Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2d1ca74f-1ae7-3089-9308-60efc6bddfd9.roa
File:                     2d1ca74f-1ae7-3089-9308-60efc6bddfd9.roa (raw, json)
Hash identifier:          pBQ7xB9pbIg77qT38o05NnlnVpPR68HsUIdjtvIHfIY=
Subject key identifier:   32:5A:BB:52:F3:47:03:FD:A9:C1:8C:DD:8A:A4:21:AF:3D:1D:08:D5
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B758CA71D0B806DF6C25B47A0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2d1ca74f-1ae7-3089-9308-60efc6bddfd9.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     3257
IP address blocks:        45.38.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:a7:1d:0b:80:6d:f6:c2:5b:47:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=84c3057e-6956-43b5-9ab3-8d6f0f4263b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:31:f1:64:a9:fa:f0:19:71:fe:2d:29:5a:b2:
                    0e:a0:98:5a:d1:81:44:62:79:7f:22:51:21:3e:1e:
                    de:d3:f5:94:f4:3d:80:be:3f:38:0f:a8:3e:d2:47:
                    97:b1:58:08:98:8e:31:0c:3d:aa:e2:08:bd:9b:19:
                    e7:3f:98:57:97:19:aa:86:b5:c3:94:55:27:c9:29:
                    f8:d2:9b:5a:86:85:42:55:5c:2f:04:77:1c:1d:6a:
                    7c:13:ff:18:e8:d6:75:87:53:d7:0a:a9:4d:5d:f5:
                    3f:68:ab:92:c6:93:ce:ac:91:d6:04:94:ce:b1:9d:
                    79:e5:48:e3:f3:aa:89:df:d0:2d:6b:51:e0:c8:8c:
                    d0:0c:c3:5a:09:9c:02:5f:f8:b8:94:5f:4b:33:62:
                    a0:fa:f6:06:c3:0a:f2:66:b1:2d:e3:cb:fd:88:09:
                    91:ad:7b:92:63:fc:fc:6a:8d:00:6a:de:72:85:17:
                    ca:e1:c0:98:2c:5f:1f:09:38:d8:05:00:29:b9:11:
                    63:dc:dc:f9:41:f5:2f:53:66:d9:9f:33:52:e6:e7:
                    68:2a:4f:9a:dd:47:b0:7b:22:0f:bf:89:9b:23:28:
                    b0:23:99:55:76:26:16:8a:d1:24:b0:09:56:89:c3:
                    2a:c1:22:5b:13:42:73:c9:b8:65:cc:cd:e2:c4:f8:
                    2d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:5A:BB:52:F3:47:03:FD:A9:C1:8C:DD:8A:A4:21:AF:3D:1D:08:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2d1ca74f-1ae7-3089-9308-60efc6bddfd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:d5:47:0e:e2:fa:ea:6e:bb:76:34:1f:91:db:6b:96:9d:f0:
         f0:e0:35:56:e8:04:a5:2a:4d:1e:6e:74:2e:88:d2:a0:8f:dd:
         29:1e:ce:2f:8f:8b:c6:9e:d4:ef:de:12:12:0a:9f:24:8f:a2:
         7f:2d:b3:32:0c:91:38:1c:fd:16:73:f0:8f:8b:ae:88:71:70:
         fe:92:86:36:24:58:b5:cf:54:8e:8b:7a:08:84:fc:d2:31:5a:
         1f:1c:a1:47:bd:b1:67:fe:42:fd:c2:76:00:0d:12:8b:d4:d0:
         2d:32:84:c4:0a:ee:1e:c2:c7:81:56:73:ac:2e:98:7c:d3:74:
         b5:5e:ff:a7:53:5e:a7:ae:b7:c3:00:af:a7:15:9e:30:d9:53:
         04:0b:36:1b:fa:11:51:d4:74:f1:6c:b4:c3:92:81:3d:6a:49:
         3b:46:81:25:93:7f:ae:58:3c:67:36:0f:00:74:a6:c9:67:55:
         32:a3:cd:a2:d9:21:a5:b5:47:b4:5b:79:71:47:19:2d:1a:a0:
         4c:de:99:69:ee:8c:35:61:44:0f:a0:89:d1:45:9d:95:7a:ae:
         5b:62:44:b1:02:d3:4c:24:5a:38:dc:62:6f:1d:44:bb:65:de:
         df:c5:98:6b:30:5d:1d:80:b8:2e:88:12:c0:c0:f2:be:2f:14:
         35:80:a7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:11:38 2025 by rpki-client