Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dad4b2f2-8771-38b0-be0b-5302a5cb1dde.roa
File:                     dad4b2f2-8771-38b0-be0b-5302a5cb1dde.roa (raw, json)
Hash identifier:          wVwUN5htBGZXHR8btyGGSF0EIjSc0F0HjQV461KMlvU=
Subject key identifier:   DB:B7:F8:B2:A7:6B:99:E2:3D:A3:45:62:79:DB:A4:73:96:B4:21:29
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B758CADDA0815B3247D7EEFC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dad4b2f2-8771-38b0-be0b-5302a5cb1dde.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     50131
IP address blocks:        45.39.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:ad:da:08:15:b3:24:7d:7e:ef:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=3cbc9302-96f7-4d66-9961-341a347147d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:3d:0f:9a:d9:58:70:ca:2d:81:70:74:69:c9:
                    03:e6:ee:e7:4b:2d:cf:92:94:4b:a0:8b:26:7f:92:
                    77:a6:68:11:73:7e:fe:0a:59:6b:fb:46:ca:be:d7:
                    dd:35:1a:41:81:ff:10:af:2e:2c:91:19:f0:5c:f0:
                    b9:16:22:18:01:2f:e4:be:2a:54:cc:81:68:40:e5:
                    4b:38:9d:bb:a2:a4:5f:39:0f:00:52:d0:9a:c5:fb:
                    06:d7:f9:9c:52:8c:ff:ea:5f:a1:c6:fa:9a:ee:bc:
                    9b:f7:52:35:b4:f1:67:7a:a9:9d:ed:78:bd:f7:d6:
                    5d:f6:05:c7:e4:e1:5a:0b:1b:2a:da:d4:16:be:7c:
                    da:f7:21:c0:7a:b5:37:cd:51:22:22:b2:66:de:cc:
                    09:75:2b:51:e9:b5:0d:b7:83:3c:4f:56:c0:bc:3c:
                    20:8b:8e:82:b3:e3:13:fb:55:77:82:ae:54:3b:32:
                    ca:a7:b6:db:97:c4:a0:ea:1e:e2:4c:7c:2a:9d:a2:
                    59:3e:1d:19:8f:ff:0b:4c:b7:55:b7:c2:4c:50:37:
                    84:4b:4b:55:76:9d:04:7b:58:2f:cf:97:7f:77:cb:
                    3a:64:8f:29:8f:12:d6:01:40:fc:1f:ee:e3:68:fb:
                    ec:ca:fe:3e:d3:09:d7:e2:2e:df:e8:0e:45:f5:8a:
                    73:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:B7:F8:B2:A7:6B:99:E2:3D:A3:45:62:79:DB:A4:73:96:B4:21:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dad4b2f2-8771-38b0-be0b-5302a5cb1dde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:44:91:60:a1:28:ea:b5:3b:d8:0b:79:73:82:76:5b:65:8d:
         bb:83:0c:4c:ff:65:06:6c:2a:29:fd:bc:b9:90:e8:ca:51:05:
         ec:47:d9:fc:6a:a9:96:c7:53:d2:28:09:91:ac:c9:1b:48:38:
         8d:3d:0c:80:ff:f5:cf:73:2d:23:b0:56:ab:e6:8e:a1:c0:ee:
         a2:2f:65:40:59:24:00:80:35:94:42:46:89:91:29:da:c7:73:
         81:0c:a2:16:b7:88:26:1d:2a:b1:db:93:10:12:72:7f:7c:94:
         58:f0:e6:e6:b5:b9:49:77:af:fd:cd:4a:af:89:9e:68:71:04:
         68:04:3b:19:ea:73:20:62:1b:f5:1f:2a:67:86:29:93:0c:49:
         74:c0:5d:54:cb:be:ac:92:a6:05:04:eb:3f:3b:0f:1b:4d:b9:
         56:97:f6:54:88:0d:61:c9:00:2b:4a:6c:be:aa:bf:a4:43:08:
         5b:b7:b2:bf:d2:ad:9c:e7:5c:bb:ad:e3:7a:9d:8c:a8:6b:9b:
         dd:ac:a0:2e:2a:eb:26:6d:c3:1f:16:c5:55:3e:5c:bb:c3:30:
         49:ab:0b:8f:85:86:df:05:7a:1d:d2:61:96:73:f7:d0:0e:0d:
         07:04:8f:53:e3:19:2f:e6:ef:92:03:12:ff:f2:a1:b5:80:82:
         11:76:c2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:09:17 2025 by rpki-client