Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8ffde454-8621-3da8-b543-10d6377d0818.roa
File:                     8ffde454-8621-3da8-b543-10d6377d0818.roa (raw, json)
Hash identifier:          44ok41VT6pT7tMp2O4M8E2CclS59W++k6xoJspW18cA=
Subject key identifier:   91:30:3D:99:62:04:D7:25:2C:21:1B:55:BA:62:15:53:A4:98:AB:BA
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B2331858ADF286BCC149FCC00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8ffde454-8621-3da8-b543-10d6377d0818.roa
Signing time:             Tue 09 Sep 2025 13:00:41 +0000
ROA not before:           Tue 09 Sep 2025 13:00:41 +0000
ROA not after:            Mon 08 Dec 2025 14:00:41 +0000
asID:                     59253
IP address blocks:        45.39.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:31:85:8a:df:28:6b:cc:14:9f:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep  9 13:00:41 2025 GMT
            Not After : Dec  8 14:00:41 2025 GMT
        Subject: CN=d611e0e3-4bcf-4245-8d5e-dde58a236d0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d3:64:e7:2b:1b:84:1a:ff:e6:f0:7f:ca:71:
                    d4:fe:d4:b7:c5:e6:82:46:28:c8:5d:4f:85:45:64:
                    38:f3:2b:b2:d1:96:ce:10:38:aa:a0:15:1a:d7:db:
                    37:fe:29:25:e7:91:7a:44:da:d9:30:60:9a:dc:01:
                    1e:e2:22:9b:58:63:bc:9f:d2:da:96:f3:c8:e1:eb:
                    5c:97:e0:a1:08:e7:40:5e:8f:38:5a:b9:47:b4:c7:
                    fb:69:9c:c8:3c:f9:0d:d9:89:15:eb:51:01:62:ce:
                    20:83:79:b1:ae:fd:be:f0:48:cd:0a:a3:13:66:68:
                    ce:10:3d:4d:20:ea:c0:0f:a4:b1:60:d6:4b:05:9f:
                    30:f8:d1:d7:97:de:d6:4d:d3:6a:f0:9b:b8:1a:4f:
                    df:ca:2e:32:dd:cc:d4:22:3f:18:dd:4c:96:bb:8f:
                    a5:32:82:49:30:75:7f:71:26:05:f9:9f:df:37:2e:
                    06:53:9a:f1:84:d5:e0:79:e2:9d:e2:04:6e:1a:6d:
                    4b:d5:44:45:bd:c5:23:aa:79:a1:ce:4e:79:91:93:
                    08:bd:20:3f:2d:29:b0:44:0f:eb:b2:f9:08:ba:1e:
                    cf:fd:bd:03:bb:66:0e:b9:3b:b8:2e:70:26:e9:3c:
                    d5:37:e8:05:38:4c:5c:6b:f9:86:0b:86:44:31:0a:
                    75:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:30:3D:99:62:04:D7:25:2C:21:1B:55:BA:62:15:53:A4:98:AB:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8ffde454-8621-3da8-b543-10d6377d0818.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:5f:6c:57:42:bf:c2:36:24:dc:6d:0c:81:71:3a:9a:27:e0:
         99:25:43:9c:09:4f:ce:8a:3e:4a:71:6e:52:0d:62:1c:9e:75:
         af:83:bc:de:85:8c:d1:9d:16:5a:75:b7:4a:50:fb:5d:7e:79:
         7d:d9:b6:59:82:0e:c9:17:c0:50:b4:6d:a3:8f:1b:33:5f:ce:
         16:31:6b:eb:d2:2a:3e:4f:a0:7f:5f:ff:c6:ca:77:a9:93:e9:
         c9:cc:c0:19:57:ef:53:37:66:1e:98:0d:39:ab:f6:f7:e4:bf:
         84:ba:45:8b:32:01:d3:3a:5f:de:7b:be:1b:81:1b:c8:8f:20:
         81:88:09:31:88:52:20:e4:ef:a5:cf:0a:eb:f9:52:16:92:75:
         c3:78:56:6e:1a:e1:6e:ba:fe:b1:86:41:01:2f:b4:b8:8e:1f:
         59:1a:ca:6c:71:ee:0f:af:57:e2:69:28:e1:91:87:89:70:31:
         31:26:f0:d4:75:14:45:e3:80:12:15:ef:6a:ec:06:9a:a7:07:
         e7:48:1a:17:2b:64:b5:6c:2d:11:c7:23:92:2b:dd:9d:81:ea:
         81:d5:cb:1b:04:25:9f:86:05:9c:a7:49:a9:50:77:02:29:3b:
         65:1e:0e:80:24:11:38:4f:a6:cb:41:04:e2:d6:99:79:f4:54:
         00:bd:9a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:14:46 2025 by rpki-client