Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0244c6c5-6cf2-38a6-8184-d0154f303924.roa
File:                     0244c6c5-6cf2-38a6-8184-d0154f303924.roa (raw, json)
Hash identifier:          QQV8MtFftBE+HoiQIZC96Q33dH/aVjcaHv7G76gE6dY=
Subject key identifier:   82:D3:FE:CF:B6:5E:9D:ED:D5:51:C6:F0:84:00:25:0A:99:8D:1C:45
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A848CEE60358B992FA20BC3F0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0244c6c5-6cf2-38a6-8184-d0154f303924.roa
Signing time:             Mon 14 Jul 2025 17:11:25 +0000
ROA not before:           Mon 14 Jul 2025 17:11:25 +0000
ROA not after:            Sun 12 Oct 2025 17:11:25 +0000
asID:                     44559
IP address blocks:        45.38.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:8c:ee:60:35:8b:99:2f:a2:0b:c3:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 14 17:11:25 2025 GMT
            Not After : Oct 12 17:11:25 2025 GMT
        Subject: CN=e22a7e47-dfc5-49c3-b250-f5b3114c7107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:97:c8:7b:f9:e4:39:d9:50:2f:b0:8d:b6:59:
                    72:1d:4f:37:6c:92:a1:b9:57:9c:11:f4:69:6a:50:
                    08:a7:d3:de:6b:aa:25:fa:b4:1c:15:9e:28:29:bc:
                    95:f6:3e:b2:27:17:68:4c:ba:71:37:66:71:6c:19:
                    d7:11:64:b6:10:60:a9:c0:bc:98:a8:11:2d:e5:c5:
                    25:6e:ea:ba:2c:69:bd:9b:b5:bd:cd:39:5a:88:8a:
                    cf:4d:9b:54:17:34:5e:ad:c0:31:72:d4:ba:f4:bd:
                    64:e0:c8:ff:51:d8:b6:b9:e5:4d:da:8c:d9:d3:74:
                    4c:b9:8c:43:7a:5e:d5:47:dc:1f:38:4a:90:bc:55:
                    22:b9:0d:6f:d1:d8:0b:9f:c7:6b:d4:6c:53:aa:db:
                    17:37:3b:b2:21:f0:a1:5e:e6:49:66:14:65:8e:e4:
                    9c:ac:3b:69:b7:b8:88:3f:ed:bd:0b:b9:c8:15:a1:
                    1d:37:0f:3b:35:f1:75:a4:66:df:56:73:12:64:58:
                    a8:dd:75:9d:64:2e:22:d5:65:f6:f2:2f:6f:f3:8b:
                    12:6f:cd:81:06:e0:87:b1:74:fd:e0:25:91:a3:1a:
                    07:70:72:e6:af:f0:a1:dc:27:b0:63:90:34:2d:b1:
                    d7:7e:57:fb:98:a3:10:6e:e7:84:b7:1f:cc:da:db:
                    29:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D3:FE:CF:B6:5E:9D:ED:D5:51:C6:F0:84:00:25:0A:99:8D:1C:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0244c6c5-6cf2-38a6-8184-d0154f303924.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:cd:61:32:c4:fc:e6:a1:57:f9:2d:13:0a:98:7e:f5:05:78:
         36:62:1a:9b:eb:70:c0:7f:50:f3:53:88:f2:53:83:6c:e2:e1:
         63:8f:f3:ef:b8:1e:85:9f:16:96:2d:10:07:ee:a7:9f:ab:75:
         8b:21:e9:da:0b:07:57:71:25:09:be:74:65:f9:db:d3:60:2f:
         12:cf:8d:b4:ef:de:8e:60:1b:c1:e9:e2:51:bb:a1:d0:2d:97:
         9f:df:36:a7:29:bd:5a:5e:e2:e4:46:00:46:28:3d:da:25:a1:
         f1:14:07:64:69:42:56:7d:bd:9b:7b:ad:9c:af:4c:6b:c0:57:
         ea:97:99:5f:cc:1e:0a:24:a0:2d:bb:b6:fb:64:15:65:42:77:
         b2:01:82:81:12:94:0c:0b:cc:45:f2:ce:b6:36:74:a7:30:21:
         6c:36:7e:45:1d:75:5f:17:a4:38:e7:97:7e:37:1c:d3:13:58:
         24:7e:63:2c:07:5f:02:d4:cd:b3:9d:30:5e:26:2c:88:69:a1:
         71:4b:57:92:6c:65:51:04:20:d7:17:2b:bf:30:55:f4:c5:3a:
         e8:f7:ab:44:65:b1:1a:a4:07:c3:2a:47:15:26:e5:b4:ec:a2:
         2d:74:0f:fc:1b:33:f3:37:fa:33:2b:6a:15:65:e3:6a:7c:e3:
         be:fb:c0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:13:55 2025 by rpki-client