Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a8b0db76-3aef-34f4-853d-625f2b55306c.roa
File:                     a8b0db76-3aef-34f4-853d-625f2b55306c.roa (raw, json)
Hash identifier:          A+O4h7KGM2zD3p/jFXbm0mAafeer6uBW5CXeK1uN2t0=
Subject key identifier:   B9:87:6E:69:E2:39:11:DC:57:C2:B0:84:F4:8D:49:CB:73:50:DF:35
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B3C6A9436AF3DCB43DE000800
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a8b0db76-3aef-34f4-853d-625f2b55306c.roa
Signing time:             Thu 18 Sep 2025 13:50:57 +0000
ROA not before:           Thu 18 Sep 2025 13:50:57 +0000
ROA not after:            Wed 17 Dec 2025 14:50:57 +0000
asID:                     18779
IP address blocks:        45.38.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3c:6a:94:36:af:3d:cb:43:de:00:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 18 13:50:57 2025 GMT
            Not After : Dec 17 14:50:57 2025 GMT
        Subject: CN=c11ab01d-e277-4319-86e5-bd6dd6078164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:45:b4:78:bb:6c:4c:c2:a6:a0:32:1c:07:9f:
                    be:16:4d:10:77:50:17:97:0f:91:4b:4d:e8:2d:29:
                    5a:2e:8b:d4:40:6d:23:ad:0e:06:4e:40:3f:28:db:
                    1b:ce:56:ce:5c:26:72:e5:12:ce:71:45:57:1a:6e:
                    6a:07:5c:04:d9:02:58:5e:ef:c1:d8:b9:d0:02:9a:
                    a0:e6:dc:98:d6:17:f4:31:22:c0:a5:5f:c8:17:82:
                    71:0a:c3:0f:31:2e:54:21:4e:d2:e9:5d:8b:a8:ad:
                    4f:a2:9c:d3:6c:f7:5f:74:aa:35:94:a9:bc:61:01:
                    52:a8:c1:b1:89:4c:f7:e0:65:91:a2:5f:20:ba:11:
                    15:57:50:4c:17:ed:90:ae:12:5c:74:7e:03:27:aa:
                    f9:c1:d1:fc:97:ef:c2:3e:b7:07:53:e7:31:9a:07:
                    9f:a6:a7:13:a8:5e:44:62:41:92:80:dd:81:64:fc:
                    ca:b2:d2:44:5a:35:a8:52:9d:52:a0:13:f4:29:e0:
                    9b:93:28:e1:5a:9d:c7:07:db:95:4a:d0:25:1d:04:
                    07:f1:05:41:b2:5d:5b:a9:6a:0f:16:75:f0:c8:4d:
                    ff:83:58:bd:9a:ed:a9:8c:d4:b3:04:ed:a2:7e:24:
                    9e:44:c7:fe:3e:f2:a8:ff:13:41:a6:3d:8f:b6:36:
                    11:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:87:6E:69:E2:39:11:DC:57:C2:B0:84:F4:8D:49:CB:73:50:DF:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a8b0db76-3aef-34f4-853d-625f2b55306c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:01:a8:3c:a6:8d:d9:8b:10:9a:eb:a7:70:0f:6d:2f:03:e6:
         0e:f8:84:f6:54:05:56:9c:aa:89:4c:22:15:26:80:84:bd:18:
         99:aa:da:dc:0b:46:15:7e:2a:91:ea:15:c1:6f:86:d5:0d:64:
         06:e1:df:56:83:f4:a0:65:de:14:13:8f:30:6c:a6:4e:9d:27:
         27:9e:fc:7f:5a:c7:44:20:25:6c:3f:fb:86:bb:1a:29:f9:8e:
         e6:09:1a:0a:0b:8a:f0:aa:05:a1:73:7b:ae:05:e1:da:6e:08:
         a1:0c:d2:2d:35:9d:30:62:d3:bf:90:fe:c1:76:fb:8c:21:34:
         35:a4:e5:ff:ca:44:34:32:2b:4e:1b:18:0a:51:a5:b4:03:d2:
         37:dd:c3:1d:07:ab:2a:ba:f4:0b:b4:fd:c0:08:b8:8f:2d:4a:
         ac:5b:57:ea:ff:fb:f5:17:43:33:1e:61:20:f3:c1:4c:51:56:
         e4:01:6d:75:32:82:c6:ea:a2:42:74:50:db:bd:2b:b3:46:14:
         78:8e:da:5c:2f:0d:c4:36:16:a7:ac:8d:07:0e:c6:b4:78:51:
         1a:e9:4f:fa:aa:78:62:23:dd:f3:ba:d5:4c:65:a5:ca:cc:48:
         44:61:7e:bb:b9:57:30:9e:42:51:95:ad:a1:15:f7:de:83:31:
         4f:c1:a7:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8apQ2rz3LQ94ACAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDkxODEzNTA1N1oXDTI1MTIxNzE0NTA1N1owLzEtMCsGA1UEAxMk
YzExYWIwMWQtZTI3Ny00MzE5LTg2ZTUtYmQ2ZGQ2MDc4MTY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+kW0eLtsTMKmoDIcB5++Fk0Qd1AXlw+RS03o
LSlaLovUQG0jrQ4GTkA/KNsbzlbOXCZy5RLOcUVXGm5qB1wE2QJYXu/B2LnQApqg
5tyY1hf0MSLApV/IF4JxCsMPMS5UIU7S6V2LqK1PopzTbPdfdKo1lKm8YQFSqMGx
iUz34GWRol8guhEVV1BMF+2QrhJcdH4DJ6r5wdH8l+/CPrcHU+cxmgefpqcTqF5E
YkGSgN2BZPzKstJEWjWoUp1SoBP0KeCbkyjhWp3HB9uVStAlHQQH8QVBsl1bqWoP
FnXwyE3/g1i9mu2pjNSzBO2ifiSeRMf+PvKo/xNBpj2PtjYRvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLmHbmniORHcV8KwhPSNSctzUN81MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYThiMGRiNzYtM2FlZi0z
NGY0LTg1M2QtNjI1ZjJiNTUzMDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSYfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGIBqDymjdmLEJrrp3APbS8D5g74hPZUBVacqolMIhUmgIS9GJmq2twL
RhV+KpHqFcFvhtUNZAbh31aD9KBl3hQTjzBspk6dJyee/H9ax0QgJWw/+4a7Gin5
juYJGgoLivCqBaFze64F4dpuCKEM0i01nTBi07+Q/sF2+4whNDWk5f/KRDQyK04b
GApRpbQD0jfdwx0Hqyq69Au0/cAIuI8tSqxbV+r/+/UXQzMeYSDzwUxRVuQBbXUy
gsbqokJ0UNu9K7NGFHiO2lwvDcQ2FqesjQcOxrR4URrpT/qqeGIj3fO61UxlpcrM
SERhfru5VzCeQlGVraEV996DMU/Bp2g=
-----END CERTIFICATE-----
Generated at Sat Oct 11 11:07:58 2025 by rpki-client