Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/87fafb04-60a1-3b72-9077-da44ca5be470.roa
File:                     87fafb04-60a1-3b72-9077-da44ca5be470.roa (raw, json)
Hash identifier:          HfVwK9RgNvaXcNqlehVzN5CvoZYjHRj9nP3jbsLGFsk=
Subject key identifier:   E0:69:74:50:48:5A:46:CE:F3:C1:61:F2:A2:82:11:87:B4:6F:18:F7
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B238D7DF5D64C15FD02AA18C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/87fafb04-60a1-3b72-9077-da44ca5be470.roa
Signing time:             Tue 09 Sep 2025 16:06:05 +0000
ROA not before:           Tue 09 Sep 2025 16:06:05 +0000
ROA not after:            Mon 08 Dec 2025 17:06:05 +0000
asID:                     9304
IP address blocks:        45.39.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:8d:7d:f5:d6:4c:15:fd:02:aa:18:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep  9 16:06:05 2025 GMT
            Not After : Dec  8 17:06:05 2025 GMT
        Subject: CN=a6fbe9ef-dfa5-4e1e-a7c3-a7c005a55c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:22:e0:8c:da:5a:73:20:82:0f:bc:84:6c:11:
                    36:35:77:a1:78:4c:73:63:05:9f:ce:7f:39:22:d0:
                    3e:56:56:14:e4:46:76:a9:d4:78:97:d3:d0:c5:e2:
                    7b:02:d8:53:cf:08:da:d7:1f:40:75:86:1b:d2:21:
                    28:58:09:da:8f:6e:13:47:e3:91:e5:48:22:8a:e2:
                    df:79:77:39:2c:61:e2:aa:4e:63:3c:4d:41:e7:f2:
                    6f:0f:88:41:be:a4:90:d0:fe:6a:09:3e:c0:26:24:
                    80:5b:aa:80:8d:65:b3:ad:d3:cc:66:5d:82:8c:7c:
                    12:d6:2a:dd:49:5e:44:87:7f:f8:de:3b:cc:30:c9:
                    f2:49:6a:91:28:4d:06:c6:b3:b1:43:48:11:c1:31:
                    54:a8:1b:52:48:93:46:65:63:bb:c4:8a:e4:72:d2:
                    6b:6e:d8:13:a7:0f:7c:30:60:96:02:0a:a3:8a:7e:
                    f0:7c:3f:c6:fd:a8:f7:95:9c:b5:91:e6:48:89:c1:
                    68:1c:1b:fe:6e:89:6c:c2:4a:e4:ec:45:60:27:1f:
                    f4:c2:40:69:f8:eb:9b:c3:19:8e:fb:fe:42:e4:5e:
                    dd:cb:ad:37:03:dd:28:19:5e:52:00:9b:56:cd:7d:
                    84:7c:68:33:8a:a0:81:85:ce:00:91:15:fc:61:2b:
                    fb:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:69:74:50:48:5A:46:CE:F3:C1:61:F2:A2:82:11:87:B4:6F:18:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/87fafb04-60a1-3b72-9077-da44ca5be470.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:39:6f:b4:77:8b:96:e9:35:eb:ea:a7:b5:ca:59:57:f7:66:
         3c:3f:54:e3:f0:3c:5e:c8:e5:68:8c:98:30:50:6f:94:f4:c7:
         bf:3d:d5:3c:c3:a6:eb:fc:40:98:09:72:2d:e5:ca:91:f6:45:
         87:52:3f:6c:2c:61:3c:fc:50:14:ae:ee:9c:d8:fd:b3:b4:aa:
         f7:f2:18:39:db:9f:69:e9:b4:86:82:41:be:a3:48:c6:4b:13:
         3f:f7:45:71:2a:ba:9c:00:4e:ea:3b:0a:8c:71:3e:3b:a9:af:
         e4:9a:7a:bd:82:80:67:5a:a5:e2:d6:1b:de:ba:4a:5e:06:8e:
         f6:c5:88:67:db:32:a4:44:2c:55:83:08:1d:98:5d:8f:c4:a7:
         8f:92:5a:f0:d1:75:13:5c:98:7a:40:73:ae:ea:e9:18:6f:fc:
         b1:b7:df:2e:db:ea:4f:f9:f7:9c:1a:d7:c8:70:64:f9:de:12:
         2c:ff:e9:03:3e:31:8e:d9:4b:22:74:8d:1f:ee:fd:8b:00:1d:
         c8:27:ae:f0:12:90:f4:f1:91:7f:87:cd:b6:45:f4:31:c4:df:
         7a:0e:46:c0:91:8f:93:9c:0b:ce:4c:55:89:dc:a1:f1:c3:0f:
         55:f6:92:2b:39:1b:5f:74:56:71:1f:1c:7f:24:1f:e4:c1:4a:
         2a:52:6d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:07:49 2025 by rpki-client