Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0c0571f0-b222-3061-a4aa-ef73d6c93791.roa
File:                     0c0571f0-b222-3061-a4aa-ef73d6c93791.roa (raw, json)
Hash identifier:          FAaQmMhw3LFyUYhIo3pDp3S5G39OOHvo84rPsTX9hCY=
Subject key identifier:   DE:1A:FF:EA:FC:FA:A0:D7:84:5A:AC:CA:B7:66:B0:12:61:99:12:BB
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849419E7C2E3120961C7AF97650
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0c0571f0-b222-3061-a4aa-ef73d6c93791.roa
Signing time:             Fri 21 Mar 2025 01:00:39 +0000
ROA not before:           Fri 21 Mar 2025 01:00:39 +0000
ROA not after:            Thu 19 Jun 2025 01:00:39 +0000
asID:                     212238
IP address blocks:        45.39.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:41:9e:7c:2e:31:20:96:1c:7a:f9:76:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 21 01:00:39 2025 GMT
            Not After : Jun 19 01:00:39 2025 GMT
        Subject: CN=063199ac-6db0-4389-acf6-cb00c7a8dddd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:62:16:43:40:26:11:61:64:ae:de:fa:74:57:
                    a2:95:b5:52:0c:4a:02:71:dc:2c:e5:03:49:b9:9a:
                    f5:9c:f8:3c:5a:82:f9:12:b4:2d:ce:db:44:8a:0e:
                    e9:94:34:ff:21:fe:21:e8:a0:c0:ad:64:90:63:e6:
                    b8:ed:05:97:20:f9:1f:41:02:d8:5e:b2:74:2a:99:
                    2d:65:fc:74:77:f8:77:7f:c4:d1:a3:a5:d8:ae:e7:
                    15:4d:bd:41:46:32:77:28:13:b4:81:82:77:e6:24:
                    5b:b2:12:25:81:db:69:72:04:8e:2b:3a:7c:d0:65:
                    5d:91:3b:ec:2a:33:3c:22:7c:ac:f5:84:71:c3:0b:
                    34:4c:9a:74:11:2e:03:76:76:ee:d0:09:e1:5d:d5:
                    c7:44:64:87:f2:ae:35:3d:6c:04:1e:d9:a8:c2:94:
                    3a:58:4b:0d:58:71:7b:26:30:1e:c5:de:78:0c:d5:
                    d2:35:d2:bc:ab:ee:8c:15:95:a4:48:c8:d7:7b:23:
                    b8:de:08:7e:e5:e9:6a:ac:b3:75:aa:19:c9:a7:eb:
                    60:3f:2d:b9:29:a6:6c:87:63:0e:1f:e7:59:c7:ca:
                    76:e9:68:53:c8:fa:c8:ba:4b:71:6f:71:1f:78:33:
                    1e:47:70:a6:8a:ff:5f:5d:22:c6:98:6f:30:7b:0b:
                    9b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:1A:FF:EA:FC:FA:A0:D7:84:5A:AC:CA:B7:66:B0:12:61:99:12:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0c0571f0-b222-3061-a4aa-ef73d6c93791.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:08:16:ef:c5:61:90:8c:38:11:18:dd:22:b1:f5:26:0b:b3:
         f5:6c:45:c4:a2:4c:26:3a:9f:87:b3:43:87:67:1e:c0:bc:d0:
         21:52:6a:83:09:c1:54:d5:27:29:20:fe:af:79:a7:1f:4a:5a:
         e3:3a:32:ab:79:7f:a9:01:51:b3:f2:05:0e:f9:39:24:6c:0a:
         9e:cd:71:3a:95:67:6c:d0:f3:9c:34:92:48:d0:34:6a:a7:90:
         f0:1f:e0:ac:aa:65:89:56:11:83:86:fc:e4:0c:56:88:6c:c5:
         af:70:85:67:9e:2c:b5:4d:6f:1a:3f:74:73:7c:ea:50:4e:77:
         c2:14:c9:bc:3d:c4:7a:4f:42:ab:e8:fb:21:46:4f:68:f1:25:
         0d:53:5d:dd:3c:ae:12:af:cb:ce:e5:11:c0:15:8e:57:eb:96:
         5b:12:78:41:2a:c1:43:46:5b:2c:62:a2:6a:07:f5:4a:3f:80:
         ce:23:23:00:82:23:06:f5:07:01:3c:20:f0:bb:52:8c:c6:d2:
         17:81:a9:80:73:02:52:b0:93:01:fd:93:69:db:d4:38:a2:12:
         1c:67:f5:c5:7c:69:cf:b8:99:1d:2b:59:73:09:17:89:d0:c2:
         de:0b:02:3e:df:03:98:72:aa:ce:be:2c:a5:8a:2d:c7:7a:63:
         3e:86:36:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:29:47 2025 by rpki-client