Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3292a9f7-4ba5-31fd-b74f-1e58c702aa85.roa
File:                     3292a9f7-4ba5-31fd-b74f-1e58c702aa85.roa (raw, json)
Hash identifier:          ZNdLoC0yeMNP+pXkVXKuBONVmyMiVYu/a3OR9kACDBU=
Subject key identifier:   53:B8:8D:A2:F6:9B:06:FC:B7:E7:03:EA:AF:F6:88:77:2C:09:D8:09
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B758CA73EA7CBF59BAF910CC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3292a9f7-4ba5-31fd-b74f-1e58c702aa85.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     3257
IP address blocks:        45.39.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:a7:3e:a7:cb:f5:9b:af:91:0c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=68537580-fab8-418d-afec-ccb8d669d9c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b1:67:e2:aa:9c:3a:4a:45:0b:95:74:7f:bb:
                    8c:70:24:ff:0f:13:03:10:e8:36:2d:2e:43:0e:62:
                    83:a2:bc:34:e9:50:dc:ee:5f:06:6a:7b:f7:63:56:
                    b6:fc:be:11:9c:f2:aa:98:ad:c6:1e:45:7f:ef:88:
                    3b:74:b0:b1:1f:b8:8e:c1:a7:87:ed:8f:20:b0:cb:
                    e8:25:c0:06:b6:bd:bd:f6:d0:e7:d0:92:aa:05:f9:
                    33:21:11:a6:04:ed:89:40:26:92:7b:32:ad:67:65:
                    f4:d9:b2:a4:85:f9:12:80:bc:28:ee:dc:90:1b:1d:
                    15:cb:7d:13:77:3d:86:2f:f8:c1:f2:26:c7:06:4f:
                    82:9b:ad:30:ef:b8:60:6a:30:d5:6a:6b:03:1e:41:
                    3a:d7:bc:fa:37:11:1e:3d:e2:9e:ea:8f:53:03:fb:
                    b3:c5:cf:45:2e:23:7c:9a:0a:15:a1:f4:d2:ab:27:
                    f3:2f:51:2e:eb:ba:1b:5a:98:96:76:cc:6f:ea:fb:
                    70:5e:3e:23:eb:52:24:e9:63:66:bf:f6:d3:ec:9e:
                    53:cd:cf:e0:b2:c2:23:ff:68:c9:02:88:1d:11:d0:
                    7b:b3:07:28:b3:6a:54:f9:99:e1:64:7e:eb:a7:25:
                    99:52:ba:ea:84:57:28:86:47:dd:15:cc:61:08:82:
                    ec:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B8:8D:A2:F6:9B:06:FC:B7:E7:03:EA:AF:F6:88:77:2C:09:D8:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3292a9f7-4ba5-31fd-b74f-1e58c702aa85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:9c:93:d2:a7:3a:a5:e1:2e:56:f3:2b:a2:97:94:1d:01:a6:
         38:3d:f3:e8:0a:c2:0c:0f:d1:e2:31:21:32:23:05:02:d2:2b:
         23:e7:8b:94:05:d9:32:34:c7:89:0a:b6:1c:0f:cf:1f:4a:9b:
         82:c1:9c:3c:b0:e0:46:29:f0:ec:78:0a:f4:16:2f:c4:83:2b:
         81:1e:cc:67:7c:3f:45:cd:86:e7:17:f9:d4:a5:df:bf:e5:bf:
         db:aa:34:a5:0a:7a:98:04:e4:3c:79:17:a5:ad:e6:98:be:92:
         17:c6:51:0f:e9:43:cc:44:f3:4a:5c:41:8c:0e:40:43:14:ce:
         78:c5:5c:b0:3b:9c:20:1f:df:4d:a8:ca:a9:29:85:89:60:14:
         0f:bf:73:ea:f1:1a:ed:02:ca:d4:e2:33:6c:f5:42:cd:a1:ed:
         23:3c:eb:60:17:cf:c9:47:a0:eb:be:b3:e4:28:eb:06:62:dd:
         18:85:cd:50:35:90:f5:91:7e:1d:e3:8a:0e:a0:e7:33:43:b9:
         f4:d4:6b:94:71:58:27:ff:6e:c3:26:b5:37:42:d7:d1:fc:f8:
         a7:2f:58:b3:e1:a4:c4:49:63:a8:c8:27:20:b1:3b:a7:b5:12:
         9b:ed:24:80:52:bb:d8:06:31:30:e7:11:53:e9:27:1a:a3:91:
         ef:99:5c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 13:29:20 2025 by rpki-client