Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e87c720d-4b23-3181-9468-4cb395b65f11.roa
File:                     e87c720d-4b23-3181-9468-4cb395b65f11.roa (raw, json)
Hash identifier:          brx8WLzambbSTrwh4hnxpH1udPP1aHv72I26xHPGdYE=
Subject key identifier:   B4:74:7C:0F:75:E6:C9:88:8E:83:D8:05:3A:70:57:A4:48:AF:5E:F8
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848D0ABC84390357779C87028B0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e87c720d-4b23-3181-9468-4cb395b65f11.roa
Signing time:             Sat 08 Feb 2025 14:00:52 +0000
ROA not before:           Sat 08 Feb 2025 14:00:52 +0000
ROA not after:            Fri 09 May 2025 13:00:52 +0000
asID:                     44477
IP address blocks:        45.38.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d0:ab:c8:43:90:35:77:79:c8:70:28:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb  8 14:00:52 2025 GMT
            Not After : May  9 13:00:52 2025 GMT
        Subject: CN=ca48820f-3fe6-45df-a33f-39af40719354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a4:59:64:79:22:f0:8e:13:33:c6:9f:7a:2f:
                    d8:18:43:92:42:18:6a:6f:90:14:75:8a:8a:60:a9:
                    43:40:65:aa:62:82:f4:9b:eb:d7:44:10:2c:da:ea:
                    35:cc:6d:79:a7:e0:c4:69:ef:14:b8:45:13:78:0a:
                    58:2c:a5:d9:50:6e:b4:0f:2b:df:bf:21:55:ad:c6:
                    80:32:12:2f:4a:9e:e2:f1:cf:87:0d:fd:f1:27:f7:
                    b2:86:5b:f0:9c:79:a9:aa:30:1d:e6:31:e6:42:f5:
                    90:19:a8:ec:3e:36:4e:4c:27:23:99:f1:52:12:ce:
                    35:89:e3:15:26:4b:a4:14:6c:0f:45:4b:94:bd:d0:
                    a9:42:cb:f5:8c:2b:a6:ef:69:9c:50:0e:58:a3:e4:
                    52:50:10:ef:78:2c:07:24:5e:04:05:79:14:88:7f:
                    c2:68:3d:e9:e2:68:39:1f:07:1a:1f:14:48:57:96:
                    10:37:ad:b1:57:52:37:dc:d7:c2:9e:bf:74:a4:13:
                    36:a0:59:c1:70:e2:c4:5d:84:81:81:fe:0c:79:bb:
                    72:f6:b4:f2:1a:f4:8c:3a:6d:cd:44:fa:21:1b:ae:
                    fa:5f:91:df:3c:31:b5:6c:87:a1:78:78:21:5c:28:
                    9c:17:76:13:4e:20:a0:96:8e:61:76:7d:4b:28:7a:
                    da:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:74:7C:0F:75:E6:C9:88:8E:83:D8:05:3A:70:57:A4:48:AF:5E:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e87c720d-4b23-3181-9468-4cb395b65f11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:99:40:a1:7a:be:10:22:84:94:6d:79:ce:b5:43:ed:2b:1e:
         fd:17:2a:62:cf:d8:59:24:c0:50:3f:14:e3:47:e9:60:e1:89:
         24:93:30:4f:22:33:e1:93:44:22:98:d9:13:91:d0:50:51:7a:
         20:4d:6b:65:1a:99:19:e5:8e:50:bb:9a:91:4c:4e:fd:eb:1d:
         58:70:56:c0:0f:bc:46:22:99:05:50:5c:2c:d0:ed:82:15:ea:
         9f:b2:ad:48:4f:b6:68:7e:85:54:f9:d2:61:0a:af:e5:bf:a3:
         ea:ee:b3:45:6b:5a:21:26:a4:0d:5b:63:f3:b4:38:ee:a0:86:
         7b:c0:af:03:e6:9d:07:cf:eb:c2:8d:31:af:cf:30:d9:12:c5:
         f9:d2:26:d9:10:36:23:d0:12:6d:75:51:2d:37:f4:1c:bb:22:
         03:1f:9d:07:78:e7:f7:e9:a1:4a:a3:3f:db:52:96:df:dd:0d:
         3d:af:9f:0c:8f:c8:ac:98:30:74:9e:3d:82:70:f7:32:f1:81:
         a2:0a:47:fd:7c:09:bb:2b:ae:20:b6:b4:53:bc:46:7d:e1:87:
         9f:a7:41:7a:42:dc:1f:0d:f0:03:f1:ee:f7:63:31:01:38:b4:
         5f:0c:75:8e:dd:02:0e:93:cb:94:64:49:30:10:5e:1a:43:b2:
         2e:d8:11:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:59:30 2025 by rpki-client