Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d16b4c0f-73a2-3945-b59e-7a86dc71a838.roa
File:                     d16b4c0f-73a2-3945-b59e-7a86dc71a838.roa (raw, json)
Hash identifier:          EmZpkvhiWXF7ILOy9O1j9mOvvZ6k8JNCL6Z7BMleV3Q=
Subject key identifier:   39:CB:8E:18:8D:56:31:6E:A4:3E:01:FB:F4:44:5B:E6:A7:A1:9B:C9
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D7D3669C5A1D04BA07F40
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d16b4c0f-73a2-3945-b59e-7a86dc71a838.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     33753
IP address blocks:        47.45.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:7d:36:69:c5:a1:d0:4b:a0:7f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=e58eb9c7-8af7-4c03-ad2c-788cf9f52f03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:16:7b:73:3e:df:1a:26:29:b9:6d:59:bb:25:
                    da:c3:1b:7b:18:bc:56:6f:da:df:5e:f7:60:52:31:
                    3a:bc:8a:3a:f6:f8:26:55:da:4a:54:00:b1:b1:71:
                    cf:5a:90:5e:93:a6:bf:7d:51:06:d0:67:dc:8c:05:
                    c9:63:c5:27:93:14:94:54:5f:e0:6c:6f:e1:a0:75:
                    d1:db:88:d7:8b:9c:e9:87:d2:65:02:4e:1f:e8:8f:
                    24:5a:6f:cb:c2:ca:28:f2:b4:b9:ba:c8:57:9d:9e:
                    dd:5e:96:57:47:2d:d2:e5:f8:9b:79:2c:a9:de:50:
                    53:0a:36:74:d2:f1:23:f2:6d:fa:ce:61:6a:29:a9:
                    6e:bb:30:bf:05:80:59:3d:ae:2c:9e:1f:c6:8a:24:
                    35:fd:4b:ae:a1:f2:25:d3:28:dc:88:bb:be:1f:86:
                    47:75:a5:9f:e1:30:5d:52:8c:3c:be:8d:91:54:99:
                    1d:78:b3:65:c9:86:c5:6f:50:67:c7:36:0c:85:cc:
                    23:c9:3f:51:bb:60:55:b7:fd:b2:0e:ee:02:55:91:
                    c4:67:5e:af:b5:c1:21:7a:95:dc:de:89:ea:57:1f:
                    47:87:9a:b1:61:b8:ba:e0:40:60:f1:f9:ea:ba:6a:
                    32:f2:87:74:b8:59:54:50:b3:70:4c:1a:16:b8:03:
                    5e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:CB:8E:18:8D:56:31:6E:A4:3E:01:FB:F4:44:5B:E6:A7:A1:9B:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d16b4c0f-73a2-3945-b59e-7a86dc71a838.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.45.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:5d:a6:4b:d9:90:06:5c:50:35:d3:3a:77:a1:c0:f9:90:b0:
         bc:6f:d9:2d:36:e4:28:e7:9d:d1:25:74:5e:68:05:fd:7a:28:
         6d:72:c3:c1:32:25:3d:2b:fb:a3:0f:ae:9b:a2:00:23:a4:0d:
         0f:0d:0d:db:a8:8a:87:6e:33:1d:2a:cd:e4:36:f7:0b:0f:8a:
         0e:f8:a2:0e:11:e5:d0:ba:fd:a8:8c:52:61:df:3d:06:1a:a4:
         80:95:ee:b5:e6:87:35:a4:6d:6e:a0:aa:ef:51:c4:9e:19:23:
         ef:12:1c:cd:b8:be:89:8d:3a:8d:b6:2a:26:0f:83:32:ef:b5:
         02:b8:56:4b:e1:93:01:15:25:d5:11:0b:ca:fd:b3:69:2d:17:
         3c:9f:f7:72:03:26:bd:28:be:53:3c:2a:11:59:97:d4:7d:d1:
         15:51:c3:a5:e6:c8:43:f8:af:a9:91:c4:33:a0:78:43:e7:f4:
         a7:01:fe:82:cc:e7:8f:d4:f8:fd:3b:51:ea:cd:c1:b5:c1:e3:
         7c:70:1f:b4:92:28:2e:22:ea:4b:4e:34:d9:06:14:6f:f7:89:
         0d:ae:3a:c2:b9:d2:c3:fc:3c:5a:44:f6:4f:fb:4f:00:65:cf:
         f2:71:c3:61:9b:2f:f0:6d:30:49:a6:d8:a7:da:b3:a1:2d:63:
         1c:88:bc:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:14:54 2025 by rpki-client