Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/17adaa21-9002-351d-895a-51124d6fbeeb.roa
File:                     17adaa21-9002-351d-895a-51124d6fbeeb.roa (raw, json)
Hash identifier:          af9JoFPjwKrQra7fqS8fAdYJWdgIOpjGLGZrgwiYKnw=
Subject key identifier:   7D:70:FA:FD:37:56:4B:F4:B6:50:F1:69:4B:BB:BA:DA:D1:A7:52:41
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B5DD1DC685E75237222E60100
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/17adaa21-9002-351d-895a-51124d6fbeeb.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     64267
IP address blocks:        45.39.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d1:dc:68:5e:75:23:72:22:e6:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=41b267f0-2a1f-4e52-a288-7df804eab8a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1d:8d:c0:67:8c:eb:20:92:2f:df:2d:c9:5b:
                    29:ae:9c:e6:45:71:a6:42:16:6b:92:0d:ed:97:f8:
                    04:1d:9e:82:f5:de:1e:fb:d6:55:c4:a2:b7:94:15:
                    d5:84:af:cb:79:34:70:dc:33:58:66:8c:f5:29:d4:
                    c3:7d:ab:29:76:67:58:b2:fc:6a:c0:67:be:30:4c:
                    33:1f:66:ad:70:99:98:5c:e6:de:30:78:7f:c6:15:
                    eb:11:a9:54:7c:95:2c:33:4f:f8:19:f1:bb:a2:6a:
                    d1:b3:f1:08:04:5f:dd:c8:10:e5:c0:13:08:17:80:
                    19:60:86:f6:58:2c:79:fb:f8:63:b9:94:f5:97:d6:
                    95:ac:7d:6d:cc:55:bb:16:33:14:09:d1:2b:51:3f:
                    f0:f9:00:5f:fa:c7:72:ab:8b:f8:eb:9f:a9:2f:d7:
                    33:0c:d9:7f:9f:f5:10:92:19:07:82:c2:0d:2a:1b:
                    6f:ea:e8:e4:8e:ad:2d:f6:c7:be:21:7c:fc:5e:79:
                    d9:51:16:f4:b2:cf:9d:74:57:9d:b9:95:1d:8d:6e:
                    66:84:30:54:c7:b9:f8:da:07:d5:02:c1:61:38:0e:
                    70:87:93:81:4b:f8:14:c5:ee:05:7c:63:ee:96:12:
                    f5:67:e1:74:24:53:f3:19:47:ab:de:36:2c:29:38:
                    f8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:70:FA:FD:37:56:4B:F4:B6:50:F1:69:4B:BB:BA:DA:D1:A7:52:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/17adaa21-9002-351d-895a-51124d6fbeeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:d0:39:aa:c2:b9:b7:80:f1:df:04:1a:db:c3:84:37:7b:93:
         81:76:35:68:fe:c1:98:ac:fb:fc:37:62:c2:fc:bc:f5:2e:78:
         30:aa:33:22:3f:a5:e9:0a:a4:c3:f2:0a:40:5e:7b:89:9d:e0:
         29:fb:10:7f:cb:ae:b4:69:9a:9f:af:3e:ff:51:b9:32:69:6c:
         09:9c:e4:e1:03:59:4d:a2:e6:65:68:2d:22:07:26:9a:d5:a0:
         57:54:5e:71:22:36:38:4b:e8:b3:7b:59:06:6b:ad:c1:47:38:
         53:f7:ae:94:05:9b:2e:09:e6:2d:2f:78:15:a8:2e:ee:27:aa:
         99:ea:c8:25:68:55:c5:13:b7:f1:1e:89:39:01:ec:1f:ee:05:
         f7:50:52:da:4c:c6:72:f3:9f:0d:05:56:27:b0:49:93:76:97:
         b9:fb:17:b0:af:f6:80:5b:20:e2:a2:31:0b:02:a9:6f:ba:d8:
         e2:43:1f:50:84:88:67:32:56:aa:c8:df:4a:48:58:cf:28:ce:
         b5:7f:c2:62:41:df:a9:dd:d9:e3:e2:f6:a0:fd:ca:c2:90:28:
         34:36:0d:4f:48:20:47:ef:42:2f:5f:72:51:69:04:fe:29:dd:
         ba:60:50:82:ae:ef:36:e5:c9:ee:be:7f:9d:82:5b:3e:fb:e1:
         0e:bd:8b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:13:26 2025 by rpki-client