Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/524e31e9-177b-39b3-b6d1-f5b929a8d42c.roa
File:                     524e31e9-177b-39b3-b6d1-f5b929a8d42c.roa (raw, json)
Hash identifier:          FodJpwQ2KVFqVvi73L+CwURDkMEkb85TPRVHOlvjqvg=
Subject key identifier:   39:5C:D3:3A:78:93:CD:E5:E5:8E:AD:31:0C:45:6C:52:9C:7D:97:36
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849CFFF72B2B908170C2BA48D80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/524e31e9-177b-39b3-b6d1-f5b929a8d42c.roa
Signing time:             Sun 11 May 2025 01:00:47 +0000
ROA not before:           Sun 11 May 2025 01:00:47 +0000
ROA not after:            Sat 09 Aug 2025 01:00:47 +0000
asID:                     18779
IP address blocks:        45.39.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cf:ff:72:b2:b9:08:17:0c:2b:a4:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 11 01:00:47 2025 GMT
            Not After : Aug  9 01:00:47 2025 GMT
        Subject: CN=5e5e96cd-e4e6-42a1-8665-9cdc4532ec84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cf:0a:07:fd:7c:04:e1:af:67:c6:41:ec:68:
                    aa:83:2d:f2:38:f9:c5:1e:b1:9d:d4:11:10:e9:1d:
                    85:29:23:36:7a:e2:12:e2:d5:d7:8f:fa:14:ee:0a:
                    b3:c3:f7:1e:9a:a5:fe:7f:1f:ac:00:8f:b4:d3:2e:
                    42:f4:04:eb:88:0c:88:51:0e:88:3f:95:cd:22:c9:
                    31:a5:83:d7:64:6d:17:26:93:ba:a9:c1:b7:3c:96:
                    f9:60:98:84:28:f7:f5:60:39:20:d5:15:bd:b4:d0:
                    85:7e:2c:1d:43:ed:69:91:26:8b:67:c4:a6:e6:9c:
                    e5:cc:ab:7a:48:0b:75:42:af:dc:b9:b3:0a:3a:17:
                    c3:a0:09:39:08:c5:74:01:84:db:fa:94:0f:3b:50:
                    00:1c:b4:1a:d8:f0:35:f1:a2:22:31:80:9a:df:7e:
                    6e:41:f2:c8:7d:09:73:0b:d2:04:1d:c5:31:95:30:
                    0b:11:ba:d4:eb:82:92:df:8b:31:14:0c:4b:f2:0f:
                    a8:6d:11:69:f9:ea:8a:60:ad:2c:13:a9:ed:71:6e:
                    3b:97:1f:ec:a9:64:40:1a:fc:03:56:01:a4:b3:a8:
                    f4:a5:38:78:b8:c4:0f:6c:b1:88:b2:03:88:68:ac:
                    00:3c:02:52:18:a0:af:17:49:b5:94:22:93:91:3d:
                    54:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:5C:D3:3A:78:93:CD:E5:E5:8E:AD:31:0C:45:6C:52:9C:7D:97:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/524e31e9-177b-39b3-b6d1-f5b929a8d42c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:30:0d:0a:ba:40:07:08:93:79:d1:13:7c:0a:4e:b6:61:e9:
         b6:e8:a9:48:7d:97:f0:e5:00:e6:0a:3d:f8:aa:de:62:c0:ae:
         97:d0:2c:0e:88:04:a1:68:a2:b7:fd:bd:17:26:92:1f:10:d2:
         22:7f:35:32:8e:45:35:b3:f5:ec:b1:8c:a6:78:8d:9a:3a:5c:
         b0:e9:40:28:ae:51:03:6e:07:31:a2:6b:b9:6d:9a:bd:26:81:
         38:41:ee:cc:47:a7:04:27:71:c9:57:f8:4c:89:59:27:50:a2:
         94:6e:8b:e9:e4:6a:03:be:9b:29:e1:0f:cc:3a:b9:a0:41:df:
         ea:18:c2:2a:ce:8d:6d:f8:cd:30:f1:ec:4e:c8:04:96:96:0f:
         bc:99:db:ff:86:23:e9:0f:85:51:74:e5:a3:81:9d:26:7c:45:
         16:0a:ec:78:21:bd:e6:1b:68:be:10:38:7c:96:de:c8:73:93:
         11:a8:f5:22:d2:ec:ce:33:45:8d:83:2f:e7:2a:5c:f7:e3:21:
         ac:bd:dd:61:9e:1d:ff:c5:af:4e:6c:29:ed:32:b3:95:0a:48:
         3a:1f:25:a8:f5:da:5e:c5:21:02:9b:fa:63:d0:24:73:8d:50:
         89:bf:99:90:31:47:f0:e8:63:24:ce:e6:fa:94:75:63:8e:60:
         71:4f:2e:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnP/3KyuQgXDCukjYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDUxMTAxMDA0N1oXDTI1MDgwOTAxMDA0N1owLzEtMCsGA1UEAxMk
NWU1ZTk2Y2QtZTRlNi00MmExLTg2NjUtOWNkYzQ1MzJlYzg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos8KB/18BOGvZ8ZB7Giqgy3yOPnFHrGd1BEQ
6R2FKSM2euIS4tXXj/oU7gqzw/cemqX+fx+sAI+00y5C9ATriAyIUQ6IP5XNIskx
pYPXZG0XJpO6qcG3PJb5YJiEKPf1YDkg1RW9tNCFfiwdQ+1pkSaLZ8Sm5pzlzKt6
SAt1Qq/cubMKOhfDoAk5CMV0AYTb+pQPO1AAHLQa2PA18aIiMYCa335uQfLIfQlz
C9IEHcUxlTALEbrU64KS34sxFAxL8g+obRFp+eqKYK0sE6ntcW47lx/sqWRAGvwD
VgGks6j0pTh4uMQPbLGIsgOIaKwAPAJSGKCvF0m1lCKTkT1UkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDlc0zp4k83l5Y6tMQxFbFKcfZc2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNTI0ZTMxZTktMTc3Yi0z
OWIzLWI2ZDEtZjViOTI5YThkNDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSd6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGgwDQq6QAcIk3nRE3wKTrZh6bboqUh9l/DlAOYKPfiq3mLArpfQLA6I
BKFoorf9vRcmkh8Q0iJ/NTKORTWz9eyxjKZ4jZo6XLDpQCiuUQNuBzGia7ltmr0m
gThB7sxHpwQncclX+EyJWSdQopRui+nkagO+mynhD8w6uaBB3+oYwirOjW34zTDx
7E7IBJaWD7yZ2/+GI+kPhVF05aOBnSZ8RRYK7HghveYbaL4QOHyW3shzkxGo9SLS
7M4zRY2DL+cqXPfjIay93WGeHf/Fr05sKe0ys5UKSDofJaj12l7FIQKb+mPQJHON
UIm/mZAxR/DoYyTO5vqUdWOOYHFPLkw=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:38:13 2025 by rpki-client