Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1e5d1e6c-1930-362b-80a3-a7d45d30f623.roa
File:                     1e5d1e6c-1930-362b-80a3-a7d45d30f623.roa (raw, json)
Hash identifier:          E5xalYyRKLDRcjBGR9irXtYlbp/XKQQo9kFnoOK3LyQ=
Subject key identifier:   54:52:E9:46:00:B9:36:82:F2:08:F1:73:98:D4:19:53:66:F1:03:20
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B01B14AC780E9C56B554EB440
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1e5d1e6c-1930-362b-80a3-a7d45d30f623.roa
Signing time:             Thu 28 Aug 2025 13:00:41 +0000
ROA not before:           Thu 28 Aug 2025 13:00:41 +0000
ROA not after:            Wed 26 Nov 2025 14:00:41 +0000
asID:                     212238
IP address blocks:        45.39.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:01:b1:4a:c7:80:e9:c5:6b:55:4e:b4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 28 13:00:41 2025 GMT
            Not After : Nov 26 14:00:41 2025 GMT
        Subject: CN=88ce1d9b-0f9e-4d56-8ea1-afb3cf800ce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5e:8c:1b:b8:23:6d:36:fa:92:08:cf:73:36:
                    01:fa:ec:1c:7a:37:eb:c3:13:c4:11:f6:1b:bd:33:
                    0e:92:ee:e0:08:6c:a8:b8:a3:b2:dd:4a:73:83:ec:
                    bc:0b:33:c1:aa:58:27:36:bc:a4:36:8f:f2:8c:6a:
                    1d:3c:37:03:97:9b:bd:a2:3d:89:04:a1:c4:62:90:
                    a1:ea:9d:b6:0c:c8:d7:45:48:64:42:05:bf:5d:62:
                    c5:d2:88:30:97:05:f7:2c:cc:34:ed:68:a5:7a:58:
                    12:e0:df:fc:79:85:5e:9d:57:9f:5b:12:2e:ab:7b:
                    57:fb:7f:d4:c0:fb:25:6d:32:46:1f:ec:85:0f:86:
                    65:29:5d:ca:9b:50:03:df:57:1c:40:53:91:a3:c7:
                    49:40:fb:73:7f:b1:5d:9f:e4:a9:57:03:33:f0:65:
                    86:5c:71:5d:69:41:f2:86:d8:88:8a:60:68:50:7f:
                    66:a9:f0:86:3f:1e:e6:78:1b:bd:1d:36:1d:90:7d:
                    0a:9b:bd:06:09:76:e9:fb:64:44:a5:c4:ce:5b:7e:
                    1a:69:ed:70:7f:64:81:6a:0f:8f:be:54:b6:63:1b:
                    ba:8c:06:a8:a1:a5:28:9c:66:e0:6f:43:4c:22:3c:
                    36:ab:48:ec:02:fd:2b:57:ff:75:a0:a7:0c:3a:73:
                    98:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:52:E9:46:00:B9:36:82:F2:08:F1:73:98:D4:19:53:66:F1:03:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1e5d1e6c-1930-362b-80a3-a7d45d30f623.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:5c:dd:01:d5:5d:ac:6c:75:ff:e6:19:a9:a6:61:0d:eb:c3:
         34:d9:50:da:b2:80:4f:44:1f:24:82:2e:73:39:e5:60:46:85:
         d4:e1:04:bd:e3:35:63:4a:07:2b:6c:1f:8b:1e:b6:31:4d:40:
         d9:41:61:d6:aa:e8:20:0a:ff:06:4a:e8:bd:6b:26:38:b1:47:
         91:94:90:b4:18:8b:c4:b1:27:7e:21:58:23:d9:58:a6:3e:2b:
         c1:f7:51:7a:a7:26:05:d8:37:7f:12:03:da:1e:84:fb:73:95:
         22:45:52:a4:58:b4:bb:1c:e6:ef:7e:b7:9b:8e:b6:d4:95:c0:
         60:37:60:08:7d:ed:c0:fc:ea:00:d0:5e:be:51:66:ed:99:0e:
         16:ca:7f:36:e1:10:0d:13:8e:ee:cc:b7:60:1d:46:79:9e:07:
         06:89:f3:de:1f:7a:86:46:60:f9:36:ec:8b:00:a2:4d:1b:c6:
         01:c3:54:de:f6:1a:c0:a1:00:3c:25:08:73:c1:8e:80:31:6d:
         96:66:41:55:e6:f1:02:fd:e4:e8:81:b4:23:a7:52:01:06:de:
         f2:73:1d:9a:e9:84:88:93:1b:97:7b:66:df:f8:92:e7:9d:3e:
         b7:73:53:48:a1:df:cb:82:2d:e8:80:2f:3c:e4:79:32:6f:1a:
         ed:3d:c1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:17:57 2025 by rpki-client