Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/45fa7c82-84c7-3374-9d70-ba3a289a66b8.roa
File:                     45fa7c82-84c7-3374-9d70-ba3a289a66b8.roa (raw, json)
Hash identifier:          S1lAByOfwOt0UCkOM0lHlNyTbg+9d0b+SwjY2kAaS28=
Subject key identifier:   51:50:00:35:54:78:C9:BE:11:8B:41:68:79:64:08:AA:D6:F6:04:45
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B5DD1E8B3CA7F2E93DD7B7A00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/45fa7c82-84c7-3374-9d70-ba3a289a66b8.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     397630
IP address blocks:        45.38.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d1:e8:b3:ca:7f:2e:93:dd:7b:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=fb8da3cb-d6b2-4088-9996-cca41e7a3152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:64:7c:ad:99:d8:47:d9:a3:7b:1f:bc:65:a6:
                    b8:db:b3:6e:d2:49:3c:b0:e7:c4:d8:b6:d9:3a:f4:
                    a5:2c:c9:ba:e3:f3:30:28:44:a5:55:2d:3e:80:55:
                    ba:ec:e5:a9:76:d3:74:5f:7d:e5:07:8a:84:10:76:
                    e0:bd:4a:fa:49:42:d3:1f:ff:d3:46:e8:c0:e9:87:
                    40:f5:5a:c4:52:22:bc:bf:d9:ca:90:61:e8:a8:20:
                    e0:71:c7:94:17:0e:15:8f:ce:73:26:d8:d6:ff:30:
                    be:9a:e6:c5:e3:5d:c2:cd:89:24:d3:f6:81:d3:d9:
                    f5:43:85:36:35:77:58:72:fe:20:7e:70:9c:6d:e2:
                    f7:39:d0:62:f4:12:5d:e5:75:bf:7f:61:bb:82:b6:
                    fd:d5:ae:0b:ec:3c:ee:a6:2a:9e:ba:29:49:da:08:
                    76:49:6b:a5:dc:72:9a:2e:08:de:88:25:78:3b:9c:
                    55:3f:40:7a:f0:70:7f:bd:61:6a:47:8b:cd:16:6b:
                    ce:11:75:b9:67:81:d0:bf:be:4d:57:10:a4:8e:0a:
                    e4:6b:7d:89:b3:31:b9:1d:b8:13:9b:9a:07:f9:8a:
                    bc:3e:12:c5:bb:b2:1d:2e:69:e6:01:56:44:53:2a:
                    f7:b3:5b:80:0e:43:7d:6b:0f:a4:e7:2d:e8:be:d6:
                    98:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:50:00:35:54:78:C9:BE:11:8B:41:68:79:64:08:AA:D6:F6:04:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/45fa7c82-84c7-3374-9d70-ba3a289a66b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:3b:c7:87:bb:df:11:ae:db:19:a4:a5:a5:dd:e5:5a:96:03:
         ea:e2:98:82:3a:9a:2f:a1:66:2d:f2:3b:af:79:ba:8e:1b:a5:
         7b:ab:78:c2:04:06:60:73:6e:4b:52:0e:71:75:98:28:d4:94:
         56:47:5a:e6:2e:bf:6c:0f:4f:e7:69:43:7f:22:e5:49:ca:bd:
         ff:b6:93:82:dc:8c:40:55:a4:e9:ab:44:66:c9:f9:3c:1e:b2:
         8d:13:69:78:e6:e1:ca:0a:a6:f2:38:92:95:00:9c:fa:45:17:
         62:b2:ba:bc:83:86:ac:ea:96:22:d3:49:16:f6:6a:1d:3a:b2:
         60:52:89:3a:11:4e:df:82:44:89:a1:0b:3e:ab:ee:78:26:cb:
         ed:34:42:80:3c:55:90:df:aa:03:3c:c3:6f:91:21:80:f9:d1:
         6d:bb:3e:92:23:62:68:74:99:4e:26:f9:74:54:e4:16:f9:d0:
         b1:c2:e2:a3:2c:e2:29:ef:2e:6a:99:24:52:e9:35:4a:d2:29:
         81:a3:f7:8e:40:17:2e:75:51:ff:c6:47:66:2a:a3:39:0d:97:
         91:a9:02:69:92:82:96:e0:34:ef:c4:91:30:d2:dc:06:20:5d:
         18:43:ee:ca:7e:f5:25:4e:e7:fc:da:b8:b0:93:52:cd:12:d7:
         75:12:44:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:13:48 2025 by rpki-client