Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/58d6c09d-4d03-3433-a64a-927af74583f4.roa
File:                     58d6c09d-4d03-3433-a64a-927af74583f4.roa (raw, json)
Hash identifier:          rjGU7dl5RZC0lZt9oYcRNHAkmF9EOQK4c+Esd9YyUpA=
Subject key identifier:   21:94:1F:B5:94:5F:FD:C3:C5:ED:6E:F8:F8:11:BE:A8:AC:41:72:C6
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B36BC47FDDDA1EAC683598B00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/58d6c09d-4d03-3433-a64a-927af74583f4.roa
Signing time:             Tue 16 Sep 2025 13:00:41 +0000
ROA not before:           Tue 16 Sep 2025 13:00:41 +0000
ROA not after:            Mon 15 Dec 2025 14:00:41 +0000
asID:                     201525
IP address blocks:        45.38.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:36:bc:47:fd:dd:a1:ea:c6:83:59:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 16 13:00:41 2025 GMT
            Not After : Dec 15 14:00:41 2025 GMT
        Subject: CN=e66ffb00-b85b-4465-b5fa-35187d5269d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:28:f2:73:51:01:b9:ea:b1:7a:6c:a6:1f:15:
                    2b:f0:85:f3:ee:d5:ef:41:c0:36:52:4a:d8:fa:56:
                    bc:b8:bd:ba:2a:ac:3a:b0:47:14:b1:93:a9:00:bc:
                    af:c5:c8:c5:5b:76:0e:3b:54:1e:bc:29:e8:5c:b1:
                    91:b6:5e:3f:db:16:7f:2d:18:64:81:57:9b:14:5e:
                    e6:5a:33:93:66:42:f4:84:3d:c8:d0:3e:ac:9a:ac:
                    35:1d:69:02:3d:11:3e:a9:2f:05:d1:3f:93:d2:ab:
                    64:01:99:84:10:35:f6:c7:7a:b2:ca:42:99:f5:3e:
                    3d:35:3c:91:2c:5e:77:3f:c5:be:f1:92:43:8e:2f:
                    41:92:ec:a7:ca:2a:cc:a5:29:b9:85:ac:92:77:06:
                    91:c4:9e:f5:93:40:26:e2:b3:3f:20:90:24:ad:e1:
                    a3:ae:2f:77:d4:e1:9b:e7:5f:5f:a5:69:1c:41:68:
                    24:d9:bd:5b:c9:0c:ee:76:cf:43:5e:75:62:f9:f9:
                    74:65:29:bc:2a:fd:a6:bf:20:83:de:c8:cd:b6:23:
                    93:e5:1d:f1:55:1c:39:ac:7e:e5:fd:8b:89:1c:89:
                    ac:ea:26:83:86:06:64:de:c7:48:8f:fa:a1:b8:73:
                    2c:bf:1c:49:d6:f1:2f:30:b1:81:93:df:9b:66:8f:
                    57:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:94:1F:B5:94:5F:FD:C3:C5:ED:6E:F8:F8:11:BE:A8:AC:41:72:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/58d6c09d-4d03-3433-a64a-927af74583f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:b2:52:49:c7:06:7b:7f:f9:da:15:ae:ef:c4:e2:c8:d1:fa:
         36:43:e8:63:56:a3:37:00:65:54:bc:42:20:26:06:3d:f6:5e:
         58:15:67:f4:e9:3b:6a:50:2b:b8:0d:24:3c:fe:27:b2:ce:4c:
         31:6f:76:de:10:38:70:4a:c6:36:f7:ef:77:ae:43:a9:d3:09:
         73:9e:0d:4a:37:5a:4a:a4:18:f2:2f:fc:ce:5f:57:7f:cf:e4:
         7f:c6:f8:0f:13:58:4b:69:40:98:de:87:53:f6:17:e8:a6:70:
         d6:74:b7:00:8d:9a:16:d4:4c:6e:f8:2a:cb:2c:ca:6d:39:d2:
         6e:ee:85:66:70:33:f5:aa:6a:b8:43:7a:8d:c1:b9:6a:be:53:
         db:84:62:c1:a7:4b:36:54:c1:13:e9:8e:9b:70:93:8a:9f:a3:
         9f:ae:2d:53:d9:07:25:1d:78:33:61:34:a9:1a:6f:14:f4:a9:
         77:2f:4f:5f:7d:00:dd:75:35:c3:26:03:13:b8:1f:56:18:a7:
         56:c9:f5:4b:e7:c0:94:cd:a1:e5:f4:d1:49:c6:ba:0b:ed:d9:
         d0:7c:c4:1c:06:c1:03:0e:f1:64:3f:4f:e2:5f:3c:90:16:c6:
         7e:eb:5b:a7:f3:6c:5b:a8:02:a8:bc:a8:47:12:7e:c3:92:05:
         7a:a7:03:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:11:33 2025 by rpki-client