Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/43b97823-7673-36c7-8227-9b96056de8a7.roa
File:                     43b97823-7673-36c7-8227-9b96056de8a7.roa (raw, json)
Hash identifier:          /oi3F/Ay6jpjVsC9po5A0OT767Dg33Ny/UoYfLB9NYQ=
Subject key identifier:   32:7C:2E:1B:17:5B:A3:7B:DF:8F:D4:AF:B5:9C:E9:60:00:3C:DD:BA
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A4DA03FDAA3A73314C2F8BD80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/43b97823-7673-36c7-8227-9b96056de8a7.roa
Signing time:             Wed 25 Jun 2025 01:00:49 +0000
ROA not before:           Wed 25 Jun 2025 01:00:49 +0000
ROA not after:            Tue 23 Sep 2025 01:00:49 +0000
asID:                     214238
IP address blocks:        45.38.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4d:a0:3f:da:a3:a7:33:14:c2:f8:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun 25 01:00:49 2025 GMT
            Not After : Sep 23 01:00:49 2025 GMT
        Subject: CN=bc774f10-70db-43a0-bb35-811f9733b657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:68:3b:c5:09:06:69:bc:b8:88:b8:1c:13:39:
                    42:17:68:60:f0:fb:bf:36:4f:62:33:4b:eb:ff:e5:
                    e9:cd:8b:ef:b7:c5:0a:94:fc:dc:56:02:12:ae:ec:
                    76:c1:c2:76:05:9b:4a:6c:11:ab:9e:f7:22:ee:52:
                    8c:9b:60:7f:64:7b:59:33:b2:24:fd:78:a8:4f:4a:
                    7d:a9:9d:35:42:04:25:f6:16:15:f4:da:89:05:92:
                    96:4b:05:9c:2e:11:81:fc:9d:95:f7:e6:51:20:d8:
                    80:7e:44:ad:f1:1b:27:dc:29:aa:33:fa:d3:36:1a:
                    1b:3b:5c:2e:ea:a0:b5:e4:4f:38:06:2c:94:5f:05:
                    76:72:96:3a:e8:47:4e:00:bb:0e:09:fb:91:b1:53:
                    ce:4b:ba:14:2f:9e:29:b3:f6:66:0f:20:6b:8c:60:
                    1b:82:0f:a1:13:a3:42:80:31:d4:6f:0a:8f:8e:3e:
                    5e:6f:28:2c:df:d6:f3:b3:07:ba:b4:fd:e9:dd:54:
                    28:7b:ef:ff:ef:91:ba:e8:f1:cc:d0:5d:4e:77:da:
                    b3:e2:9e:af:5a:ef:67:71:40:94:93:6a:68:c5:26:
                    bc:80:32:d2:d4:25:ef:be:9a:23:5b:8a:29:8d:65:
                    46:5e:02:7b:bc:11:f6:7b:ab:1e:f0:d0:61:78:68:
                    61:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:7C:2E:1B:17:5B:A3:7B:DF:8F:D4:AF:B5:9C:E9:60:00:3C:DD:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/43b97823-7673-36c7-8227-9b96056de8a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:02:0f:b7:60:82:08:e8:4e:74:5e:4f:22:c3:10:ba:ef:29:
         7e:45:58:d5:29:41:34:16:be:bb:78:80:b3:69:2f:e5:fb:20:
         71:83:0b:f9:17:a9:62:29:bd:25:6d:0d:80:6d:40:1f:ee:e8:
         7c:4e:ce:3f:dc:81:c7:20:e6:4c:d4:01:7b:d2:c6:4b:bf:cb:
         5f:6b:8c:b8:9d:84:ac:97:a6:e8:8b:a2:ae:ae:54:d9:62:03:
         a9:5f:e7:eb:40:ae:87:8a:fe:26:12:c1:29:29:73:41:a8:77:
         06:d4:0f:20:ca:84:d6:7c:70:1b:fc:a5:bb:a1:7a:e9:c0:c5:
         fe:f3:2a:40:26:3a:e3:89:b6:f9:f8:5f:65:4d:55:fe:c2:b8:
         33:83:b7:09:9b:c2:30:90:12:b0:99:c1:a6:0b:70:a9:36:13:
         f1:02:ce:c1:08:7b:ca:cf:c9:da:d7:24:07:75:b9:88:28:c6:
         11:78:76:26:5c:81:de:0a:fe:0a:a9:26:49:70:9c:7a:e2:6a:
         6d:b4:2e:30:35:6f:41:dd:4c:54:16:15:42:28:30:1f:7f:44:
         39:74:c7:75:c6:7d:a3:d8:60:44:85:55:1f:b9:95:05:f9:e0:
         b0:cf:63:8d:08:af:b8:37:63:3f:fa:fe:43:de:99:97:9f:df:
         36:85:b8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 23:26:09 2025 by rpki-client