Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5d6eff76-5ba8-3b91-8c92-9157bde68ad0.roa
File:                     5d6eff76-5ba8-3b91-8c92-9157bde68ad0.roa (raw, json)
Hash identifier:          C/8ecplO1mtW7fjfVVDqtssR8Ek3nMasMPOYqachmjU=
Subject key identifier:   58:E6:B1:65:4B:D6:D7:32:E9:05:52:E0:7E:0D:4B:F0:C3:AB:18:41
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584BC53B380D4869FEFFE2AF4500
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5d6eff76-5ba8-3b91-8c92-9157bde68ad0.roa
Signing time:             Thu 06 Nov 2025 14:00:41 +0000
ROA not before:           Thu 06 Nov 2025 14:00:41 +0000
ROA not after:            Wed 04 Feb 2026 14:00:41 +0000
asID:                     205467
IP address blocks:        45.38.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 13 Nov 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c5:3b:38:0d:48:69:fe:ff:e2:af:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov  6 14:00:41 2025 GMT
            Not After : Feb  4 14:00:41 2026 GMT
        Subject: CN=8b53d155-5264-46e8-9bdb-aa4351a76fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4d:5c:51:81:bd:dd:a5:ad:30:f3:01:c3:b6:
                    b4:27:84:31:fe:35:9a:68:96:1d:69:0e:f2:53:2f:
                    9b:08:92:4c:39:35:c4:8b:7e:7d:a2:8c:be:12:74:
                    5e:52:90:20:d3:71:df:ef:97:79:d4:92:c1:1d:55:
                    f6:f7:22:ac:90:95:02:ac:74:52:e8:65:96:6e:cf:
                    fe:77:93:28:41:34:03:1f:a4:67:82:60:e1:46:88:
                    f5:a1:6f:d9:35:4c:45:03:f0:c1:10:1f:70:2a:fc:
                    db:e4:be:ac:b8:77:01:de:cd:41:da:be:e3:56:13:
                    ea:f7:04:5b:bf:2e:00:90:d7:8c:39:bc:dc:41:b3:
                    31:55:13:81:9d:c6:bb:61:98:91:e3:7d:c3:4c:2c:
                    7c:f8:7f:eb:43:20:66:d3:5e:67:ed:44:1d:c3:8d:
                    0c:65:02:5a:21:92:af:3c:6e:84:e2:8a:e9:23:8d:
                    e1:52:a8:b3:00:cf:f6:78:5b:9f:2a:1c:41:ef:e0:
                    53:89:27:b4:ae:99:1e:c3:8c:7a:a6:b0:db:9d:12:
                    4d:9b:ec:f0:85:cc:7d:40:a2:f5:34:0d:40:c5:e0:
                    d9:8b:2e:67:ed:3a:16:16:8f:50:8e:3f:2b:d3:a7:
                    e9:da:a8:5e:c3:85:75:65:c7:af:60:b6:6b:22:6c:
                    2c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E6:B1:65:4B:D6:D7:32:E9:05:52:E0:7E:0D:4B:F0:C3:AB:18:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5d6eff76-5ba8-3b91-8c92-9157bde68ad0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:ac:56:22:e3:9e:a2:4a:16:46:9e:80:cf:1f:30:5f:5f:35:
         cb:0b:0b:20:c9:ea:42:db:00:44:d1:65:42:a9:7d:33:c4:df:
         c9:7e:e5:8f:7e:e9:00:7c:11:5e:56:6e:eb:ed:29:36:54:73:
         27:70:e5:42:a2:5e:45:4f:81:07:f6:ef:32:2e:c6:0c:72:75:
         26:59:b5:4b:9a:b6:bf:c2:a9:8d:6c:ec:9f:09:73:8f:a1:78:
         74:81:a6:07:fc:ff:35:af:50:37:f2:17:5a:17:b5:b4:c5:5c:
         6f:43:b6:b9:ac:58:67:91:04:c4:6e:97:77:e9:e0:9c:7b:e3:
         03:43:17:30:3a:7a:f0:4e:d4:5e:ce:b6:e8:ca:5d:fa:b1:a5:
         26:d6:68:eb:4b:31:2b:5b:e9:e8:75:aa:53:65:0c:f4:f0:a6:
         17:c1:aa:53:bc:e3:e9:10:70:31:ec:84:7d:6f:d1:bc:19:d6:
         3e:e6:e8:4f:f7:e3:a4:7a:e7:87:a1:de:0d:00:fa:fd:13:d4:
         26:41:4e:e8:96:d3:f3:23:56:f0:3b:f8:f7:4d:9a:23:e3:d3:
         79:e5:c5:64:fe:87:5d:03:4d:6a:13:6a:ed:5b:1b:fc:d9:88:
         11:6b:61:e2:d2:05:6d:49:ff:f8:74:1b:19:75:b0:39:52:fc:
         f8:08:0f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:21:01 2025 by rpki-client