Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ca794202-fb43-3e4f-8448-779f532c1979.roa
File:                     ca794202-fb43-3e4f-8448-779f532c1979.roa (raw, json)
Hash identifier:          XS7f09BexMqf4sjfIEYeqnJhkSgRfCILpbxGlqnHB5E=
Subject key identifier:   00:14:94:A1:19:B6:CE:9D:61:81:5E:7D:6F:93:4B:09:96:D0:F7:6B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849CFFF72065DCB34D9278D7700
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ca794202-fb43-3e4f-8448-779f532c1979.roa
Signing time:             Sun 11 May 2025 01:00:47 +0000
ROA not before:           Sun 11 May 2025 01:00:47 +0000
ROA not after:            Sat 09 Aug 2025 01:00:47 +0000
asID:                     18779
IP address blocks:        45.39.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cf:ff:72:06:5d:cb:34:d9:27:8d:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 11 01:00:47 2025 GMT
            Not After : Aug  9 01:00:47 2025 GMT
        Subject: CN=5c70e1bc-ea19-4899-9a9a-e3ba8c39d842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d2:82:1a:15:3b:35:40:35:e3:23:13:d9:4a:
                    59:25:1a:55:15:23:a7:f2:7f:43:52:79:34:76:27:
                    72:27:43:b6:a6:52:25:ee:0a:94:f0:50:56:01:41:
                    0a:c0:fc:48:cf:1e:23:3f:26:68:9f:2b:74:c3:0c:
                    0d:04:bf:13:d0:47:19:af:2d:b6:67:34:c8:95:ab:
                    a1:a6:2d:06:1a:35:1b:16:3a:72:7e:40:60:4f:e7:
                    e0:49:0a:48:03:5f:a2:bc:ee:36:78:a0:95:7f:11:
                    0c:73:bc:ca:84:05:35:e5:53:d7:15:fa:8c:bd:87:
                    a6:3f:f7:e9:0f:91:03:df:52:a1:76:3b:bd:f3:d2:
                    dd:84:6a:52:35:9b:8e:73:fb:5f:df:0f:7c:7c:94:
                    5a:53:76:32:95:54:3a:2e:9c:00:b0:84:90:b4:cc:
                    03:d9:83:d2:89:71:88:3d:c9:35:4b:8a:09:ed:f7:
                    83:5b:2d:6f:21:4a:c4:dc:e8:1c:e0:5d:3b:fc:a9:
                    83:82:21:ec:23:de:b6:ba:d1:ab:4b:e3:be:e8:f7:
                    9a:01:9e:92:14:5a:78:b5:f9:cf:d2:bc:af:ba:3f:
                    d9:bb:f9:9b:b6:af:84:b2:c7:99:2a:fa:a0:96:a0:
                    1b:36:0b:9e:bb:15:be:18:b3:5e:40:80:88:95:f6:
                    ff:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:14:94:A1:19:B6:CE:9D:61:81:5E:7D:6F:93:4B:09:96:D0:F7:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ca794202-fb43-3e4f-8448-779f532c1979.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:d9:c8:92:5f:16:1c:ab:e1:34:48:93:e5:ec:a1:3c:e2:77:
         2c:f7:21:1c:1d:90:92:85:47:a9:6a:e4:4a:28:53:02:4e:78:
         e1:94:a1:4e:0e:a1:c7:b8:9d:b7:55:16:93:8b:b7:e2:d4:14:
         0d:4b:f7:79:dd:a1:3d:77:1f:c0:2d:e3:9d:fc:fd:bc:62:7f:
         6e:50:8a:1c:53:16:7e:a5:a6:ba:36:79:32:87:a3:17:32:42:
         1b:10:22:a6:14:50:03:2a:31:bc:9a:35:0a:39:37:09:01:03:
         31:53:26:60:07:21:7e:1d:7f:6f:d4:71:33:f9:27:84:94:e2:
         5d:1b:fa:c5:25:16:de:d3:5f:28:ae:1c:49:3b:74:02:4f:f0:
         2b:0a:1e:b8:7a:eb:d0:44:64:9c:b9:84:8f:8c:9e:ef:6d:9b:
         fa:1e:fa:43:25:ae:ed:09:22:ca:4d:da:3f:ff:e9:46:7f:4d:
         97:7e:35:51:a4:d9:4e:76:2f:a7:06:b9:b5:1d:a2:b4:82:b3:
         1f:97:95:cf:8c:c7:d3:a9:e2:89:5c:9e:c1:52:9f:79:9c:ad:
         66:95:fe:98:eb:c7:1b:59:e5:a2:10:3a:a8:6a:43:b9:ac:19:
         9a:61:ba:57:9d:fa:0e:0e:4b:c2:58:37:4d:ed:1b:26:1a:49:
         55:43:07:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnP/3IGXcs02SeNdwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDUxMTAxMDA0N1oXDTI1MDgwOTAxMDA0N1owLzEtMCsGA1UEAxMk
NWM3MGUxYmMtZWExOS00ODk5LTlhOWEtZTNiYThjMzlkODQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtKCGhU7NUA14yMT2UpZJRpVFSOn8n9DUnk0
didyJ0O2plIl7gqU8FBWAUEKwPxIzx4jPyZonyt0wwwNBL8T0EcZry22ZzTIlauh
pi0GGjUbFjpyfkBgT+fgSQpIA1+ivO42eKCVfxEMc7zKhAU15VPXFfqMvYemP/fp
D5ED31Khdju989LdhGpSNZuOc/tf3w98fJRaU3YylVQ6LpwAsISQtMwD2YPSiXGI
Pck1S4oJ7feDWy1vIUrE3Ogc4F07/KmDgiHsI962utGrS+O+6PeaAZ6SFFp4tfnP
0ryvuj/Zu/mbtq+EsseZKvqglqAbNgueuxW+GLNeQICIlfb/8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAAUlKEZts6dYYFefW+TSwmW0PdrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvY2E3OTQyMDItZmI0My0z
ZTRmLTg0NDgtNzc5ZjUzMmMxOTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSdYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAfZyJJfFhyr4TRIk+XsoTzidyz3IRwdkJKFR6lq5EooUwJOeOGUoU4O
oce4nbdVFpOLt+LUFA1L93ndoT13H8At4538/bxif25QihxTFn6lpro2eTKHoxcy
QhsQIqYUUAMqMbyaNQo5NwkBAzFTJmAHIX4df2/UcTP5J4SU4l0b+sUlFt7TXyiu
HEk7dAJP8CsKHrh669BEZJy5hI+Mnu9tm/oe+kMlru0JIspN2j//6UZ/TZd+NVGk
2U52L6cGubUdorSCsx+Xlc+Mx9Op4olcnsFSn3mcrWaV/pjrxxtZ5aIQOqhqQ7ms
GZphuled+g4OS8JYN03tGyYaSVVDB1Q=
-----END CERTIFICATE-----
Generated at Mon Jul 21 12:35:36 2025 by rpki-client