Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/31dd7c9c-7291-328e-8c60-28ddd87d13f2.roa
File:                     31dd7c9c-7291-328e-8c60-28ddd87d13f2.roa (raw, json)
Hash identifier:          rzNSpQ2QjzyP5m+88+JiZ9A2Py3ZngeGlZAGe+sWj4o=
Subject key identifier:   B3:E7:D3:94:DB:46:AC:AF:DD:96:D6:61:5A:E2:BF:15:E0:39:83:46
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858492E13B53CE509FCDCEDC26D80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/31dd7c9c-7291-328e-8c60-28ddd87d13f2.roa
Signing time:             Fri 14 Mar 2025 01:00:39 +0000
ROA not before:           Fri 14 Mar 2025 01:00:39 +0000
ROA not after:            Thu 12 Jun 2025 01:00:39 +0000
asID:                     212238
IP address blocks:        45.39.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:13:b5:3c:e5:09:fc:dc:ed:c2:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 14 01:00:39 2025 GMT
            Not After : Jun 12 01:00:39 2025 GMT
        Subject: CN=2755d818-39bc-4cf3-b022-637843f3ee69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:33:6c:b9:06:31:ae:34:1f:df:ca:69:a1:4a:
                    74:7a:a7:4c:84:82:80:95:04:1a:17:ab:ab:e0:28:
                    28:a4:a0:00:30:cd:47:5f:1f:bb:08:42:e5:de:27:
                    4d:8e:fc:c8:f3:fa:0f:8d:ed:20:a9:c9:0b:27:e7:
                    19:0a:2d:87:17:c4:e8:73:f4:3d:af:89:c6:96:c2:
                    be:1c:b0:d0:ca:d2:3c:59:fd:db:89:90:b5:3c:36:
                    78:6b:42:88:39:22:af:17:83:dc:71:ba:b0:20:e9:
                    86:6d:ec:8c:94:25:51:68:c9:19:7e:21:d8:80:8f:
                    e5:17:31:a6:02:59:91:95:1c:d9:96:92:64:4a:04:
                    4e:0c:a6:32:44:e3:78:69:8f:ba:f8:c0:46:95:9d:
                    16:be:23:f5:2b:41:fb:6c:d0:3e:10:8d:2c:86:33:
                    3a:ce:4f:7b:be:f7:73:70:a4:34:1a:41:b7:d4:66:
                    1c:f6:c0:be:44:b7:18:e9:d5:8a:ac:d8:3b:c6:1e:
                    4b:05:9f:51:e4:8d:75:6d:55:5e:6c:0c:1a:5f:57:
                    e5:69:85:16:d8:0a:b6:d3:b5:b0:11:e4:cb:65:7d:
                    83:fe:00:a6:35:bf:0f:81:ce:a2:5b:c2:be:34:4e:
                    e4:dc:f0:57:8c:f6:5c:ed:70:bf:7c:49:56:b1:54:
                    aa:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:E7:D3:94:DB:46:AC:AF:DD:96:D6:61:5A:E2:BF:15:E0:39:83:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/31dd7c9c-7291-328e-8c60-28ddd87d13f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:61:4f:4e:e2:97:3c:60:af:d1:cd:48:b9:0d:15:a6:22:4f:
         e5:38:92:d4:f6:a1:60:36:01:ea:c5:58:48:77:13:77:74:6d:
         1e:68:51:27:40:6c:af:10:cb:9c:18:95:a4:95:af:bc:2a:78:
         a8:41:a3:82:4f:62:9f:a9:b3:12:29:41:ce:d8:e3:bc:2b:76:
         20:f5:ae:49:be:dd:fd:24:e9:50:cb:a5:ea:da:2e:76:5a:c1:
         71:b1:0e:5b:51:27:6e:15:7a:1f:75:d7:77:3c:d4:5c:b4:58:
         b4:5b:a2:25:b8:f9:22:38:b0:22:89:bf:40:02:55:eb:aa:f2:
         d4:3b:75:91:79:0a:36:3f:a2:f4:47:c3:58:cd:66:55:fa:b4:
         7e:8b:5f:92:a3:29:61:2b:fb:48:68:07:ba:29:d0:14:27:8c:
         f0:76:b8:ff:68:98:a1:ed:e5:a1:a6:29:aa:fb:85:0b:93:b9:
         bc:10:12:52:ef:00:a1:95:ff:82:33:c0:01:8b:d5:8d:c1:c9:
         85:ec:e0:e1:10:0f:ef:b5:8c:f6:7a:de:74:3d:96:65:d7:33:
         61:27:28:c6:12:8b:60:a5:2c:7c:7d:d7:64:24:49:ae:79:b5:
         18:91:93:17:fc:b5:d2:35:89:76:ba:e0:80:83:b8:68:58:03:
         83:d3:74:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 10:11:06 2025 by rpki-client