Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1d6f2863-35a1-366f-9047-ba0318da0159.roa
File:                     1d6f2863-35a1-366f-9047-ba0318da0159.roa (raw, json)
Hash identifier:          plrBrl+uPld/h1aEzP/98Pd6vEyfWzrv12Fn9J7mCxY=
Subject key identifier:   DA:E9:AD:20:8A:9A:DD:5A:5E:2E:C8:EB:24:90:F0:DA:8E:5E:AC:CC
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858488DCD85F4C4CB31C29C098040
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1d6f2863-35a1-366f-9047-ba0318da0159.roa
Signing time:             Wed 15 Jan 2025 15:09:58 +0000
ROA not before:           Wed 15 Jan 2025 15:09:58 +0000
ROA not after:            Tue 15 Apr 2025 14:09:58 +0000
asID:                     202015
IP address blocks:        45.38.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Feb 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:cd:85:f4:c4:cb:31:c2:9c:09:80:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan 15 15:09:58 2025 GMT
            Not After : Apr 15 14:09:58 2025 GMT
        Subject: CN=8173d9ba-ab92-441f-a4c1-2a6affe21b40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e7:4b:ee:7f:ea:42:9d:62:dc:c8:7d:89:2c:
                    62:a1:62:ce:e7:6d:4e:32:43:ee:b1:e0:8b:2d:88:
                    9f:73:bf:7e:88:94:2e:d2:38:95:d7:f1:cd:7e:1a:
                    f1:52:26:96:44:76:c3:ad:d1:cf:b6:34:a4:4a:0f:
                    37:27:9a:e5:9e:59:de:cf:8b:96:22:f9:b2:4c:16:
                    14:26:08:d5:ba:ae:c5:e2:fd:12:a5:51:ea:2f:c5:
                    7f:9b:56:f0:26:05:2f:11:6e:88:5e:9a:25:dc:b0:
                    7a:0d:dd:e8:f2:e5:ca:41:2b:50:fc:48:72:db:92:
                    fd:7a:db:46:b0:1d:8d:9c:11:db:9a:c6:86:90:4e:
                    0b:42:95:db:35:90:91:77:5a:3a:de:ab:fd:e6:ca:
                    02:41:7a:96:e1:3c:71:3b:00:a2:89:a3:c4:56:f7:
                    fa:e1:6d:87:28:86:7c:e8:50:50:67:17:fb:ff:a9:
                    bf:ea:b0:e9:e2:48:97:a5:d9:16:71:99:d8:5e:1f:
                    d2:1b:63:65:76:31:b5:85:13:14:aa:87:35:f6:2f:
                    a8:1a:d8:58:2c:fe:72:7d:e9:e3:17:8e:0b:5e:ec:
                    e5:32:0e:a4:48:d4:04:9d:12:3a:80:ea:1d:3e:9a:
                    ab:f6:b0:d5:81:39:57:f9:01:22:5d:56:55:49:4f:
                    5d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E9:AD:20:8A:9A:DD:5A:5E:2E:C8:EB:24:90:F0:DA:8E:5E:AC:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1d6f2863-35a1-366f-9047-ba0318da0159.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:94:fb:db:dc:3f:32:5a:04:70:3f:a4:93:c7:01:bd:bb:ad:
         20:b9:9d:da:94:87:f3:3c:db:f4:d1:61:eb:65:f1:a1:15:96:
         42:7f:58:b4:25:9f:0b:42:45:af:53:ba:55:26:7d:0c:dd:37:
         47:07:98:38:5a:0b:76:95:c7:33:10:60:74:95:f4:ae:02:02:
         4d:5c:d8:7a:9b:72:fc:18:c1:a5:f8:28:45:45:52:4a:08:8a:
         82:ad:be:d4:1c:2f:66:1d:5b:aa:f9:eb:4f:10:6c:d9:f4:44:
         2c:9d:1a:17:d9:40:80:fd:56:76:23:34:b3:39:58:da:90:62:
         42:ed:57:53:56:a7:10:3d:45:4c:60:3d:10:41:a2:cc:ca:12:
         d4:2c:6d:53:ba:1a:78:10:12:09:02:52:fb:8e:9d:43:9b:ae:
         8b:82:d3:06:e2:1a:71:41:17:6f:cb:15:ec:bc:1b:02:6f:de:
         1e:55:12:fc:33:4d:43:dc:7a:78:00:16:53:46:29:d5:ea:c9:
         4c:f9:4d:61:5b:de:49:78:21:80:1c:13:6d:fc:0e:d3:ac:2a:
         f8:61:ed:02:ee:a1:fa:52:7a:5f:a4:79:74:5e:27:6b:27:cf:
         c6:3e:16:03:f4:32:16:05:d8:05:14:14:a3:e6:46:47:10:6e:
         b9:a9:89:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:20:02 2025 by rpki-client