Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/37c0b271-5e5b-33b7-87fb-a5474a0cc726.roa
File:                     37c0b271-5e5b-33b7-87fb-a5474a0cc726.roa (raw, json)
Hash identifier:          O6N4VbaCC8byaRNNRfV7JPJZ9Q7KLLxu8z4mcGUgvEw=
Subject key identifier:   A3:26:59:52:EB:CA:4A:56:34:D1:78:F3:63:C8:5D:5F:E4:F8:00:1B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B758CA502C579F6852701EF80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/37c0b271-5e5b-33b7-87fb-a5474a0cc726.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     212238
IP address blocks:        45.38.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:a5:02:c5:79:f6:85:27:01:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=d499b259-b53a-438e-97b6-2169b4989f29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b7:e1:61:bd:21:ec:cc:15:b5:1c:55:15:3a:
                    e1:53:3c:b5:e0:3e:4c:b9:a1:3a:31:10:3a:0c:5e:
                    37:30:56:b8:90:ff:87:13:c2:e9:c2:63:0d:f0:8f:
                    bb:7f:32:c4:18:53:ba:1c:ae:f6:cb:24:17:3e:e1:
                    08:0e:10:95:af:34:fe:bc:33:a1:c9:df:db:8a:97:
                    c2:08:82:03:6f:a1:33:ea:3a:87:a9:c0:37:7e:70:
                    1a:03:b9:48:fc:c1:76:ec:c3:8d:ef:bb:cb:d0:79:
                    f0:73:37:5d:2d:bc:05:6b:e0:32:0f:e7:1f:8e:f4:
                    ab:07:09:e6:7b:db:a1:2b:a5:f7:8b:b4:74:d1:f1:
                    27:0e:f3:86:7d:81:31:f7:e1:06:e0:80:bd:ed:2b:
                    76:db:23:6d:71:05:67:4e:f0:45:bc:da:98:31:aa:
                    9f:30:3a:b4:5e:12:be:d4:14:19:b8:1b:a6:7d:2b:
                    1d:ef:9e:8b:33:98:c0:ea:1b:b4:70:35:42:ff:16:
                    a0:e9:d2:22:dd:8a:11:85:c8:17:83:b2:3b:b6:6e:
                    d4:7d:4c:dd:e2:9a:64:9f:f3:db:27:66:43:8a:3a:
                    94:70:94:a5:4d:1e:2f:47:cb:86:88:9d:f6:e2:5d:
                    4d:eb:64:b4:f9:10:ed:04:14:02:df:25:c4:a8:fc:
                    34:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:26:59:52:EB:CA:4A:56:34:D1:78:F3:63:C8:5D:5F:E4:F8:00:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/37c0b271-5e5b-33b7-87fb-a5474a0cc726.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:a9:bc:7e:85:a7:f2:d4:cb:81:43:99:36:e9:7d:fe:43:a1:
         d3:06:cd:18:9c:d9:89:d7:2b:0f:69:ee:55:16:f3:82:0a:dc:
         ff:9a:fe:38:9f:49:f9:cb:cc:fb:4a:ec:10:71:1c:cc:f4:90:
         25:cf:40:d8:f8:90:8d:e5:d8:3c:01:e8:6a:e3:86:c7:94:01:
         52:c7:d7:4d:24:30:28:26:81:9c:b5:37:f1:94:6d:e3:f5:f3:
         5a:a7:80:b3:a5:14:2f:92:8f:d3:54:95:7d:5f:45:8f:bf:82:
         7d:73:37:8d:87:97:2c:c6:2d:cb:e8:84:2c:37:59:d4:ac:39:
         03:e1:4b:e3:dd:13:26:32:7c:11:96:b5:ae:33:33:ee:b7:e7:
         f3:b2:4c:19:6b:9e:51:de:97:bb:9c:70:59:5f:aa:5a:45:2d:
         81:e0:6e:ff:b7:a5:22:ce:f5:16:af:b4:84:1a:43:9f:ad:d1:
         d6:b0:38:a4:43:ad:0f:9d:28:f9:17:f1:1e:32:50:ca:74:58:
         73:80:57:6b:3a:be:4d:49:e1:e0:8f:7f:f9:12:d6:cc:0f:6d:
         c6:81:7e:13:e2:df:74:b7:c5:fd:ee:19:ba:74:d3:47:96:bb:
         f8:23:d3:ec:85:13:0f:e8:1e:9e:2b:97:25:2f:e5:6f:9f:ad:
         d1:09:ee:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 13:24:30 2025 by rpki-client