Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/281c04f9-d7ac-314a-9719-717619673c9a.roa
File:                     281c04f9-d7ac-314a-9719-717619673c9a.roa (raw, json)
Hash identifier:          wKRqlctgI6wsed1vbIEVB+ANx+21nvWCCuFUzMlZAX8=
Subject key identifier:   4D:77:AE:D0:F1:B3:26:B5:79:96:51:DC:55:24:1A:0E:04:E7:B7:83
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B0B76ACD6545CB94E3993BA80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/281c04f9-d7ac-314a-9719-717619673c9a.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     50304
IP address blocks:        45.38.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:ac:d6:54:5c:b9:4e:39:93:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=f1de43ae-4521-4b3d-8a28-5e6cc0468af4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a3:e8:43:5c:4c:92:f9:27:55:4a:af:1e:44:
                    bf:15:1d:0f:e8:4b:d1:d4:f3:31:00:8a:b9:a3:ff:
                    45:ee:99:63:7d:73:ac:13:94:cb:96:b4:ba:d7:12:
                    94:ca:45:26:ef:1d:e8:43:c4:30:b7:f0:56:21:7e:
                    15:39:95:f4:4b:07:af:35:39:df:46:1c:c9:65:b6:
                    33:98:86:7a:a3:47:d1:ad:c8:69:0f:40:55:c2:97:
                    0d:88:1e:03:69:7b:9f:5d:5b:bf:0f:08:9a:8b:c7:
                    92:2e:ae:08:d1:47:6e:cd:9a:71:27:0c:55:45:f1:
                    6f:f5:b5:0f:ea:d6:2d:5a:57:a6:9e:7c:c2:55:d8:
                    7a:ad:d8:df:9e:d0:c9:ba:7b:a5:32:2c:f0:f2:e8:
                    de:aa:5c:e1:e3:55:3a:63:b1:df:3c:c2:47:28:ee:
                    dd:23:83:b5:6a:b9:23:62:80:e6:a1:9c:3e:60:e3:
                    e0:0c:3a:a2:e1:a0:8f:10:d7:49:7a:00:b4:cf:e2:
                    dd:ad:9f:72:12:64:07:71:ad:28:ae:86:44:2e:15:
                    9f:cf:65:6b:67:3f:9d:cf:e3:52:83:fc:ca:1b:11:
                    55:e2:85:c7:87:3b:22:48:83:6f:18:f8:81:68:a2:
                    5e:86:bc:50:4f:be:6c:21:8c:f5:e1:43:c2:f3:cf:
                    62:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:77:AE:D0:F1:B3:26:B5:79:96:51:DC:55:24:1A:0E:04:E7:B7:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/281c04f9-d7ac-314a-9719-717619673c9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:8b:75:6a:6e:fb:fd:c5:3d:18:86:c1:c0:0c:45:a5:28:33:
         73:b7:9e:c0:26:29:73:41:af:d9:20:d1:5a:cb:cf:c4:40:3f:
         23:45:04:9b:95:d5:24:92:61:d8:b2:6a:dc:a5:91:0d:4b:5f:
         14:06:4f:9b:b3:0b:c7:4f:43:b2:3a:00:20:75:18:1e:3d:da:
         04:aa:c9:5f:09:f8:83:b6:7d:b5:80:ac:fb:20:c3:3f:44:00:
         10:71:1b:63:ab:71:d1:f0:72:01:19:e4:ff:84:5f:20:57:b4:
         4b:1a:fb:8e:94:4f:db:24:29:db:75:1e:8d:2e:44:c7:96:84:
         ca:ea:8d:35:98:ee:0f:f6:de:4f:57:5f:04:61:31:24:ef:24:
         94:9a:95:71:98:19:e0:38:a8:b4:11:23:99:2e:a6:26:81:67:
         62:96:99:43:56:47:12:ae:a2:17:bc:fd:82:ee:00:ee:04:74:
         a3:2d:8d:d6:da:69:d8:87:ce:f7:61:9d:56:ee:59:da:bc:94:
         06:12:b5:9a:d5:ea:25:a7:56:05:88:30:6d:39:19:b2:0c:3a:
         2a:a6:dd:22:7d:6b:de:14:23:e3:64:59:43:20:b3:ca:b8:56:
         9d:72:e9:48:55:f6:4b:32:1f:81:42:2f:f3:6a:56:da:52:b7:
         12:44:fb:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:16:17 2025 by rpki-client