Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/471a721d-2b05-3cad-a38f-50fdacd58077.roa
File:                     471a721d-2b05-3cad-a38f-50fdacd58077.roa (raw, json)
Hash identifier:          Yzyt/9MaB+z+c7/AZ3AlPqIRBIt5/wgEgD6Uny2uCOw=
Subject key identifier:   34:CA:D6:E0:F5:3F:1D:05:5C:94:CC:4C:DF:AD:B6:82:9D:78:36:99
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584949FEB3BCEC260C11FFB86EC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/471a721d-2b05-3cad-a38f-50fdacd58077.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     62160
IP address blocks:        45.38.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:b3:bc:ec:26:0c:11:ff:b8:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=cb2bd78d-1377-4190-ad6e-c82e916ff753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1f:67:a1:97:a2:1f:88:7f:be:2b:8f:32:b7:
                    20:b4:28:1b:83:16:ba:e8:da:85:8c:ba:0a:38:88:
                    13:b2:9c:98:a9:6d:5e:a3:09:c6:be:7a:18:c9:95:
                    85:17:45:a2:58:fd:1b:b2:ac:69:4f:bd:96:a2:71:
                    b4:77:75:db:5f:a8:69:30:53:56:5e:05:c5:a6:f6:
                    14:c1:fd:2f:da:a9:f3:b9:d3:61:17:24:56:d4:ce:
                    d3:50:b0:27:6d:a4:59:83:6a:3c:8d:7b:ad:09:5c:
                    8e:f4:47:cf:50:e1:b5:2f:23:9d:9b:07:23:11:98:
                    a5:ae:25:6d:4b:87:3a:a9:9a:45:2b:38:9a:ab:9f:
                    b1:02:c4:6f:1e:35:df:7e:a5:e6:6d:78:27:cd:35:
                    65:36:fd:96:23:e5:96:75:a4:69:a7:9c:e4:c9:8d:
                    8b:ab:bd:6f:68:4e:42:d6:19:52:77:0d:d9:68:db:
                    56:1e:25:5f:98:58:d1:3f:6f:be:95:37:82:b9:14:
                    7a:11:ae:dd:2a:89:12:f4:8b:51:20:71:34:95:e9:
                    21:e1:c1:66:a7:c1:18:83:46:1d:22:ad:a6:64:b4:
                    d2:76:75:52:52:c6:82:55:36:dd:91:12:6d:26:40:
                    af:18:9c:af:0c:c3:14:70:ae:48:a4:79:13:2e:cd:
                    80:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:CA:D6:E0:F5:3F:1D:05:5C:94:CC:4C:DF:AD:B6:82:9D:78:36:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/471a721d-2b05-3cad-a38f-50fdacd58077.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:93:49:7c:b4:6c:41:cd:c6:64:78:dc:88:15:aa:65:34:f4:
         a5:58:62:bb:f3:61:23:f4:66:ce:42:92:7c:87:eb:88:a4:ca:
         e3:a2:cb:a1:00:f5:0d:f5:1e:e9:c6:9f:5c:c6:54:d4:e1:bb:
         f9:0f:70:52:f1:68:27:57:7d:1d:88:9b:47:e9:8f:a6:bb:d3:
         0f:56:1f:66:ae:e0:db:82:fe:95:2b:93:8c:ea:66:0e:e3:b7:
         c8:8b:62:05:1c:cd:62:90:51:5e:da:be:c2:de:a1:2e:af:aa:
         91:9d:26:08:6e:6d:f5:fa:d2:7e:0d:85:32:fc:70:97:02:ea:
         23:0e:bd:6a:e4:a0:04:24:31:57:62:3c:83:b0:35:72:6b:bf:
         15:10:36:a6:f7:4d:33:ae:94:6c:42:64:53:db:3a:a8:82:51:
         11:21:a4:03:69:37:87:04:82:06:24:22:c6:34:a9:6f:73:b0:
         a3:e4:7c:53:51:24:21:5d:98:c8:50:b6:44:8c:91:36:3e:ce:
         98:ac:cc:c5:36:96:e1:1d:f3:c9:cb:54:43:4d:9a:c4:ee:1a:
         52:24:46:e9:e5:a1:99:4a:3c:c5:e1:76:ad:71:47:b8:f8:e8:
         d7:9f:c1:dc:04:6a:e8:72:17:66:26:ea:f5:a5:ed:56:92:c9:
         1d:c6:95:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:49:27 2025 by rpki-client