Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/41b70004-4da3-320f-8e66-fc0832522409.roa
File:                     41b70004-4da3-320f-8e66-fc0832522409.roa (raw, json)
Hash identifier:          LTyfw7Ivvb55z321F/KPETNN1hsDFD4xrGlcIwk090M=
Subject key identifier:   50:80:D4:26:DD:FD:E2:78:68:83:8F:33:B4:04:33:A1:A9:A9:F4:B4
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584DCBA986BF7DB4A22346CA4E40
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/41b70004-4da3-320f-8e66-fc0832522409.roa
Signing time:             Mon 11 May 2026 06:52:15 +0000
ROA not before:           Mon 11 May 2026 06:52:15 +0000
ROA not after:            Sun 09 Aug 2026 06:52:15 +0000
asID:                     140641
IP address blocks:        45.74.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cb:a9:86:bf:7d:b4:a2:23:46:ca:4e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: May 11 06:52:15 2026 GMT
            Not After : Aug  9 06:52:15 2026 GMT
        Subject: CN=71bfa163-c869-4b5a-aab3-c594ff0eebb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:aa:f0:03:f3:cb:cc:1d:d8:ee:02:2c:1c:72:
                    4d:25:53:0f:67:1a:68:52:55:d0:f5:85:ff:64:56:
                    2e:ad:b6:be:2d:cc:51:0a:c7:5f:44:00:53:84:47:
                    e1:4a:d7:2c:63:26:ec:1d:3d:a8:37:1e:f6:75:41:
                    3c:67:3b:15:5c:32:f4:95:3f:3a:3f:08:ef:e5:58:
                    a3:01:3e:fc:28:22:67:da:c3:29:73:1e:3f:5b:80:
                    ab:22:bd:b4:50:e4:ce:d2:2b:82:4b:b0:de:78:4a:
                    c9:ee:f7:d8:28:80:72:ba:1f:17:32:b4:a8:b8:db:
                    b8:51:ad:65:0c:86:02:27:39:ad:e2:b4:f5:0e:15:
                    e7:8a:d2:a8:cb:6f:cf:e5:f8:a4:56:af:4c:ed:0e:
                    28:9c:be:fa:08:f5:a2:72:b8:29:aa:05:5e:b1:92:
                    76:10:ce:cc:a2:3b:14:e5:af:e6:92:3d:85:b4:35:
                    9c:6b:ce:f2:7e:06:31:db:4f:90:db:54:45:0c:1c:
                    be:8f:34:d4:88:62:de:cb:19:b1:4f:71:ba:ed:74:
                    d9:c4:3f:16:f2:43:88:ef:4c:e0:5f:8d:29:be:b9:
                    a0:bb:21:f3:9e:d7:2f:e6:ac:8a:7e:d8:a7:ae:21:
                    ef:72:19:19:ae:f8:dd:6b:e3:4f:2d:65:ca:d3:d3:
                    5b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:80:D4:26:DD:FD:E2:78:68:83:8F:33:B4:04:33:A1:A9:A9:F4:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/41b70004-4da3-320f-8e66-fc0832522409.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:02:75:62:9d:5c:90:f6:b5:ec:1e:8e:0e:cf:99:88:2d:7e:
         38:8c:8a:65:9c:7f:96:79:fb:73:98:df:4b:dd:35:58:a5:0c:
         a3:c3:9f:6a:9f:45:a1:6a:e9:cc:bb:c5:3d:71:81:dc:51:63:
         f6:f3:0f:08:14:80:ef:5a:4a:5c:8a:6b:5c:71:d3:bb:ef:6a:
         7b:ab:53:81:8b:6f:24:ff:9c:15:e6:e0:34:f1:85:75:75:e8:
         55:3d:98:2f:d4:c9:fb:76:48:39:10:ea:d2:6c:7d:82:b6:e9:
         3c:06:c2:55:0e:10:4e:ea:21:37:77:09:c2:09:a4:d2:d3:0e:
         fe:92:19:b5:67:40:89:b3:2f:ee:32:28:dd:03:0c:52:c1:d3:
         f6:4e:d0:44:57:ff:5e:08:95:51:d6:79:cc:98:e0:a7:f8:70:
         2a:ef:e8:a1:23:ad:e6:d0:8e:d2:a4:de:c2:c9:81:ab:5d:01:
         fe:68:2d:51:ca:ea:4f:1a:91:9f:af:3a:83:4d:9f:4a:1b:ac:
         40:ca:7e:1e:00:d4:13:52:15:d0:62:0d:14:bb:ec:0f:e9:51:
         9c:cd:bb:f4:e8:f8:96:68:17:7e:42:8b:74:d6:97:0b:2f:a6:
         68:05:d6:f6:b8:1f:7d:19:16:60:5f:62:9e:21:1c:3b:13:aa:
         ba:2e:69:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:55:29 2026 by rpki-client