Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7bd97e6f-8a06-3df9-a962-df72660561f6.roa
File:                     7bd97e6f-8a06-3df9-a962-df72660561f6.roa (raw, json)
Hash identifier:          YZseRClcyftIcI9FAkMFLHYIe4Ux1fms1rNgESJ9Rss=
Subject key identifier:   AD:1F:68:4A:CE:4F:54:7F:42:4B:F1:CF:C6:AB:26:0C:78:5C:40:3B
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D7FB2489083EAB965E698
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7bd97e6f-8a06-3df9-a962-df72660561f6.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     395498
IP address blocks:        47.45.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:7f:b2:48:90:83:ea:b9:65:e6:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=2ad02276-47c0-46c9-bf22-5203d3ab5421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:65:fa:09:27:cb:a1:4b:70:7a:60:ec:d4:68:
                    21:a6:82:be:0f:d3:18:6f:3d:b3:0e:37:1c:55:1a:
                    53:36:7d:71:fe:30:2c:a8:2a:c9:6b:49:c7:38:83:
                    9b:f0:73:c6:80:5d:7f:00:cb:2d:1f:ec:19:79:6d:
                    e4:e8:5f:1c:e6:55:96:fa:aa:a4:44:31:a6:16:59:
                    dc:51:d3:fc:b3:85:e1:33:fd:58:9c:78:2e:ba:f2:
                    07:f9:ff:9e:09:be:f9:f7:8b:e8:d8:72:24:d6:1f:
                    ae:95:34:6c:c7:49:73:9f:14:b2:b3:7c:9d:4d:a9:
                    28:fe:ca:12:7f:4e:c7:7b:de:a1:60:3c:a0:31:71:
                    c1:ff:84:28:47:99:76:af:e9:fb:51:4f:29:9f:4b:
                    8d:50:de:4f:47:8c:7f:6e:f2:6a:e1:df:59:7a:dd:
                    41:df:63:1e:24:32:0e:78:a5:25:cf:7a:d5:9d:44:
                    56:ab:49:38:39:20:01:19:a5:e9:7a:9b:04:06:bd:
                    b1:98:f6:7a:48:2c:3e:d3:29:93:b1:23:3a:30:f0:
                    b1:70:83:53:2f:f5:6b:94:14:80:b1:65:a4:e3:23:
                    8a:68:18:df:33:d3:ab:25:c7:e0:ad:4d:4b:f7:90:
                    2d:cd:dc:a2:f3:60:31:95:93:0e:ca:4c:26:f2:55:
                    25:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:1F:68:4A:CE:4F:54:7F:42:4B:F1:CF:C6:AB:26:0C:78:5C:40:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7bd97e6f-8a06-3df9-a962-df72660561f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.45.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:04:f0:a2:81:df:8c:76:ea:01:15:37:e6:07:91:39:4d:44:
         36:3f:09:79:fd:02:5b:3a:77:e0:0b:17:60:03:c2:16:5f:18:
         15:ef:f3:7f:b7:e4:11:f7:e4:11:35:f2:e4:a5:bc:f5:9d:e5:
         45:fe:3d:0a:ab:da:9b:3b:a2:f2:76:07:43:04:bb:69:d4:b5:
         05:35:0a:c2:42:ae:c5:99:15:8d:5b:43:d0:02:06:c0:af:d9:
         49:e7:ea:67:62:00:3a:0a:10:a4:d4:de:d4:49:f1:78:99:b7:
         ba:e2:a8:ef:8b:73:65:75:82:62:7e:8b:61:23:75:40:b0:8f:
         75:8e:70:03:41:48:2f:2b:ed:1f:d6:e3:36:44:bb:64:07:75:
         58:7a:b7:b1:b7:71:46:fb:15:d2:fc:9b:a7:4b:99:00:8d:c0:
         e2:d6:74:dd:ff:fd:9a:95:47:7a:6b:26:25:e9:b2:f0:58:40:
         a4:6b:19:62:aa:47:45:b3:3c:a0:9b:84:bf:6d:71:4e:cc:04:
         37:6f:a4:cc:b3:7e:71:4d:15:46:03:b9:1e:2c:77:31:19:1b:
         e0:5e:f3:14:9c:2f:8a:11:07:eb:ce:66:87:2d:5c:54:1d:51:
         34:0f:24:85:17:f3:dc:98:df:a0:d8:e6:b0:2d:28:b4:e7:d4:
         5b:cf:86:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:19:28 2025 by rpki-client