Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4a7d7a19-7189-3c60-b788-ddabfbce1738.roa
File:                     4a7d7a19-7189-3c60-b788-ddabfbce1738.roa (raw, json)
Hash identifier:          j/owS38EDOgJIchTgjlc0oIJz3RDoohJYRaZJoX38l8=
Subject key identifier:   CC:2D:5B:27:B1:92:94:92:BF:A2:51:79:7B:04:D1:18:DD:C7:B6:34
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848EF7BDBD44F97EE461B0383A0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4a7d7a19-7189-3c60-b788-ddabfbce1738.roa
Signing time:             Wed 19 Feb 2025 14:54:39 +0000
ROA not before:           Wed 19 Feb 2025 14:54:39 +0000
ROA not after:            Tue 20 May 2025 13:54:39 +0000
asID:                     18779
IP address blocks:        45.39.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:7b:db:d4:4f:97:ee:46:1b:03:83:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 19 14:54:39 2025 GMT
            Not After : May 20 13:54:39 2025 GMT
        Subject: CN=49320a7b-6b64-4a5b-a95b-1e698e8c554b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:27:57:58:a5:73:78:c0:0f:a7:fc:4e:d9:0f:
                    0b:ac:ae:f3:9e:be:54:03:77:0d:e4:42:4d:a5:92:
                    de:02:45:af:a4:66:da:f7:d6:74:9c:2f:87:06:fc:
                    cd:b5:a1:66:9e:ae:a7:3f:c6:b9:13:28:78:c5:6b:
                    2e:08:d7:06:92:11:cf:ef:2c:d6:d5:fc:55:c1:93:
                    7b:ea:7d:7b:c4:07:b2:3a:44:e5:24:9b:9e:37:6f:
                    cc:f4:ef:e2:1f:1b:71:aa:bc:38:49:e5:60:99:5c:
                    fb:e0:a3:4d:d0:d3:ba:35:4e:40:c6:dd:3c:d6:c1:
                    9d:05:8d:10:e4:cc:e5:2c:af:25:9b:30:7f:49:86:
                    e7:d5:f5:ad:bf:76:ae:00:3e:7f:98:10:84:21:10:
                    97:e7:05:6d:db:f6:56:43:ed:5a:85:ed:ae:3a:df:
                    9b:c9:ea:9d:1b:f4:32:c7:0d:55:51:8f:e3:6d:8f:
                    2c:10:45:8d:cd:aa:ee:c2:6a:60:c9:ee:50:c3:50:
                    6d:55:37:8e:d4:8c:64:5d:f1:3c:66:de:f1:a4:ad:
                    32:93:0e:f2:cf:e6:e4:ff:1c:4f:30:a9:0e:83:d5:
                    65:8e:ac:c1:ec:cf:15:5a:bf:01:c4:90:75:b1:a6:
                    12:98:11:3e:60:f9:ce:2a:9b:3f:f3:97:35:e9:75:
                    fb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:2D:5B:27:B1:92:94:92:BF:A2:51:79:7B:04:D1:18:DD:C7:B6:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4a7d7a19-7189-3c60-b788-ddabfbce1738.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:2b:5f:25:e2:f1:bd:72:25:91:00:5a:df:ae:78:8d:df:5f:
         df:26:dd:ff:b4:73:71:3f:b4:ed:8d:87:5f:f7:0d:39:b9:94:
         d8:f6:c9:3f:0f:d0:40:71:9c:00:82:0a:dd:17:8b:81:68:ce:
         de:51:fc:96:d5:46:c9:26:0d:0e:33:64:05:1a:31:77:5a:a9:
         26:b4:3d:3f:23:c5:ea:ae:b1:cd:b1:e5:85:02:01:de:72:c2:
         d7:fa:2a:5a:e9:91:23:ae:e5:06:96:df:1b:c7:60:3c:e6:34:
         f3:92:57:33:9b:c6:a5:43:5a:d4:a0:a1:23:7a:36:da:be:18:
         0b:d4:d1:07:da:88:9a:80:29:89:2c:63:f2:2c:61:3f:1e:d9:
         c5:2c:e0:55:19:08:66:17:98:bf:e5:59:65:b6:1d:dc:c9:33:
         13:a3:ac:fc:1b:77:bb:67:69:91:d9:7f:32:70:bc:4a:72:ac:
         9f:c7:09:7b:55:e4:32:1c:cb:3b:f4:23:1c:ee:94:3c:1d:99:
         0e:43:3f:4e:83:ea:71:15:60:0a:2d:c0:b4:d3:5d:9e:0b:c4:
         f0:6d:bb:b7:d0:f7:54:1b:14:a1:04:5d:f9:35:84:5e:39:fb:
         00:a9:5d:7e:0b:b5:20:e1:36:77:f2:ff:b5:70:60:bb:01:5f:
         dc:b7:db:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:37 2025 by rpki-client