Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/66380a12-e1d7-3b9c-a152-1aedeeae6481.roa
File:                     66380a12-e1d7-3b9c-a152-1aedeeae6481.roa (raw, json)
Hash identifier:          PR+4nY1Wweo7uPwa7BTZkkXnDT4wOmYCubh8Kvtwoyw=
Subject key identifier:   00:58:EB:C9:14:02:04:77:B7:C0:16:5C:86:B2:52:04:E9:C0:C6:1D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849203C0E5C9024ECED477DD580
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/66380a12-e1d7-3b9c-a152-1aedeeae6481.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     40676
IP address blocks:        45.39.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:0e:5c:90:24:ec:ed:47:7d:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=0c964b62-6f81-4479-a408-ad82be24cb74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c4:78:f5:fe:18:26:ba:b1:c8:26:37:10:5a:
                    79:4f:9b:13:a2:82:65:09:29:26:50:9f:c6:93:59:
                    1f:70:13:94:a9:08:b9:d1:73:11:36:cb:10:d7:39:
                    13:a2:b7:77:4a:ad:a5:5a:82:fe:53:08:b2:61:a7:
                    a3:d6:1d:ff:f8:5e:ba:40:dd:86:bd:a8:10:c8:f2:
                    61:20:05:7e:8f:fb:20:d4:79:ed:c3:5b:4a:54:ae:
                    63:1c:d9:ca:b8:b9:44:45:37:44:fb:8b:7c:1f:98:
                    df:99:e2:d0:3a:98:3a:3b:ae:b7:57:0a:dd:4f:b7:
                    d9:4b:f2:25:03:28:19:ef:06:2a:01:44:cd:c7:a3:
                    52:2a:8e:0c:e4:45:55:3e:52:b5:e5:8a:6a:dd:91:
                    7e:cc:c8:9b:1e:bb:36:17:49:7a:e4:a5:13:4b:c5:
                    5f:35:77:04:4e:d2:0c:75:9a:35:0f:8f:4d:91:e6:
                    99:0e:df:54:11:aa:c3:19:bd:78:ac:e2:81:bf:94:
                    04:d9:c3:cf:c8:aa:18:84:e3:d1:33:f1:f4:a6:2e:
                    eb:0e:69:42:ce:1e:52:2a:d4:69:2e:41:22:28:37:
                    99:0a:9e:1d:a8:73:2e:10:50:14:1e:6c:a0:50:c2:
                    fa:b5:fb:b5:a2:fe:d3:66:4a:be:6c:43:c5:f3:de:
                    2a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:58:EB:C9:14:02:04:77:B7:C0:16:5C:86:B2:52:04:E9:C0:C6:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/66380a12-e1d7-3b9c-a152-1aedeeae6481.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:ec:ae:c8:04:44:fd:66:ed:ae:29:2a:ce:5b:48:37:09:92:
         07:46:2f:9e:90:4b:07:11:19:37:1a:6d:93:df:f0:d2:09:0f:
         65:9c:13:52:3a:46:98:18:38:5c:f8:c6:a1:56:c3:c7:ea:9e:
         68:4c:46:05:cd:99:50:12:6e:41:3c:fb:34:e9:1b:87:6b:c7:
         c0:2a:8c:b4:51:6f:a3:58:68:b2:1e:44:a6:f4:fc:70:ab:db:
         77:27:55:7e:c9:5b:ad:62:59:9c:a8:e3:b8:d1:af:ca:d2:dd:
         6b:a9:f4:5c:d7:46:df:8e:dd:a2:78:12:96:42:fa:6a:7b:70:
         6f:af:68:00:85:d3:f0:e6:ef:2d:ef:fa:aa:84:e1:51:1a:a4:
         61:bc:bc:67:7f:1f:38:5c:d0:94:80:f1:76:c4:55:d3:77:b0:
         42:d8:93:cc:7d:9f:bd:e7:30:d3:4b:29:e4:3e:da:88:72:8c:
         ea:ea:9e:5b:90:1e:1b:da:66:4b:a7:48:ea:67:59:55:5b:18:
         0b:65:f1:22:63:af:87:1d:d1:5f:a0:d9:58:3b:8a:71:38:41:
         a8:20:9f:99:30:48:ec:dc:8d:1b:b7:77:c9:98:ef:46:55:b3:
         d6:6e:aa:a2:f8:e4:02:59:95:f1:7d:48:74:c6:9d:ee:03:1a:
         00:9a:ef:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:47:21 2025 by rpki-client