Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/29b0cff3-6e51-3a3d-bc91-ef40530d24fa.roa
File:                     29b0cff3-6e51-3a3d-bc91-ef40530d24fa.roa (raw, json)
Hash identifier:          +9in65uS9Ps+yzF4IXyRhTriTEaWgKUj8FjOp51gU6A=
Subject key identifier:   AB:F8:42:A0:00:D0:B9:2B:2B:A1:42:A5:3C:13:30:8D:A3:D6:E8:B2
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B6367451A923B0115F46257C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/29b0cff3-6e51-3a3d-bc91-ef40530d24fa.roa
Signing time:             Thu 02 Oct 2025 13:00:40 +0000
ROA not before:           Thu 02 Oct 2025 13:00:40 +0000
ROA not after:            Wed 31 Dec 2025 14:00:40 +0000
asID:                     7922
IP address blocks:        45.38.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:67:45:1a:92:3b:01:15:f4:62:57:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  2 13:00:40 2025 GMT
            Not After : Dec 31 14:00:40 2025 GMT
        Subject: CN=d368daac-63b6-4b06-882e-7cdd9963fe4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e3:cb:7c:25:f7:fb:b8:80:73:06:1b:5e:af:
                    48:45:bf:b9:75:38:66:2e:91:cb:a9:1e:83:f6:de:
                    91:16:90:e5:33:82:62:1f:2c:3d:21:24:4f:4b:20:
                    6f:66:44:1b:e5:82:f3:38:50:aa:f5:0a:51:f7:46:
                    cd:8d:81:d9:b7:6c:a3:3c:7d:c6:bd:6c:ef:86:21:
                    1f:6e:e2:d2:90:b1:92:bb:a0:fd:5a:17:81:95:8c:
                    99:88:63:ca:78:23:5e:40:89:6a:96:ab:2c:2c:8a:
                    4d:be:aa:6a:44:e4:fa:55:00:8b:12:f3:d8:fc:7d:
                    97:97:33:8d:16:0a:58:8d:d7:df:c0:d2:80:c1:ce:
                    89:11:0c:fb:df:1d:ba:4a:52:d8:2d:25:02:34:04:
                    c3:f5:90:e2:72:0e:7e:7d:2c:08:ad:98:68:f9:ea:
                    6c:07:25:68:66:36:80:d0:7f:be:f4:72:42:b4:ea:
                    14:71:4a:c9:7b:70:14:03:33:4c:d7:8a:13:69:bd:
                    43:f2:f8:2b:da:dd:de:29:ce:4f:d8:15:28:c0:97:
                    c8:ba:dd:f3:56:f5:85:f5:e3:f6:65:22:04:bb:61:
                    f5:c4:8d:8c:0a:87:53:6a:b3:0a:f8:2f:cd:72:9b:
                    30:e5:c3:71:98:d6:b5:11:ec:94:e1:30:86:e9:14:
                    d3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F8:42:A0:00:D0:B9:2B:2B:A1:42:A5:3C:13:30:8D:A3:D6:E8:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/29b0cff3-6e51-3a3d-bc91-ef40530d24fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:db:68:fc:88:53:55:ed:ba:96:d2:91:9a:42:5b:29:10:b6:
         67:78:7f:4b:cd:d9:73:02:39:bb:5b:c2:5f:21:d9:31:db:cc:
         d7:65:95:cf:ed:53:6d:f9:44:5b:c1:92:17:d7:92:df:52:ef:
         ae:25:a7:ae:46:2f:ed:b4:24:95:93:ea:99:ea:a2:70:2b:9c:
         66:94:3b:81:bc:41:60:7c:24:f0:94:c0:d9:09:fd:49:e6:90:
         84:97:5e:2f:5f:70:98:e7:59:ad:7d:5f:bc:0b:63:82:9b:5d:
         8a:15:9d:1d:e8:8d:a0:84:e1:3e:13:2b:e7:35:58:a7:fe:c5:
         f8:2f:6f:c2:66:da:39:4a:d6:c0:3a:8a:77:07:54:e2:8a:e8:
         72:07:e4:d1:19:06:29:b8:ee:d8:3a:d7:94:db:35:4d:3d:a7:
         2b:26:92:40:7e:b1:18:15:a8:6c:c0:ea:3f:fe:31:4b:2a:a1:
         3b:37:fb:2b:26:60:b3:26:ab:cb:e2:56:bd:dd:4b:57:c1:5d:
         9c:36:bc:52:e0:d6:13:ba:25:4f:40:8d:1b:53:08:26:98:0d:
         5a:bc:7d:7b:87:20:cd:b5:79:d4:35:e0:31:15:20:ad:6e:fe:
         1c:fd:2b:b0:41:c2:84:91:11:d9:cf:e9:45:4b:dc:5f:65:f2:
         dc:1b:f0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:13:40 2025 by rpki-client