Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/79134b34-0f8f-36f6-8fe1-c7f70751b7c7.roa
File:                     79134b34-0f8f-36f6-8fe1-c7f70751b7c7.roa (raw, json)
Hash identifier:          NNm+CUI8xiE9qUsKFnWk5Q9exPFZS7CjIRnEYctYTds=
Subject key identifier:   00:8B:83:7D:54:C5:8E:E2:D5:A2:96:90:7D:C0:3B:13:40:FE:9C:96
Certificate issuer:       /CN=5742dde3-84a3-4488-a01c-525734c4d81b
Certificate serial:       010D0C9F4328584D32D4D75175533743F3C6A7FE
Authority key identifier: 80:F4:AF:44:45:DA:5F:FA:59:CE:9C:A8:4F:96:82:FF:39:43:C6:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/79134b34-0f8f-36f6-8fe1-c7f70751b7c7.roa
Signing time:             Tue 17 Mar 2026 13:00:41 +0000
ROA not before:           Tue 17 Mar 2026 13:00:41 +0000
ROA not after:            Mon 15 Jun 2026 13:00:41 +0000
asID:                     397384
IP address blocks:        45.41.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:32:d4:d7:51:75:53:37:43:f3:c6:a7:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5742dde3-84a3-4488-a01c-525734c4d81b
        Validity
            Not Before: Mar 17 13:00:41 2026 GMT
            Not After : Jun 15 13:00:41 2026 GMT
        Subject: CN=f2e0fd39-ca8d-4d63-8ccd-438dfd815741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:05:ec:08:cb:e1:44:61:77:1a:69:65:51:74:
                    1b:32:27:a3:91:5c:5e:5a:b8:71:04:fb:02:4e:05:
                    7a:2e:78:1f:e8:e4:21:f5:07:73:cb:85:e3:9e:cf:
                    57:a9:55:e2:4e:da:69:9b:7f:f6:03:ff:18:dc:50:
                    30:37:8a:2e:34:4c:d2:d3:7f:04:17:7d:f2:ba:ab:
                    44:0f:91:2e:cc:18:74:f2:8e:e2:11:e8:bf:db:c6:
                    8c:e9:78:20:cc:ef:c0:f0:96:08:e7:40:49:db:d7:
                    82:20:df:af:a3:10:36:2d:ef:2c:59:5c:21:f4:c6:
                    a2:5b:97:bb:87:5b:17:c1:2b:40:52:f0:79:20:a0:
                    ce:f5:95:f3:99:32:d1:07:c0:32:e8:d0:ce:e7:8b:
                    6c:6b:36:af:72:a6:de:8a:4f:12:d3:26:c8:0f:83:
                    32:b9:b1:d8:87:81:42:d3:3c:53:7d:98:e2:ae:24:
                    a7:71:71:77:7e:f6:64:00:ad:d1:e0:6b:7a:e9:69:
                    04:8a:63:55:f2:88:22:33:5b:38:fc:b9:06:5e:8f:
                    ea:2c:e9:d4:08:ca:51:56:a8:c0:80:63:fb:bb:3d:
                    ca:d5:0f:47:79:9d:4b:dc:cc:35:23:33:b3:aa:69:
                    92:df:ff:c5:b4:51:ac:39:10:f9:b9:d5:b2:aa:c8:
                    cc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:8B:83:7D:54:C5:8E:E2:D5:A2:96:90:7D:C0:3B:13:40:FE:9C:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/79134b34-0f8f-36f6-8fe1-c7f70751b7c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.crl

            X509v3 Authority Key Identifier:
                keyid:80:F4:AF:44:45:DA:5F:FA:59:CE:9C:A8:4F:96:82:FF:39:43:C6:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:e5:03:f8:57:37:e0:7d:55:71:98:87:24:24:31:51:9a:da:
         88:62:04:f5:13:be:7a:5a:ac:25:92:81:40:d9:44:90:8c:9b:
         91:48:92:93:11:02:5d:b9:7b:7a:65:e7:8c:e7:3f:0a:db:d6:
         fb:93:8f:fd:85:cb:4d:e8:84:39:54:4c:df:d6:ed:58:7b:82:
         10:bc:ca:c3:61:6d:91:7a:85:e3:e4:82:bb:19:8b:80:00:34:
         e6:f3:e8:d8:ed:ae:3a:2a:51:e3:54:00:c8:f0:5d:c1:99:13:
         95:51:bd:bf:98:be:10:76:d1:a7:8f:99:33:d6:9f:35:d9:fb:
         e8:7d:7a:5b:72:30:ce:bc:46:27:d4:07:59:55:f3:45:3a:78:
         74:a8:ab:3a:fb:3e:c6:db:b4:cc:01:67:3c:c9:44:f9:d8:a1:
         2d:d3:93:58:bc:88:68:4f:a5:53:bf:40:d5:ac:13:e9:bb:97:
         8d:0c:ab:1a:63:44:8c:24:80:fc:23:08:3a:8a:14:8a:34:09:
         aa:aa:3f:ea:97:79:66:de:49:ac:fb:db:84:c0:a9:7b:1a:8d:
         ad:a2:e7:32:03:0c:c9:54:6f:45:c8:22:4a:fa:d2:72:fa:ec:
         71:85:b0:f4:2b:da:67:b2:b6:f1:f3:27:b6:5e:14:5c:11:6e:
         4d:ce:01:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0y1NdRdVM3Q/PGp/4wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTc0MmRkZTMtODRhMy00NDg4LWEwMWMtNTI1NzM0YzRk
ODFiMB4XDTI2MDMxNzEzMDA0MVoXDTI2MDYxNTEzMDA0MVowLzEtMCsGA1UEAxMk
ZjJlMGZkMzktY2E4ZC00ZDYzLThjY2QtNDM4ZGZkODE1NzQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQXsCMvhRGF3GmllUXQbMiejkVxeWrhxBPsC
TgV6Lngf6OQh9Qdzy4Xjns9XqVXiTtppm3/2A/8Y3FAwN4ouNEzS038EF33yuqtE
D5EuzBh08o7iEei/28aM6XggzO/A8JYI50BJ29eCIN+voxA2Le8sWVwh9MaiW5e7
h1sXwStAUvB5IKDO9ZXzmTLRB8Ay6NDO54tsazavcqbeik8S0ybID4MyubHYh4FC
0zxTfZjiriSncXF3fvZkAK3R4Gt66WkEimNV8ogiM1s4/LkGXo/qLOnUCMpRVqjA
gGP7uz3K1Q9HeZ1L3Mw1IzOzqmmS3//FtFGsORD5udWyqsjMrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFACLg31UxY7i1aKWkH3AOxNA/pyWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81NzQy
ZGRlMy04NGEzLTQ0ODgtYTAxYy01MjU3MzRjNGQ4MWIvNzkxMzRiMzQtMGY4Zi0z
NmY2LThmZTEtYzdmNzA3NTFiN2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTc0MmRkZTMtODRhMy00NDg4LWEw
MWMtNTI1NzM0YzRkODFiLzU3NDJkZGUzLTg0YTMtNDQ4OC1hMDFjLTUyNTczNGM0
ZDgxYi5jcmwwHwYDVR0jBBgwFoAUgPSvREXaX/pZzpyoT5aC/zlDxi8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy81NzQyZGRlMy04NGEzLTQ0ODgtYTAxYy01MjU3
MzRjNGQ4MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSkjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHnlA/hXN+B9VXGYhyQkMVGa2ohiBPUTvnparCWSgUDZRJCMm5FIkpMR
Al25e3pl54znPwrb1vuTj/2Fy03ohDlUTN/W7Vh7ghC8ysNhbZF6hePkgrsZi4AA
NObz6NjtrjoqUeNUAMjwXcGZE5VRvb+YvhB20aePmTPWnzXZ++h9eltyMM68RifU
B1lV80U6eHSoqzr7PsbbtMwBZzzJRPnYoS3Tk1i8iGhPpVO/QNWsE+m7l40Mqxpj
RIwkgPwjCDqKFIo0CaqqP+qXeWbeSaz724TAqXsaja2i5zIDDMlUb0XIIkr60nL6
7HGFsPQr2meytvHzJ7ZeFFwRbk3OATM=
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:06:47 2026 by rpki-client