Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4afbee3d-5783-35aa-a424-85e342a3d39b.roa
File:                     4afbee3d-5783-35aa-a424-85e342a3d39b.roa (raw, json)
Hash identifier:          9KqM8kv+fVepP1DX0a27RWDBEuOtthMhXQERTcPAR+g=
Subject key identifier:   FF:6D:DC:7B:6D:B8:04:52:EB:FE:19:39:23:8D:7F:2C:56:02:B6:19
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849CFFF6D9F5148196011F91A80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4afbee3d-5783-35aa-a424-85e342a3d39b.roa
Signing time:             Sun 11 May 2025 01:00:47 +0000
ROA not before:           Sun 11 May 2025 01:00:47 +0000
ROA not after:            Sat 09 Aug 2025 01:00:47 +0000
asID:                     18779
IP address blocks:        45.38.64.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cf:ff:6d:9f:51:48:19:60:11:f9:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 11 01:00:47 2025 GMT
            Not After : Aug  9 01:00:47 2025 GMT
        Subject: CN=b86a7a0a-f4fb-434a-835e-09530b62898a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3f:45:36:92:46:a2:de:cb:95:d2:e6:95:0c:
                    c1:66:43:6b:c0:59:2e:0b:e4:9f:b4:b0:d7:fd:de:
                    ca:65:5c:b7:31:bc:0e:b9:5b:6d:ce:65:06:22:d4:
                    3c:a2:28:b0:9e:d5:d1:63:6d:44:b4:93:6b:d6:38:
                    9a:b9:3f:a3:cc:59:5e:22:59:87:2d:fc:78:ec:ae:
                    7f:64:a4:5a:f1:b0:f6:f5:94:25:56:26:da:cb:18:
                    8a:12:d9:c2:56:72:50:a3:73:e1:1e:6f:f7:5b:f5:
                    2a:44:16:1b:89:a3:ff:26:fb:19:06:f4:0a:e0:33:
                    3a:55:80:f1:03:ad:69:13:a1:08:59:bc:94:57:c1:
                    28:24:ba:ae:6b:80:69:fb:8a:f3:15:d5:3c:20:47:
                    13:8e:c2:fa:ff:8d:65:e8:9e:66:2a:09:97:5a:44:
                    64:78:ef:62:ef:c5:da:e1:18:75:3a:99:12:0b:4e:
                    38:75:eb:e5:d9:e0:1c:67:8b:b8:75:f1:ca:71:e1:
                    48:39:59:2b:9b:37:7a:be:da:fe:46:fd:99:69:b7:
                    5a:cd:f1:2d:24:c5:e8:dd:55:7f:be:e2:2b:23:e6:
                    ee:13:14:3f:c2:e3:cb:1e:ac:81:8f:44:a7:2c:18:
                    0a:2a:17:c6:d3:9c:42:68:cc:b2:39:b7:93:90:52:
                    67:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:6D:DC:7B:6D:B8:04:52:EB:FE:19:39:23:8D:7F:2C:56:02:B6:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4afbee3d-5783-35aa-a424-85e342a3d39b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:9a:6c:4c:76:43:d6:16:65:ba:84:19:0c:32:54:4f:20:cd:
         41:01:2b:39:8b:fa:28:25:ef:fb:6d:7a:40:84:4b:43:e0:22:
         ab:e3:35:be:f7:88:54:eb:53:62:b1:b7:df:6e:5e:cb:4d:8e:
         98:0b:e2:1f:e4:0c:5e:b1:d4:a6:49:ec:a0:37:5d:92:10:b0:
         bb:34:72:5a:21:cd:a8:6c:68:0f:73:aa:54:b6:f9:05:f8:4d:
         92:d4:23:c5:ea:d4:03:60:de:fc:5c:06:bd:e1:87:23:c6:6e:
         ee:9c:6f:c0:ff:97:f5:ef:b3:31:65:29:ce:52:f7:e0:8f:38:
         9a:29:95:48:2c:b1:ce:42:63:49:17:61:91:42:9c:d1:b4:1c:
         54:ec:15:5c:2b:b6:b4:53:80:02:c9:1d:cd:7f:6c:99:76:70:
         e6:b7:12:2b:ba:b5:61:1e:25:8c:c1:40:9c:ff:ed:a1:38:31:
         29:50:b6:6b:a9:6a:90:13:d2:11:7e:d1:2d:90:b5:ef:60:f5:
         b9:7b:7c:03:05:2b:1a:45:4e:47:0a:bf:51:09:29:47:e2:80:
         41:be:b6:c0:a9:ad:08:41:04:70:86:a5:66:8b:df:d1:fb:f5:
         8b:10:fa:2a:1b:21:84:90:6d:e7:f3:49:a9:7b:ae:e0:35:88:
         ef:84:44:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnP/22fUUgZYBH5GoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDUxMTAxMDA0N1oXDTI1MDgwOTAxMDA0N1owLzEtMCsGA1UEAxMk
Yjg2YTdhMGEtZjRmYi00MzRhLTgzNWUtMDk1MzBiNjI4OThhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT9FNpJGot7LldLmlQzBZkNrwFkuC+SftLDX
/d7KZVy3MbwOuVttzmUGItQ8oiiwntXRY21EtJNr1jiauT+jzFleIlmHLfx47K5/
ZKRa8bD29ZQlVibayxiKEtnCVnJQo3PhHm/3W/UqRBYbiaP/JvsZBvQK4DM6VYDx
A61pE6EIWbyUV8EoJLqua4Bp+4rzFdU8IEcTjsL6/41l6J5mKgmXWkRkeO9i78Xa
4Rh1OpkSC044devl2eAcZ4u4dfHKceFIOVkrmzd6vtr+Rv2ZabdazfEtJMXo3VV/
vuIrI+buExQ/wuPLHqyBj0SnLBgKKhfG05xCaMyyObeTkFJn6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP9t3HttuARS6/4ZOSONfyxWArYZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNGFmYmVlM2QtNTc4My0z
NWFhLWE0MjQtODVlMzQyYTNkMzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLSZAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFaabEx2Q9YWZbqEGQwyVE8gzUEBKzmL+igl7/ttekCES0PgIqvjNb73
iFTrU2Kxt99uXstNjpgL4h/kDF6x1KZJ7KA3XZIQsLs0clohzahsaA9zqlS2+QX4
TZLUI8Xq1ANg3vxcBr3hhyPGbu6cb8D/l/XvszFlKc5S9+CPOJoplUgssc5CY0kX
YZFCnNG0HFTsFVwrtrRTgALJHc1/bJl2cOa3Eiu6tWEeJYzBQJz/7aE4MSlQtmup
apAT0hF+0S2Qte9g9bl7fAMFKxpFTkcKv1EJKUfigEG+tsCprQhBBHCGpWaL39H7
9YsQ+iobIYSQbefzSal7ruA1iO+ERJk=
-----END CERTIFICATE-----
Generated at Fri Jun 6 16:52:32 2025 by rpki-client