Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a694600a-3f41-3c73-a592-69443a37e9f6.roa
File:                     a694600a-3f41-3c73-a592-69443a37e9f6.roa (raw, json)
Hash identifier:          6l5HuWRAlR8mohsPHsACVzKCVH5dYL2FdKkFZr0vI30=
Subject key identifier:   CE:8B:D5:03:55:AE:87:B6:E5:30:F0:00:D1:10:4F:37:23:91:82:E2
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A84662B020A8AA302FC944F00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a694600a-3f41-3c73-a592-69443a37e9f6.roa
Signing time:             Mon 14 Jul 2025 15:53:19 +0000
ROA not before:           Mon 14 Jul 2025 15:53:19 +0000
ROA not after:            Sun 12 Oct 2025 15:53:19 +0000
asID:                     209847
IP address blocks:        45.39.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:66:2b:02:0a:8a:a3:02:fc:94:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 14 15:53:19 2025 GMT
            Not After : Oct 12 15:53:19 2025 GMT
        Subject: CN=afaf4437-aa33-433e-ae49-f4d4c4476f56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:64:03:33:58:bb:97:52:77:a9:38:75:a6:0d:
                    48:7e:67:62:d2:93:a6:5a:38:26:c8:1e:35:1b:d0:
                    c1:8c:2e:79:3e:7b:ae:38:3a:12:6b:bb:d5:ca:d0:
                    bb:26:89:a6:54:c6:80:93:82:31:46:15:e7:e6:43:
                    a3:b9:bc:f9:4c:2b:b8:6a:20:54:59:27:b0:57:34:
                    d5:e8:f7:81:a0:b8:8d:3c:de:2f:8a:cf:39:9c:9e:
                    b4:c5:6d:29:89:9a:85:4b:15:89:80:cd:8c:f3:79:
                    07:d1:15:b1:06:c0:0c:66:f8:29:13:56:48:c7:55:
                    6a:7f:85:e3:1c:a7:6a:d8:a3:bc:60:fe:34:d2:59:
                    87:42:d9:d2:f2:51:95:4f:7e:fd:e3:1b:3a:08:c7:
                    17:b2:91:2e:22:33:e7:38:10:23:b2:7d:fc:79:bf:
                    2f:62:5e:42:f7:61:fe:4a:45:b0:7c:30:94:df:a4:
                    18:12:86:3c:e3:5e:39:f4:c7:b4:f8:91:e0:9d:31:
                    61:89:f5:75:06:91:b9:f5:58:ae:47:d7:a3:cd:c9:
                    26:07:8f:51:4c:ae:4b:eb:49:0f:c0:40:6a:05:d9:
                    46:0e:71:9f:b3:5c:c9:5b:20:94:95:21:2e:bd:33:
                    d5:22:15:7f:d3:cf:6d:af:de:59:e8:2f:5d:ec:5e:
                    2c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:8B:D5:03:55:AE:87:B6:E5:30:F0:00:D1:10:4F:37:23:91:82:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a694600a-3f41-3c73-a592-69443a37e9f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:be:ed:99:ff:07:cc:97:c2:ca:68:11:98:42:63:09:b3:f2:
         02:89:c1:47:f3:25:b7:61:af:e6:48:39:ef:97:19:67:0f:42:
         b3:78:63:44:77:dd:52:04:32:4a:dd:54:76:ae:f4:bc:4f:8b:
         44:87:03:11:19:cb:80:9d:e2:51:5d:58:60:72:24:2a:48:86:
         4d:bb:16:ec:29:af:16:c6:f2:ea:18:fe:5f:41:75:ca:eb:82:
         5e:77:e1:e8:cf:85:52:ac:62:0f:17:8b:36:87:07:ef:93:70:
         fb:15:2c:d6:52:2c:33:cb:19:a4:01:c6:4e:37:94:ed:c1:c2:
         4e:1a:92:9f:99:3c:68:d1:b8:ab:5c:0e:a2:8d:fc:89:d0:ba:
         17:b4:b6:74:a7:d0:08:63:73:f7:3d:28:a5:f5:60:0a:ae:a4:
         8a:25:09:98:0e:2c:13:20:89:46:df:d0:5d:05:fa:2f:ef:19:
         d8:e4:9d:29:4c:b2:69:bb:3f:35:34:8d:c9:19:6a:59:e7:61:
         3f:b2:af:f4:2b:8a:f1:9b:54:07:07:e7:57:ea:3b:bb:19:9a:
         d0:12:1d:b8:01:b6:12:97:db:27:bd:3b:08:31:20:6c:37:dd:
         d3:36:fe:90:17:ef:d3:cd:c5:b5:0b:fa:fe:00:b4:4b:a1:7e:
         46:24:3d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 08:13:22 2025 by rpki-client