Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d7d2f62-5dcb-3832-9255-b9340b0bcbe7.roa
File:                     9d7d2f62-5dcb-3832-9255-b9340b0bcbe7.roa (raw, json)
Hash identifier:          a7k7W7iQ4ZNpZQM/CP2zFQBZojUC1bM2gvF9+jwCjjI=
Subject key identifier:   C1:6A:B8:F7:42:EA:A4:DF:77:36:D7:D6:69:40:F0:A0:44:0D:AF:53
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584AD4347BF90B912DA169297B80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d7d2f62-5dcb-3832-9255-b9340b0bcbe7.roa
Signing time:             Tue 12 Aug 2025 05:57:53 +0000
ROA not before:           Tue 12 Aug 2025 05:57:53 +0000
ROA not after:            Mon 10 Nov 2025 06:57:53 +0000
asID:                     213990
IP address blocks:        45.74.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d4:34:7b:f9:0b:91:2d:a1:69:29:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Aug 12 05:57:53 2025 GMT
            Not After : Nov 10 06:57:53 2025 GMT
        Subject: CN=3d8b004f-a83c-4b70-a457-c5e41a45fc95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:78:ba:c1:91:75:5b:cd:59:25:9a:57:a7:6a:
                    81:9a:ff:d1:63:0c:f3:ff:4b:21:50:d2:d3:2a:a0:
                    4c:a6:a5:8e:62:78:86:f0:f1:e2:fa:63:e7:37:38:
                    2c:20:7f:76:8a:3d:fd:a7:cb:00:a9:91:a7:55:36:
                    86:96:5e:f5:ec:e6:2a:8d:b1:a9:18:7b:d8:b0:e3:
                    e4:68:14:f2:5f:f8:6b:1a:6e:80:6e:93:ad:1f:e0:
                    dc:cc:76:e3:77:75:78:f2:69:8a:80:0e:99:22:0c:
                    a3:da:d7:f2:ad:94:bf:fc:f5:bb:8b:27:1d:a3:95:
                    7f:f0:a1:43:5b:ae:6f:52:96:08:4d:f7:71:78:84:
                    33:7f:66:01:b5:9f:84:7c:be:7f:f8:03:05:53:0e:
                    19:42:ee:a5:b7:cf:9e:c2:f4:f2:8b:8c:67:d1:7e:
                    73:3a:0f:80:fc:33:9b:a6:66:44:bc:dc:4b:77:82:
                    87:49:ce:ee:83:c0:3a:69:e3:7d:5c:69:cc:fe:9f:
                    51:46:83:f2:99:f2:a7:d2:18:db:48:f0:92:7d:8f:
                    38:8c:49:02:7d:c4:c9:7d:2c:67:7a:53:43:ea:a0:
                    be:db:0e:ad:c5:35:4f:37:15:ab:fa:6d:eb:08:0e:
                    ad:73:92:98:48:55:c4:06:ad:d8:76:e4:8d:68:f4:
                    6d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:6A:B8:F7:42:EA:A4:DF:77:36:D7:D6:69:40:F0:A0:44:0D:AF:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d7d2f62-5dcb-3832-9255-b9340b0bcbe7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:f6:68:5d:f5:f1:92:ee:92:1f:00:d8:aa:fd:da:5e:9d:d8:
         61:51:56:63:22:bc:c9:ae:d1:3e:29:19:4a:41:75:9d:e8:da:
         38:04:df:93:45:26:4f:54:95:79:1c:4c:d9:da:33:97:04:9c:
         25:ae:4f:72:79:c9:1d:7f:14:00:76:a6:40:7f:34:a6:b6:ae:
         a9:ec:0c:28:1b:5c:9f:d2:6d:ea:81:b9:c8:02:be:28:3c:55:
         79:40:1e:bd:65:13:98:e5:d8:ec:c0:54:f0:62:53:45:f5:79:
         20:a8:42:62:a3:cd:47:3d:83:51:1f:e0:5f:80:80:a5:db:ef:
         d5:53:4c:e6:8d:d1:49:ea:5c:24:9c:6d:1a:3e:05:66:82:9c:
         72:8d:bb:c2:aa:15:91:04:75:a7:e6:1c:f7:b6:93:e9:31:cb:
         88:d1:db:16:da:59:2e:30:6a:f2:53:ec:82:a7:a4:37:09:75:
         7d:f6:d3:4e:76:9d:25:30:70:f8:30:1a:b2:31:48:61:92:db:
         70:01:f9:f5:31:17:8b:43:1e:b3:53:4a:af:2d:a7:9b:1d:63:
         dd:50:53:09:0f:34:f6:53:2f:ba:1e:84:83:09:22:04:3c:f5:
         40:f8:5f:d1:2d:a5:47:84:38:94:6d:e8:09:9d:d9:f6:b2:59:
         78:c5:e8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:29:04 2025 by rpki-client