Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b4059038-f2a8-3c8e-8c22-6ab19e474121.roa
File:                     b4059038-f2a8-3c8e-8c22-6ab19e474121.roa (raw, json)
Hash identifier:          zBZsAsFQ8WurNdHkcwB6D2rmG2cLJHgw0R/e3jx1Bwc=
Subject key identifier:   08:5E:C7:98:FA:6E:23:B0:3A:4C:9A:E5:59:31:28:AA:33:B3:41:04
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584B86FB32AF1EB9A8F7C3A70900
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b4059038-f2a8-3c8e-8c22-6ab19e474121.roa
Signing time:             Wed 15 Oct 2025 06:52:09 +0000
ROA not before:           Wed 15 Oct 2025 06:52:09 +0000
ROA not after:            Tue 13 Jan 2026 07:52:09 +0000
asID:                     213990
IP address blocks:        45.74.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:86:fb:32:af:1e:b9:a8:f7:c3:a7:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Oct 15 06:52:09 2025 GMT
            Not After : Jan 13 07:52:09 2026 GMT
        Subject: CN=70a27626-eec2-4b50-b2f3-298a1faff98a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ba:58:6b:8c:02:01:95:16:53:fe:5b:87:03:
                    ab:84:3d:c8:54:95:1b:a0:6d:be:91:02:2e:ef:52:
                    23:25:a1:36:1d:2c:a8:d3:b3:44:d7:37:bf:54:35:
                    30:12:72:df:dd:8e:fc:4b:a9:b9:3b:c8:cc:a5:95:
                    5e:d1:af:ef:9c:01:04:07:65:b9:59:7e:8e:28:5f:
                    d2:0d:83:ca:65:bd:60:89:4a:33:c0:f9:6d:20:9b:
                    ad:c8:77:28:79:e1:4e:82:1c:fc:f3:d5:da:0c:91:
                    e5:b0:93:2c:14:a9:df:52:77:70:61:8b:f8:f6:e1:
                    22:2e:35:05:f5:ee:7f:c7:e1:80:02:2c:72:ac:6c:
                    d2:35:5a:79:85:a1:b1:eb:e2:36:79:27:0c:da:f6:
                    2b:1d:40:aa:dc:94:ce:8f:31:cc:69:58:1b:2d:81:
                    36:79:19:8c:ca:1a:b5:8c:05:0e:69:58:7f:0f:f1:
                    1e:40:b4:20:80:22:91:07:ec:a8:91:dc:67:d5:6d:
                    61:04:2a:70:70:98:82:9c:ab:10:90:e2:b0:f4:e1:
                    a5:62:d0:5d:a8:5a:53:47:19:36:9e:58:8d:fd:7e:
                    b3:dc:c3:a5:5f:18:d1:6f:54:b5:33:03:a7:01:c4:
                    01:ec:69:ad:98:02:2b:f8:fe:4c:42:3d:c5:54:85:
                    56:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:5E:C7:98:FA:6E:23:B0:3A:4C:9A:E5:59:31:28:AA:33:B3:41:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b4059038-f2a8-3c8e-8c22-6ab19e474121.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:80:21:10:ae:63:9e:43:a9:fa:af:b5:c4:a6:b7:68:52:3b:
         ed:0e:43:be:0d:5f:d5:d1:0a:d3:65:20:b9:0f:b9:fa:2d:65:
         49:55:c1:bc:c8:78:6c:99:5b:72:8b:58:d6:1f:83:c0:f5:e7:
         d0:a3:cd:99:f5:c9:f5:1f:46:63:76:f9:3c:a4:02:48:64:6d:
         3d:72:74:75:ea:b6:95:26:33:31:f7:56:bc:9b:48:7d:cd:08:
         ad:47:5d:4e:79:58:13:f0:fc:94:66:89:d0:46:d9:95:93:08:
         94:ba:38:17:fa:91:3e:41:ab:c7:dd:b8:cf:6a:23:b4:29:98:
         61:d4:f2:60:93:57:e8:7a:ce:83:06:58:ce:2f:6b:7b:81:35:
         13:ce:b0:87:83:bf:f3:86:dc:20:26:4e:9b:45:d6:a2:84:2c:
         67:25:5f:64:81:a2:a5:fa:eb:c7:44:1f:6b:6b:69:25:68:45:
         24:f8:5b:4c:8a:19:0b:6f:89:82:25:56:05:f0:d0:df:19:fa:
         4e:e1:6b:35:23:bc:df:b9:ff:b0:1f:e7:9e:47:d9:5f:a4:b0:
         14:71:a8:7c:4e:66:7a:df:39:13:65:df:0e:1d:11:70:fd:36:
         cf:71:cb:a5:27:fa:58:ba:ae:bc:41:27:3f:fe:cb:7f:19:d4:
         02:ae:68:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:50 2025 by rpki-client