Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/91c59d39-923f-39e6-9a22-88908f327d41.roa
File:                     91c59d39-923f-39e6-9a22-88908f327d41.roa (raw, json)
Hash identifier:          1/8Z98IjJghKEGaVnPonjChRxnD6WIg51rgMYa68DjE=
Subject key identifier:   B3:C6:5D:4C:63:44:EA:58:72:D2:4D:4A:FC:76:B5:CB:16:51:F5:F7
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B0A116F4755148CEC801E5980
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/91c59d39-923f-39e6-9a22-88908f327d41.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     62160
IP address blocks:        45.38.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:6f:47:55:14:8c:ec:80:1e:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=d159a64b-2932-48fa-ade3-560b3e3a576c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:55:22:92:b0:55:63:4a:8b:67:3f:eb:91:86:
                    81:a5:e2:c0:2e:4a:18:1a:26:97:8d:6f:1a:2b:ea:
                    20:c6:57:f2:5b:bb:43:57:0b:89:d1:6b:2f:5c:ab:
                    af:c7:2a:c0:db:e4:c5:23:0e:65:bb:7c:ad:06:d1:
                    02:94:9b:a6:97:b3:3b:4e:97:27:80:dc:5e:8f:f3:
                    83:32:fc:7f:6b:80:a6:61:c2:18:5d:24:f1:ed:f9:
                    11:e8:f2:0f:d6:81:7e:be:da:48:b7:fd:8c:fe:63:
                    7c:ff:95:1e:3d:a6:4f:37:ac:9e:79:ea:6a:c9:26:
                    8e:33:50:8b:59:2e:d9:86:6c:c3:60:1a:06:48:33:
                    9f:73:f4:3a:8b:b7:e0:a4:ea:67:5b:76:d3:5e:1c:
                    f8:6b:1d:59:c1:d2:5f:64:28:f8:45:5c:2e:42:19:
                    36:a5:d9:07:45:32:94:9a:18:66:43:f1:81:75:f6:
                    7a:55:70:1f:16:0b:fe:f3:30:82:54:e3:d5:f8:26:
                    02:52:5d:b9:3c:d5:3c:1d:80:55:c3:96:6c:4f:08:
                    14:24:bc:0a:c3:50:df:b6:10:b4:b8:a6:e5:a8:b4:
                    79:6c:7e:bf:49:0b:b2:11:ea:49:fb:f0:25:33:c2:
                    2c:bd:19:60:67:de:c9:98:85:92:f8:22:08:cb:dc:
                    d6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C6:5D:4C:63:44:EA:58:72:D2:4D:4A:FC:76:B5:CB:16:51:F5:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/91c59d39-923f-39e6-9a22-88908f327d41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:db:04:33:4e:be:16:59:4b:42:36:a0:03:20:d9:e5:56:4a:
         2b:88:5c:03:f0:86:af:cf:13:da:56:91:b5:5a:91:e6:5f:ea:
         06:e5:80:e9:e9:b9:bf:48:84:ef:55:28:b1:c5:b5:1c:01:d0:
         85:ae:fd:88:83:93:00:2b:b0:92:7b:5e:37:0d:63:f8:99:93:
         61:f4:2e:ae:4c:65:34:bd:ca:3c:ac:b1:b6:2a:05:4f:94:63:
         db:b3:d9:bc:87:36:a1:82:83:a8:af:56:35:c7:ab:25:1c:05:
         8e:67:ab:32:17:99:ce:fd:ef:86:de:f4:09:c5:e2:60:16:a9:
         7c:3c:8f:73:59:fc:ac:70:d6:2c:f6:2e:4f:3e:7a:6f:8f:1b:
         a6:71:17:f0:df:5a:1d:76:1e:a3:41:d5:2c:66:c4:85:4c:16:
         b4:34:d0:69:8c:35:af:de:e0:78:0f:cb:1d:ed:1e:4c:f1:06:
         6c:00:d1:69:62:a5:b7:da:82:f0:ec:0b:19:59:8e:a4:54:0f:
         1e:23:35:49:17:ee:01:00:7f:e9:af:a5:35:99:d7:25:68:7f:
         91:90:7f:68:af:53:e7:16:77:a7:9b:7f:97:58:f3:10:a9:27:
         af:01:fa:8c:a4:53:75:f9:46:f5:5e:a9:b8:b6:85:59:c5:93:
         50:f5:bf:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEW9HVRSM7IAeWYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk
ZDE1OWE2NGItMjkzMi00OGZhLWFkZTMtNTYwYjNlM2E1NzZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFUikrBVY0qLZz/rkYaBpeLALkoYGiaXjW8a
K+ogxlfyW7tDVwuJ0WsvXKuvxyrA2+TFIw5lu3ytBtEClJuml7M7TpcngNxej/OD
Mvx/a4CmYcIYXSTx7fkR6PIP1oF+vtpIt/2M/mN8/5UePaZPN6yeeepqySaOM1CL
WS7ZhmzDYBoGSDOfc/Q6i7fgpOpnW3bTXhz4ax1ZwdJfZCj4RVwuQhk2pdkHRTKU
mhhmQ/GBdfZ6VXAfFgv+8zCCVOPV+CYCUl25PNU8HYBVw5ZsTwgUJLwKw1DfthC0
uKblqLR5bH6/SQuyEepJ+/AlM8IsvRlgZ97JmIWS+CIIy9zWOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLPGXUxjROpYctJNSvx2tcsWUfX3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOTFjNTlkMzktOTIzZi0z
OWU2LTlhMjItODg5MDhmMzI3ZDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSZWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADvbBDNOvhZZS0I2oAMg2eVWSiuIXAPwhq/PE9pWkbVakeZf6gblgOnp
ub9IhO9VKLHFtRwB0IWu/YiDkwArsJJ7XjcNY/iZk2H0Lq5MZTS9yjyssbYqBU+U
Y9uz2byHNqGCg6ivVjXHqyUcBY5nqzIXmc7974be9AnF4mAWqXw8j3NZ/Kxw1iz2
Lk8+em+PG6ZxF/DfWh12HqNB1SxmxIVMFrQ00GmMNa/e4HgPyx3tHkzxBmwA0Wli
pbfagvDsCxlZjqRUDx4jNUkX7gEAf+mvpTWZ1yVof5GQf2ivU+cWd6ebf5dY8xCp
J68B+oykU3X5RvVeqbi2hVnFk1D1v34=
-----END CERTIFICATE-----
Generated at Sat Oct 11 11:11:21 2025 by rpki-client