:03:b9:1f:91:a9:
                    8f:c8:43:40:97:07:e0:c8:10:34:20:fd:4b:cc:78:
                    a2:e7:4f:90:59:de:eb:4a:0e:39:04:18:a5:63:9d:
                    db:0e:e5:03:91:69:cb:a2:e7:af:81:f5:f7:1e:01:
                    bc:93:4b:e9:fa:5a:ea:94:3f:e5:79:d8:68:cb:c7:
                    23:21:90:ff:dc:84:43:08:76:86:1f:8a:84:31:13:
                    8d:7f:9f:dc:ec:b4:ca:5c:4d:98:c6:c0:2b:68:02:
                    17:18:48:44:1d:d1:17:a5:e4:87:30:5e:86:11:72:
                    fb:f3:1b:32:20:ed:bf:d4:82:04:b1:bd:99:ee:64:
                    85:ce:40:0e:33:17:15:97:04:15:8d:dc:6e:b2:7d:
                    67:2f:7f:32:ef:3d:0e:64:01:72:dc:ce:e3:48:5c:
                    f0:cf:63:d1:d6:a2:9f:62:6a:d3:22:8a:54:d0:fc:
                    df:87:4a:b5:06:57:6d:30:a5:c9:ed:6f:f6:db:0e:
                    cc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:AE:A8:DE:E5:25:DC:21:52:63:6D:96:A5:A3:4C:73:E8:A6:CE:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d60b22ae-9455-35a8-ab4a-121fb4406b0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.45.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:70:9d:85:b2:44:6f:9b:3a:b9:17:a0:11:10:f7:b2:8f:5b:
         94:37:47:e8:c2:c7:e2:ef:c8:88:63:ec:75:eb:a2:3d:7d:f1:
         f6:08:0e:6c:5a:f1:fc:42:8f:f5:48:36:a4:c1:f6:74:b0:6a:
         f0:41:e2:f6:68:f9:7c:af:bc:27:68:40:45:fc:ba:17:b3:22:
         f1:72:cc:e9:ec:0c:a5:dd:a7:74:75:4a:3b:91:51:f0:0c:01:
         02:f8:3a:fe:b7:e5:9f:76:a8:21:8e:a6:25:43:74:83:b5:f1:
         20:fe:b9:9d:62:76:f0:c5:0a:eb:49:04:1a:34:f4:c4:6c:49:
         af:58:8f:19:b1:b9:0e:6b:98:d3:cd:84:5d:ef:36:20:16:fe:
         ec:0c:fb:ba:8c:2b:f6:0b:b6:6c:b8:19:b8:73:62:80:d0:18:
         fa:ea:ef:30:dc:2b:f6:03:b8:80:59:35:bb:0f:66:65:2b:c2:
         1f:62:3c:b4:93:84:d2:43:a5:56:64:7b:2c:0f:4a:39:c8:5c:
         50:9d:5f:4e:07:17:04:78:08:91:c2:fa:59:38:47:10:91:23:
         d2:c8:74:67:60:97:30:f5:8d:38:05:26:7b:2a:1f:cb:3f:b2:
         aa:f8:c8:c5:9d:39:46:8e:0a:b9:77:a2:ac:a2:e4:11:9d:61:
         9f:29:78:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:46:14 2026 by rpki-client