Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f97ba3ee-a2d5-3a5e-8fd6-bb237d461c03.roa
File:                     f97ba3ee-a2d5-3a5e-8fd6-bb237d461c03.roa (raw, json)
Hash identifier:          2ta0zhe9O84GwLqngLiGMlFNTkQfNCsO0pjF1VpQPi0=
Subject key identifier:   36:0E:4B:88:6C:96:19:39:90:F4:C6:30:C6:22:BD:4F:A4:EA:BD:5E
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584B944228C577B6E32C9FC05760
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f97ba3ee-a2d5-3a5e-8fd6-bb237d461c03.roa
Signing time:             Mon 20 Oct 2025 01:00:31 +0000
ROA not before:           Mon 20 Oct 2025 01:00:31 +0000
ROA not after:            Sun 18 Jan 2026 02:00:31 +0000
asID:                     29802
IP address blocks:        45.74.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:94:42:28:c5:77:b6:e3:2c:9f:c0:57:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Oct 20 01:00:31 2025 GMT
            Not After : Jan 18 02:00:31 2026 GMT
        Subject: CN=7f79da0e-2a96-46fb-8ae3-7739a06b8659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fa:a5:27:7e:ac:7e:13:c2:9b:6e:bc:93:49:
                    1e:40:7e:b0:5f:e9:06:f5:ef:dd:50:7a:62:b0:16:
                    9b:ee:72:83:bb:8e:f6:18:b6:05:d7:62:f3:26:87:
                    a1:4f:e1:c0:82:0b:3f:a1:17:a5:82:99:07:c5:10:
                    83:e7:15:2a:9c:ca:36:7b:84:5f:a5:78:45:87:99:
                    f4:00:be:51:46:b7:cf:b8:1c:fc:4a:9b:3d:56:28:
                    e4:b3:4e:8a:d4:d4:17:30:5e:77:04:23:93:8a:13:
                    78:e5:3a:78:b5:3c:a6:16:6e:e8:2b:44:f9:7b:2c:
                    21:7b:a3:81:7d:a2:af:3a:e0:06:7c:3a:2a:a7:eb:
                    92:76:15:be:63:15:be:83:e0:79:07:5b:6a:ef:ee:
                    05:74:d0:28:06:ea:1a:2c:b9:fa:5d:fb:91:13:1c:
                    0e:43:b8:ae:76:b0:01:80:44:52:5a:eb:32:b1:45:
                    2b:2b:3a:27:25:78:f3:0a:16:d4:f4:9c:3a:0d:e4:
                    05:9d:72:66:d7:5a:ad:0f:ba:10:55:62:96:31:c8:
                    f3:45:ad:c5:df:af:13:ac:67:4f:d2:9f:24:b9:67:
                    08:e4:cf:80:52:68:83:ba:7e:3e:b4:f8:52:72:e0:
                    c9:8d:82:ce:b8:4b:77:ed:23:40:e2:28:fe:cf:82:
                    32:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:0E:4B:88:6C:96:19:39:90:F4:C6:30:C6:22:BD:4F:A4:EA:BD:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f97ba3ee-a2d5-3a5e-8fd6-bb237d461c03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:a4:63:b2:88:70:24:db:65:e5:16:ce:cd:66:24:c9:7f:90:
         00:c4:47:42:88:f6:91:4c:22:8a:54:0c:b2:5d:23:7c:8b:9b:
         45:f0:11:1f:13:1f:07:4e:2c:4f:4b:9a:88:2d:a6:c7:e6:4c:
         26:62:62:7e:c6:32:86:cf:f0:7b:ad:8a:14:bc:9f:6e:aa:fd:
         25:ea:18:fc:ad:98:e4:c2:93:6b:54:2c:53:86:4d:ee:ff:03:
         f6:fe:57:b3:ce:b8:27:5b:b6:ca:dd:66:4d:db:f1:81:0e:70:
         2a:f7:72:4e:46:ed:a9:47:0a:d8:80:60:81:58:1d:9b:fc:0d:
         30:5f:46:e2:04:4e:6a:57:2b:2a:bb:ef:d0:a8:ff:74:8d:1f:
         19:2b:a1:48:c7:34:c4:fc:c1:0e:96:c7:01:d8:0d:02:17:90:
         c9:fb:fd:27:a9:f2:c5:71:d8:27:fe:dc:3f:28:ea:23:0c:0e:
         5d:d9:37:5c:66:0e:1c:e1:f2:87:fe:fb:e0:7d:68:b1:2f:63:
         81:f3:84:f1:ad:67:c9:4b:da:20:33:cd:bb:6b:fb:b0:34:3c:
         00:85:b2:d1:63:bf:3c:82:30:6c:34:4f:30:99:c9:07:ec:b6:
         d6:7f:43:01:ea:b9:92:f0:16:88:b4:3e:33:11:f1:fb:a1:ba:
         7e:1b:29:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:49:47 2025 by rpki-client