Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/23fcc10c-aacb-32c3-8cca-b5ea4f42dc63.roa
File:                     23fcc10c-aacb-32c3-8cca-b5ea4f42dc63.roa (raw, json)
Hash identifier:          eujCEeenrRJvovx2vbxyR2JamNHkM6TiTKI+IbkNZ/o=
Subject key identifier:   5A:E9:20:5D:73:0B:A3:92:87:DB:11:84:0A:DF:70:0E:79:B7:9B:30
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B6D2CA303636C2FA8D4B77608
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/23fcc10c-aacb-32c3-8cca-b5ea4f42dc63.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     11404
IP address blocks:        45.39.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:a3:03:63:6c:2f:a8:d4:b7:76:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=9eec7294-180e-4061-9b53-d72fd12d4e5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0a:2a:fd:94:7a:27:8b:c5:33:84:12:57:62:
                    e3:4e:91:cd:51:06:1b:0b:a5:e3:79:01:d4:d8:af:
                    85:41:08:12:83:65:67:14:8f:7e:33:4f:fd:77:10:
                    ea:34:41:49:d7:b5:0d:7a:a5:99:35:f5:9f:be:97:
                    57:f9:07:6b:5b:1b:f9:93:c6:9f:b3:d6:c6:ae:0e:
                    8b:d1:44:d1:c2:dd:1e:a2:fb:d5:34:1c:69:6f:9f:
                    60:b5:af:45:30:4a:21:e2:7e:a0:2e:ad:9f:fa:02:
                    44:d4:c6:69:c5:7f:1f:eb:f6:6c:99:0b:9a:0b:22:
                    d4:ce:f5:c3:00:eb:30:ad:67:c3:15:47:cb:e3:b4:
                    a0:97:8b:30:0e:15:0a:06:0f:69:8a:e1:9d:7b:3d:
                    57:f4:ad:0d:43:2c:ac:01:76:9e:ee:46:e2:40:39:
                    6f:9f:5b:af:64:bb:9a:c1:25:5d:12:77:0a:62:02:
                    44:09:8d:67:da:ea:ca:eb:bf:8f:45:a6:4c:d4:7e:
                    c0:a4:c4:af:00:d9:94:e7:59:8b:a1:35:10:72:d9:
                    4b:28:77:1b:15:e2:76:be:5a:20:57:a1:11:2c:bb:
                    db:77:b5:2e:64:93:a9:93:c6:2e:80:58:db:5a:d2:
                    1e:79:fc:3e:c2:6a:45:18:54:4b:d7:f6:d8:52:49:
                    93:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E9:20:5D:73:0B:A3:92:87:DB:11:84:0A:DF:70:0E:79:B7:9B:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/23fcc10c-aacb-32c3-8cca-b5ea4f42dc63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:7c:f0:da:47:a7:1f:72:ff:92:b5:8f:c6:0a:c2:70:c5:9f:
         89:fd:dc:b2:e1:b3:e3:16:41:b0:8d:54:e0:b1:c5:93:0e:fc:
         6a:fd:58:05:d0:b7:fa:50:be:6e:9e:52:9a:bb:60:6d:e6:7f:
         e1:43:2a:95:29:25:09:00:f9:b3:15:44:b5:77:4d:a1:dc:19:
         94:d5:64:c0:d3:ca:e8:4f:43:27:1f:27:93:26:71:65:4c:e7:
         dc:b2:80:1d:20:b4:cf:a7:ae:0d:67:55:93:d5:5c:8b:dc:6b:
         a2:67:89:49:eb:09:34:00:dc:45:09:ac:05:ae:3b:f1:db:8b:
         fe:48:9b:54:ac:8c:2b:1e:5b:e0:62:c9:13:d4:24:50:00:2d:
         dc:b6:70:d5:2d:93:bd:34:01:cb:02:b9:03:a1:ad:a1:24:b0:
         6a:ed:83:3a:f9:04:fb:cb:ae:e0:6a:84:55:82:d0:e4:78:9d:
         07:78:b6:67:69:6c:26:c9:68:16:f5:ab:90:1c:fe:dd:31:0b:
         3c:a9:5d:b2:a4:54:d4:1f:5b:0e:c2:a0:db:d0:49:a9:9e:0a:
         a3:23:eb:1b:8c:58:01:0c:14:b0:0c:c5:0c:94:a4:cd:35:ad:
         43:29:ed:b9:88:bf:15:6f:ed:93:43:ea:9d:54:49:af:63:ab:
         b1:a9:54:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:17:46 2025 by rpki-client