Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1c09cfac-9e28-3c8b-901d-4af96d04dcd3.roa
File:                     1c09cfac-9e28-3c8b-901d-4af96d04dcd3.roa (raw, json)
Hash identifier:          uDgqJ0ATP5kKmjpHvnPBXLI+5VfjJBRB2bGXrkEySK4=
Subject key identifier:   97:AE:75:52:D6:73:FD:B7:01:86:8E:37:2E:08:8E:C4:A9:A2:A8:71
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B3AEC42D5E79076F0FA66C740
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1c09cfac-9e28-3c8b-901d-4af96d04dcd3.roa
Signing time:             Thu 18 Sep 2025 01:00:32 +0000
ROA not before:           Thu 18 Sep 2025 01:00:32 +0000
ROA not after:            Wed 17 Dec 2025 02:00:32 +0000
asID:                     64445
IP address blocks:        45.38.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3a:ec:42:d5:e7:90:76:f0:fa:66:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 18 01:00:32 2025 GMT
            Not After : Dec 17 02:00:32 2025 GMT
        Subject: CN=bddbd309-f723-4854-b9eb-fc7efa6a3e09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ee:e5:ab:14:be:dc:d4:cd:ff:91:66:b4:9a:
                    f4:3a:ba:e2:90:8d:d2:ca:4e:43:28:d8:6c:da:13:
                    08:93:8f:b9:cf:c5:44:36:ba:8e:05:34:a8:34:00:
                    51:3d:29:96:b0:10:a4:d9:1e:93:9d:24:c1:9a:a9:
                    8f:5c:ca:37:36:5c:2f:e9:6d:7f:1e:ec:ef:c2:fd:
                    57:6b:5b:9d:7a:30:53:13:01:1b:20:7f:07:5b:b0:
                    f6:77:fc:ac:0c:cb:f2:34:9c:b4:72:4f:4e:67:5d:
                    56:fe:7e:f7:d5:5b:66:f9:0c:f1:bc:2f:13:31:0b:
                    9a:45:56:a8:61:46:fb:68:bf:be:09:60:ea:54:1d:
                    7c:92:80:91:6d:7a:f2:05:ba:26:a5:6e:ee:77:a1:
                    8c:ed:cb:10:24:3a:0f:b7:52:4f:36:d0:22:da:50:
                    e3:fb:68:98:5f:6a:e5:2a:38:32:bc:a6:78:7a:b3:
                    30:c3:9e:85:37:3d:90:ad:81:f5:ce:33:ec:47:ba:
                    2a:d5:b5:b3:2b:ad:04:35:9c:08:a8:ff:75:78:3e:
                    fe:15:61:8e:e4:d8:c6:e1:7f:6f:a8:68:38:25:65:
                    eb:3e:50:f6:cf:47:fb:6c:ff:d3:b3:df:0a:b1:9b:
                    e2:1e:ad:92:de:3c:1c:45:77:55:68:86:63:08:19:
                    36:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:AE:75:52:D6:73:FD:B7:01:86:8E:37:2E:08:8E:C4:A9:A2:A8:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1c09cfac-9e28-3c8b-901d-4af96d04dcd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:55:5c:a5:57:6b:71:99:a5:74:9b:74:93:b7:9a:97:88:54:
         1d:4d:d9:88:da:a3:79:22:38:94:09:cf:40:28:8a:54:04:7f:
         b9:fd:b5:a9:5c:7d:b2:51:51:94:ba:3e:79:fb:ae:fc:9c:26:
         6a:2f:4c:76:25:b2:fe:41:f1:08:fc:11:d6:13:29:c0:4c:b1:
         f6:c5:be:b1:2f:cb:a6:1a:0f:74:7b:ee:39:1d:dc:59:50:d4:
         9d:d5:f5:b4:f8:9a:3a:2a:ee:47:9c:b0:2f:62:2b:db:c9:78:
         90:2f:5b:31:1f:bc:86:d7:77:ee:b2:ae:9b:b3:db:ea:b1:d4:
         5b:cb:d1:09:79:37:d4:d7:91:ab:ed:5a:b9:29:06:c3:2b:ab:
         2a:5c:34:f2:36:3a:b7:f9:b4:d9:51:2e:ec:fc:d9:3f:e4:27:
         b3:eb:a2:ec:a3:a3:27:fd:16:2f:d0:39:70:ff:4d:0b:2a:f8:
         3a:7f:be:0f:72:0c:31:38:a5:c8:58:84:e0:98:70:db:88:55:
         69:44:61:8e:63:27:46:f3:c5:14:01:51:4f:00:5f:d4:c5:3a:
         a2:6d:69:c9:8e:04:54:92:73:94:e1:d2:af:bf:4d:69:d1:ae:
         cd:a8:1b:92:b6:6a:0e:dc:d0:29:ab:f4:ab:47:1a:dc:3f:85:
         6f:90:61:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs67ELV55B28Ppmx0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDkxODAxMDAzMloXDTI1MTIxNzAyMDAzMlowLzEtMCsGA1UEAxMk
YmRkYmQzMDktZjcyMy00ODU0LWI5ZWItZmM3ZWZhNmEzZTA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkO7lqxS+3NTN/5FmtJr0OrrikI3Syk5DKNhs
2hMIk4+5z8VENrqOBTSoNABRPSmWsBCk2R6TnSTBmqmPXMo3Nlwv6W1/Huzvwv1X
a1udejBTEwEbIH8HW7D2d/ysDMvyNJy0ck9OZ11W/n731Vtm+QzxvC8TMQuaRVao
YUb7aL++CWDqVB18koCRbXryBbompW7ud6GM7csQJDoPt1JPNtAi2lDj+2iYX2rl
KjgyvKZ4erMww56FNz2QrYH1zjPsR7oq1bWzK60ENZwIqP91eD7+FWGO5NjG4X9v
qGg4JWXrPlD2z0f7bP/Ts98KsZviHq2S3jwcRXdVaIZjCBk28QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJeudVLWc/23AYaONy4IjsSpoqhxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMWMwOWNmYWMtOWUyOC0z
YzhiLTkwMWQtNGFmOTZkMDRkY2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSZnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHtVXKVXa3GZpXSbdJO3mpeIVB1N2Yjao3kiOJQJz0AoilQEf7n9talc
fbJRUZS6Pnn7rvycJmovTHYlsv5B8Qj8EdYTKcBMsfbFvrEvy6YaD3R77jkd3FlQ
1J3V9bT4mjoq7kecsC9iK9vJeJAvWzEfvIbXd+6yrpuz2+qx1FvL0Ql5N9TXkavt
WrkpBsMrqypcNPI2Orf5tNlRLuz82T/kJ7Prouyjoyf9Fi/QOXD/TQsq+Dp/vg9y
DDE4pchYhOCYcNuIVWlEYY5jJ0bzxRQBUU8AX9TFOqJtacmOBFSSc5Th0q+/TWnR
rs2oG5K2ag7c0Cmr9KtHGtw/hW+QYdg=
-----END CERTIFICATE-----
Generated at Sat Oct 11 11:08:34 2025 by rpki-client