Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c5ea945e-653e-33fa-87f6-f42e1821864e.roa
File:                     c5ea945e-653e-33fa-87f6-f42e1821864e.roa (raw, json)
Hash identifier:          fxOvqe0mUH13JdsUNpmnGSMC/lVNZU8FPM/IoCM21tI=
Subject key identifier:   24:A0:CC:DB:56:21:B7:5C:51:37:41:6A:75:0F:21:80:E6:6D:13:16
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A84A5A75A616529D266C30348
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c5ea945e-653e-33fa-87f6-f42e1821864e.roa
Signing time:             Mon 14 Jul 2025 18:01:14 +0000
ROA not before:           Mon 14 Jul 2025 18:01:14 +0000
ROA not after:            Sun 12 Oct 2025 18:01:14 +0000
asID:                     44559
IP address blocks:        45.38.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:a5:a7:5a:61:65:29:d2:66:c3:03:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 14 18:01:14 2025 GMT
            Not After : Oct 12 18:01:14 2025 GMT
        Subject: CN=ea7e4772-4552-47b2-8256-b9c11583d226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:12:46:91:cd:e4:b1:38:90:59:d8:a0:f9:48:
                    43:bd:bf:38:6d:ed:8c:df:4b:71:95:b6:54:18:fc:
                    db:09:ca:3b:ba:aa:77:67:16:12:fb:d1:c4:63:e5:
                    df:54:07:40:ca:67:21:11:fb:11:82:fb:c9:cc:4b:
                    8e:1c:f4:7c:eb:52:49:42:87:c4:ad:e8:3c:8f:8a:
                    5a:1c:fd:59:5f:c2:ac:3d:9f:06:62:7a:29:34:1d:
                    a0:34:83:f2:1a:1d:91:c0:b4:bd:a2:c4:26:a4:72:
                    c9:c9:cc:57:d1:19:db:bb:74:7f:c6:ae:a0:58:79:
                    a6:7a:2e:91:34:8b:51:ea:2d:80:cd:99:b2:1a:58:
                    a4:c4:70:1b:f8:6e:72:eb:ce:77:28:a8:da:66:04:
                    03:7e:5e:b5:d0:ca:0e:a2:b7:bc:48:66:82:19:94:
                    6c:3c:41:56:fa:01:18:ce:d5:f2:15:b3:0a:b6:d6:
                    22:00:dc:c3:b2:32:25:5b:b4:0d:28:c4:fe:99:c2:
                    74:8b:b7:35:3f:16:a6:c0:6a:d6:b7:ee:8c:fc:a8:
                    56:f5:3f:3d:32:73:56:a6:7f:25:ac:d1:19:58:a3:
                    0d:be:a2:fe:93:b7:b8:ae:1b:9b:df:78:1a:60:32:
                    ed:bc:e6:31:61:4d:3b:b3:e1:f4:f2:56:51:f2:b8:
                    4e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A0:CC:DB:56:21:B7:5C:51:37:41:6A:75:0F:21:80:E6:6D:13:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c5ea945e-653e-33fa-87f6-f42e1821864e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:23:85:d6:1d:4a:e3:dd:8d:d6:27:e9:15:4e:fd:ab:78:64:
         8c:39:04:58:22:2f:38:1f:62:9e:be:78:70:e7:f2:5f:2f:58:
         92:2a:5b:79:25:e0:5e:a5:65:5e:48:75:16:c1:c5:64:db:46:
         57:27:02:60:33:28:ab:a7:45:4e:dd:ac:65:3b:7e:fc:25:ae:
         2d:51:17:69:23:ac:fb:41:a6:8b:8b:b1:e3:c9:0d:c1:1e:ba:
         11:6c:6a:37:4c:74:d5:d8:f4:ad:20:2f:6c:e7:f4:32:b1:00:
         bc:00:78:f5:b6:6b:81:f5:1f:2e:92:ff:2b:53:e6:0b:d9:2b:
         8c:8d:3f:2d:4b:2d:b6:9c:45:23:46:3e:42:62:dc:68:3c:c6:
         9b:f8:54:a2:31:a5:86:b0:f5:bc:a2:e8:46:39:5e:2c:60:51:
         3b:f0:54:42:83:d6:0a:4c:86:6d:62:a0:ec:ac:92:03:1e:19:
         e5:26:25:e3:48:c5:74:a4:bf:e0:04:bd:61:1a:8f:13:06:2d:
         99:86:89:a4:58:71:d0:8d:c0:a9:d8:d6:43:c3:65:c8:15:87:
         8c:1a:08:7a:7a:66:10:20:7f:1a:20:42:47:c4:fa:33:fb:cb:
         cd:ce:89:94:7f:4d:04:e7:9d:31:59:fe:e0:ea:e9:f2:8f:e8:
         fd:e2:08:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEpadaYWUp0mbDA0gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDcxNDE4MDExNFoXDTI1MTAxMjE4MDExNFowLzEtMCsGA1UEAxMk
ZWE3ZTQ3NzItNDU1Mi00N2IyLTgyNTYtYjljMTE1ODNkMjI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxJGkc3ksTiQWdig+UhDvb84be2M30txlbZU
GPzbCco7uqp3ZxYS+9HEY+XfVAdAymchEfsRgvvJzEuOHPR861JJQofEreg8j4pa
HP1ZX8KsPZ8GYnopNB2gNIPyGh2RwLS9osQmpHLJycxX0Rnbu3R/xq6gWHmmei6R
NItR6i2AzZmyGlikxHAb+G5y6853KKjaZgQDfl610MoOore8SGaCGZRsPEFW+gEY
ztXyFbMKttYiANzDsjIlW7QNKMT+mcJ0i7c1PxamwGrWt+6M/KhW9T89MnNWpn8l
rNEZWKMNvqL+k7e4rhub33gaYDLtvOYxYU07s+H08lZR8rhO+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCSgzNtWIbdcUTdBanUPIYDmbRMWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYzVlYTk0NWUtNjUzZS0z
M2ZhLTg3ZjYtZjQyZTE4MjE4NjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSbnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADcjhdYdSuPdjdYn6RVO/at4ZIw5BFgiLzgfYp6+eHDn8l8vWJIqW3kl
4F6lZV5IdRbBxWTbRlcnAmAzKKunRU7drGU7fvwlri1RF2kjrPtBpouLsePJDcEe
uhFsajdMdNXY9K0gL2zn9DKxALwAePW2a4H1Hy6S/ytT5gvZK4yNPy1LLbacRSNG
PkJi3Gg8xpv4VKIxpYaw9byi6EY5XixgUTvwVEKD1gpMhm1ioOyskgMeGeUmJeNI
xXSkv+AEvWEajxMGLZmGiaRYcdCNwKnY1kPDZcgVh4waCHp6ZhAgfxogQkfE+jP7
y83OiZR/TQTnnTFZ/uDq6fKP6P3iCHw=
-----END CERTIFICATE-----
Generated at Mon Jul 21 18:11:50 2025 by rpki-client