Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3923754d-6e94-31b6-a632-ca71e976cb7a.roa
File:                     3923754d-6e94-31b6-a632-ca71e976cb7a.roa (raw, json)
Hash identifier:          8mRpNXM4dIayoDG/iLpuwCzcTOq9QyHEEX6xWCtab0o=
Subject key identifier:   CC:C5:D8:70:A3:9C:63:92:DC:CF:19:8A:CC:DB:D2:C5:E8:EC:72:05
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848D2113454C1871BAD697DD380
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3923754d-6e94-31b6-a632-ca71e976cb7a.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     48031
IP address blocks:        45.39.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:34:54:c1:87:1b:ad:69:7d:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=47ce8cfc-a6ca-4498-b75c-7d94556fe93a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:69:59:ce:ec:85:36:80:e5:79:b7:dc:1d:6e:
                    f8:46:4a:1f:62:86:c8:81:bc:32:e4:9f:74:3b:ea:
                    bd:44:5f:d7:f6:09:71:84:66:de:fd:54:16:c2:7c:
                    4a:67:b6:70:2a:85:6f:f0:04:c4:e5:24:bc:2f:e5:
                    03:5e:dc:48:18:d1:0b:55:c4:49:50:c3:35:80:fd:
                    5c:5d:c6:5f:4c:bc:db:96:26:f8:26:9a:6e:9e:ff:
                    f9:a2:3a:0c:0e:0a:93:96:12:cc:a6:b9:6c:af:9a:
                    5c:90:2f:24:17:55:f6:89:42:cf:97:e8:8a:f5:43:
                    6d:6e:47:be:87:05:67:c6:64:85:5e:67:b3:50:3c:
                    1d:f1:33:dc:2a:a2:e0:d6:ec:c7:ae:b3:bb:84:07:
                    15:0d:72:a3:4d:59:c6:6d:59:64:74:86:d5:f9:40:
                    93:59:35:dd:96:a6:a6:1a:97:7e:7a:43:d2:56:f1:
                    2a:e9:d4:94:fe:39:b0:d8:44:af:5c:22:82:06:1e:
                    bf:03:b1:cd:02:11:84:a2:06:49:70:db:d6:e7:7d:
                    dc:09:f2:53:ec:6a:a8:38:23:70:ee:f6:fc:1a:75:
                    0e:06:53:51:88:51:f1:1a:06:a6:b0:19:53:dd:30:
                    ce:bb:02:e9:04:2d:3f:44:a0:74:17:92:85:b5:34:
                    6f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C5:D8:70:A3:9C:63:92:DC:CF:19:8A:CC:DB:D2:C5:E8:EC:72:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3923754d-6e94-31b6-a632-ca71e976cb7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:43:f6:27:85:1e:af:67:d4:a8:bc:d4:18:64:77:41:8b:4b:
         d2:94:ff:bb:5d:a6:35:35:22:f1:da:88:c4:6b:4f:21:0b:bd:
         98:a0:66:dd:82:1b:a5:51:a0:2d:94:d7:8e:48:88:d0:55:b3:
         fa:2f:ec:38:06:25:c8:10:3c:ab:51:8d:c2:6e:58:2d:f4:75:
         a8:f1:27:3d:a6:86:6a:0a:ff:f8:fb:c9:c5:a9:b8:1e:78:c7:
         d4:42:a1:9e:b9:9b:45:71:6d:ef:f9:bf:4b:87:fe:49:9c:7c:
         37:66:3f:32:5a:a3:f7:0a:13:0b:b7:66:03:da:95:d5:c3:5b:
         16:03:60:d8:61:a3:0e:2a:c9:d0:2c:c3:df:27:c4:27:2a:6f:
         ee:72:87:7b:e7:95:2b:85:e5:7f:46:37:c7:2c:c6:5d:1e:14:
         a5:17:cb:13:f4:c9:dd:73:37:b2:6a:cd:6b:2a:0e:67:8a:bc:
         bc:24:ff:6e:44:05:76:9c:8e:db:05:f1:da:1b:49:00:48:6b:
         a1:b8:b8:77:ba:59:36:53:87:45:77:f1:27:35:27:80:cd:f2:
         e2:f7:31:d9:61:cf:a3:36:f6:5b:80:e4:c6:9d:38:17:f1:8b:
         6d:fb:3f:90:6c:02:94:1e:93:e0:a6:9e:7d:7b:08:5d:01:7d:
         d1:8f:e5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:20:38 2025 by rpki-client