Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4149942e-3e91-3b72-a47a-e7e8fef9714f.roa
File:                     4149942e-3e91-3b72-a47a-e7e8fef9714f.roa (raw, json)
Hash identifier:          4X7YLgpCd45aQ4MndvlPtuYvexD0+lypkkxoe0LsbmY=
Subject key identifier:   DB:BE:BA:EB:36:25:5D:F8:01:74:A4:80:B6:56:B4:B2:D1:DE:71:8C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858489B48B1E39071F99D61EF6600
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4149942e-3e91-3b72-a47a-e7e8fef9714f.roa
Signing time:             Mon 20 Jan 2025 11:03:39 +0000
ROA not before:           Mon 20 Jan 2025 11:03:39 +0000
ROA not after:            Sun 20 Apr 2025 10:03:39 +0000
asID:                     64445
IP address blocks:        45.38.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9b:48:b1:e3:90:71:f9:9d:61:ef:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan 20 11:03:39 2025 GMT
            Not After : Apr 20 10:03:39 2025 GMT
        Subject: CN=ea5440b7-c864-41f4-a1be-7380a9ebab3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:34:57:fd:74:f0:39:e9:37:fb:f7:41:f4:0b:
                    01:f2:4c:69:04:2a:97:06:3c:32:65:b1:94:b3:ee:
                    bf:ad:56:0f:02:68:90:7f:a5:57:ff:7b:0b:18:76:
                    6b:8d:a4:93:be:34:66:47:6c:25:cf:c1:32:4b:8e:
                    d9:09:9f:74:3d:5b:c0:f8:43:3e:fa:d8:2b:e5:37:
                    c4:7f:43:a6:65:d2:37:72:fa:88:22:5f:88:a5:80:
                    d7:57:f2:7b:ad:97:09:3f:5b:c3:c3:6d:77:99:f1:
                    22:8c:98:6f:e4:10:79:89:de:14:28:54:2e:4f:6f:
                    b8:5e:ea:b6:0f:1e:b5:fc:a6:9e:21:03:a5:9b:74:
                    f3:19:be:78:e5:0d:38:90:41:e6:05:ed:24:4b:a4:
                    d8:2a:6d:c9:70:05:a9:a2:b9:0d:5c:54:e9:74:ea:
                    16:4a:b7:51:10:5e:ec:26:8d:10:cf:ac:f7:e8:fd:
                    50:77:9b:b5:a6:e2:2f:8d:f5:1a:82:72:58:7a:df:
                    20:9c:b4:e1:37:02:6d:ad:78:ee:ba:c4:2c:49:b1:
                    5f:ca:38:5c:92:32:67:48:cc:32:3f:04:c4:3c:12:
                    6c:42:27:c0:5d:b8:ca:12:41:0e:b8:86:e9:00:10:
                    98:3e:04:30:ad:8c:ca:4d:28:18:3b:c5:8b:b9:79:
                    39:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:BE:BA:EB:36:25:5D:F8:01:74:A4:80:B6:56:B4:B2:D1:DE:71:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4149942e-3e91-3b72-a47a-e7e8fef9714f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:80:81:06:9b:fe:62:46:38:f8:23:87:98:70:0f:aa:2f:5b:
         9c:1b:49:8a:f1:58:80:1c:ac:58:ab:fc:5b:0a:2f:37:f1:4b:
         35:dc:47:fb:fd:85:d5:7c:72:99:bf:1c:5b:86:3e:e0:ad:f9:
         98:98:03:2c:66:eb:f3:66:b1:a6:e5:f0:fa:0d:94:78:5c:a1:
         9b:c5:c5:45:26:65:dc:24:4a:16:3d:bc:7b:89:e4:fd:dc:d5:
         00:48:a5:37:17:7b:d4:9c:5a:6e:b1:d7:b0:60:9d:d4:c8:17:
         c0:a5:d7:f9:47:e4:cf:64:41:a4:9b:a9:35:e1:7c:97:34:c8:
         a0:f2:2c:f4:d4:1c:d6:47:e7:34:59:ff:58:dd:18:53:b6:a7:
         ec:c9:9f:aa:6d:df:61:2e:90:31:7c:1d:01:5a:89:6e:53:a9:
         05:c2:a1:f5:ad:99:c3:75:d0:f2:be:dd:8c:8e:43:c9:23:a2:
         e1:ab:3c:05:3a:be:13:92:67:5f:ec:eb:ce:d2:95:29:56:95:
         fa:8c:ac:8a:fa:46:ea:41:e8:ec:08:78:f2:a9:89:2e:20:ff:
         34:7f:b3:fe:7f:88:94:70:a4:92:d2:fb:3f:68:fc:17:ea:58:
         82:9f:a2:8c:cb:14:d1:bb:6f:89:47:50:37:d3:37:4a:1c:29:
         09:a0:d8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 03:02:19 2025 by rpki-client