Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1d7229e9-68f9-330e-b3d0-139d97c82862.roa
File:                     1d7229e9-68f9-330e-b3d0-139d97c82862.roa (raw, json)
Hash identifier:          6nLbuqk+nlRbDn66gQBcKCl621wAmjnKapcjH1FaKHs=
Subject key identifier:   AA:3F:12:59:BF:13:B5:3A:FE:39:ED:27:25:D3:3E:05:32:8D:FE:1D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849CFFF70D86B240F5F8ADF3480
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1d7229e9-68f9-330e-b3d0-139d97c82862.roa
Signing time:             Sun 11 May 2025 01:00:47 +0000
ROA not before:           Sun 11 May 2025 01:00:47 +0000
ROA not after:            Sat 09 Aug 2025 01:00:47 +0000
asID:                     18779
IP address blocks:        45.38.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cf:ff:70:d8:6b:24:0f:5f:8a:df:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 11 01:00:47 2025 GMT
            Not After : Aug  9 01:00:47 2025 GMT
        Subject: CN=c3444068-8860-495a-b4a3-5acdabc6a552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:46:ae:7e:5f:f3:d3:33:59:e0:df:57:59:a4:
                    09:27:cf:fe:bd:5b:ea:43:5c:ed:4d:c8:68:d8:c3:
                    86:b9:8e:48:0b:fa:f4:64:ac:6c:10:1d:81:e7:b4:
                    9c:3f:1e:cf:07:65:dc:2a:d7:c1:20:d3:d3:14:11:
                    30:e7:40:bd:a3:b4:a1:fa:c8:e8:dd:e6:7a:c8:60:
                    1d:41:8a:bc:d8:b2:14:33:3e:43:b2:6f:0f:19:85:
                    16:1d:8e:7e:35:21:e4:a9:b4:67:b2:9c:f5:4e:20:
                    3d:d4:35:1f:37:e2:a5:57:bc:66:a9:35:87:ab:b7:
                    fb:35:3a:c0:cf:95:88:6b:6c:44:f9:24:47:b0:3a:
                    d1:f7:50:0a:cf:68:1d:88:f9:e4:87:90:5c:da:b4:
                    1f:ca:62:b4:07:97:c1:f2:05:83:ed:eb:27:f1:d2:
                    ba:b6:f4:a4:0d:37:3d:bf:e7:9a:a4:22:85:3a:be:
                    0a:a1:19:1a:d4:9f:cc:c8:f8:fe:dd:b6:d8:5e:b8:
                    92:96:4e:79:fe:6f:c8:ee:0b:1d:e1:cd:24:65:4d:
                    aa:4f:e1:3f:51:4e:82:87:b5:2e:df:92:da:ff:c8:
                    92:91:56:35:6e:25:7c:40:0f:e3:e5:04:19:45:19:
                    85:49:2d:11:07:28:af:b0:de:97:c8:ba:58:b9:28:
                    74:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:3F:12:59:BF:13:B5:3A:FE:39:ED:27:25:D3:3E:05:32:8D:FE:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1d7229e9-68f9-330e-b3d0-139d97c82862.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:03:e2:7e:00:6b:1a:5e:5a:c5:cb:db:c3:e3:83:68:06:1d:
         9c:5c:e0:d4:f1:80:ed:54:21:1e:22:24:5b:42:85:0b:da:53:
         29:9a:59:bf:fe:0d:c9:ab:7f:33:d4:f6:cf:d8:57:cc:78:20:
         99:29:83:5d:58:3c:c3:fa:f8:51:40:2f:f6:9a:b2:7f:31:01:
         30:c0:a1:ce:8b:0d:69:49:75:ef:f3:16:8a:b3:bd:28:51:95:
         e7:cd:3d:59:d0:4d:05:e4:b6:2d:71:82:30:ee:03:88:88:8f:
         0d:6e:fa:70:1f:43:34:26:b2:6e:24:e4:6e:09:e9:d0:29:ee:
         b2:7b:31:71:1c:be:db:70:11:fc:80:34:45:e4:4f:cd:1a:88:
         4d:e9:a4:a5:35:0c:ac:54:92:13:79:bc:73:3a:a9:91:d6:bb:
         be:43:99:aa:4a:74:ce:2c:f0:4f:5a:34:a1:17:1a:d4:7f:52:
         b8:b3:f3:9b:72:bf:7b:d6:f8:37:62:96:a4:78:84:df:07:a4:
         06:8b:67:56:4d:a4:ff:25:b3:70:0c:83:be:d8:21:09:96:11:
         44:a2:f1:b9:a6:6c:2e:28:84:90:25:bd:96:d6:f0:ba:e3:ae:
         69:f7:49:93:9e:7c:e5:0a:d4:54:1a:36:e2:87:d2:72:01:77:
         89:22:ab:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:40:54 2025 by rpki-client