Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/be320a1a-36e4-3ca9-bd8d-473229323f16.roa
File:                     be320a1a-36e4-3ca9-bd8d-473229323f16.roa (raw, json)
Hash identifier:          zdOStA8SwnhnManvovMZ0/UxMzBFDmeRigaJD2/eJIQ=
Subject key identifier:   DA:0D:F2:69:DE:AE:F4:B6:D1:41:EF:26:89:0F:D5:67:A0:4C:83:B0
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B3126F4FBDA3B763285216A80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/be320a1a-36e4-3ca9-bd8d-473229323f16.roa
Signing time:             Sun 14 Sep 2025 13:00:42 +0000
ROA not before:           Sun 14 Sep 2025 13:00:42 +0000
ROA not after:            Sat 13 Dec 2025 14:00:42 +0000
asID:                     61317
IP address blocks:        45.38.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:31:26:f4:fb:da:3b:76:32:85:21:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 14 13:00:42 2025 GMT
            Not After : Dec 13 14:00:42 2025 GMT
        Subject: CN=7ea65b52-4bf1-40a6-80a5-692508b0f780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:dc:0c:8c:61:57:79:d9:7b:c8:34:84:31:cb:
                    63:87:b5:24:22:1d:4a:5e:e9:e3:9e:7a:70:fe:7e:
                    7d:0a:45:6b:fc:6a:7a:61:48:48:5b:5c:59:3b:2f:
                    ca:af:c6:cf:01:74:55:74:69:5c:0e:ff:b1:99:39:
                    11:b0:de:35:31:40:46:a0:9e:1d:87:64:84:bc:92:
                    8d:9f:40:fe:50:dc:82:17:65:4c:56:e1:71:d7:73:
                    e4:b6:51:3f:b8:e3:99:f8:07:62:c4:32:04:49:9f:
                    2a:46:0d:f7:06:08:72:c3:15:2d:43:18:67:07:31:
                    52:b9:d9:b8:25:8c:12:3d:80:33:73:3d:1d:5c:a1:
                    a7:77:b0:26:05:78:4f:bf:fc:df:3a:1f:c2:80:95:
                    63:b4:d2:5c:7f:c8:f9:38:4c:a1:ce:5b:76:08:07:
                    24:8a:3f:8c:b4:02:f8:2d:65:fb:68:87:fd:cf:13:
                    42:52:0a:8e:7f:5a:0a:2d:36:44:b2:0f:4f:44:b3:
                    c4:49:f2:d9:7a:b6:07:00:0e:ef:b1:e7:91:06:8e:
                    64:22:70:2b:cd:cc:1c:ce:55:01:81:36:ea:f6:92:
                    61:d6:5b:6a:e1:2a:ba:51:fb:4c:97:fc:e8:b4:6b:
                    51:f0:99:24:ed:e3:01:be:4c:fb:9f:db:3a:12:96:
                    38:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:0D:F2:69:DE:AE:F4:B6:D1:41:EF:26:89:0F:D5:67:A0:4C:83:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/be320a1a-36e4-3ca9-bd8d-473229323f16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:3c:ff:0e:d6:40:0f:6c:f3:d2:63:72:55:fe:c7:36:e0:89:
         d4:f4:56:59:26:e7:07:b1:40:8b:fa:54:d2:12:8d:6b:cb:cf:
         b1:85:f3:dd:42:cd:9e:e0:a9:b0:08:f5:f9:e4:7a:95:28:ea:
         a1:90:d9:0d:f6:60:57:0c:ad:e2:2e:b1:43:6b:85:e7:14:dd:
         42:23:14:c5:d0:64:16:63:8b:d3:84:9c:96:40:a2:69:c4:f7:
         d7:ff:ac:5f:b8:02:36:3f:f1:5e:41:46:06:f8:44:2a:1d:2b:
         16:d6:25:63:bf:86:24:84:f2:82:e4:30:35:96:6c:0e:00:31:
         c1:6a:6d:25:e9:00:ec:f6:d0:5e:b2:6e:96:e7:39:64:5f:7e:
         9d:82:50:18:9f:ba:ac:5e:cf:eb:c1:0d:5a:18:7d:27:64:af:
         2a:3b:09:e3:b3:11:d0:6d:e7:49:8e:93:01:ab:3f:25:2e:e9:
         30:cd:b8:84:3e:8d:8e:d2:cb:32:77:50:5b:38:24:b9:30:0e:
         ec:09:21:b1:88:fc:34:6a:40:28:b2:79:f2:02:19:e1:5f:3f:
         6b:32:6c:04:8a:71:8b:8e:f9:65:01:eb:7f:65:ad:8c:06:22:
         a3:fc:b9:a3:0f:22:29:c8:d4:00:79:d4:62:de:6f:e5:23:52:
         db:02:ef:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:12:58 2025 by rpki-client