Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/71ad6aaa-6a59-3f79-831e-519741c2161c.roa
File:                     71ad6aaa-6a59-3f79-831e-519741c2161c.roa (raw, json)
Hash identifier:          DBFd66dSxMr797/Xcb/SRXwhC/341RKvHutm/FHB6js=
Subject key identifier:   5D:50:71:9C:30:C7:74:53:D0:59:38:E5:16:35:CD:8F:18:94:56:A9
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584ADD66873822863526B3161280
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/71ad6aaa-6a59-3f79-831e-519741c2161c.roa
Signing time:             Fri 15 Aug 2025 13:00:41 +0000
ROA not before:           Fri 15 Aug 2025 13:00:41 +0000
ROA not after:            Thu 13 Nov 2025 14:00:41 +0000
asID:                     8881
IP address blocks:        45.38.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:66:87:38:22:86:35:26:b3:16:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 15 13:00:41 2025 GMT
            Not After : Nov 13 14:00:41 2025 GMT
        Subject: CN=1d527285-66c4-46a5-870e-8478bf6e2b97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:41:38:69:3b:81:de:69:b1:55:65:d7:06:f3:
                    e8:d8:24:e9:da:37:c8:ff:e7:7f:c1:ed:78:83:4d:
                    4f:58:08:12:a0:d2:fb:de:db:88:2a:7f:03:b3:4e:
                    87:d4:35:6b:04:e3:ee:c0:52:69:54:25:1c:7d:d9:
                    43:d3:90:c4:8a:81:50:b1:cf:98:f3:d1:1d:eb:e2:
                    4a:59:ac:fe:84:f4:9d:f6:cd:c9:e0:7f:fa:79:49:
                    4e:b7:78:76:7c:c0:0d:e4:96:6c:ca:f7:93:a1:68:
                    00:58:d6:a9:7c:ca:92:3b:e1:38:cf:8f:34:9e:3e:
                    b8:ff:e0:7f:c0:c2:ac:14:6c:b4:bd:ff:a2:39:c1:
                    a6:d3:cd:ca:a8:5d:09:17:87:e0:86:72:66:fc:0e:
                    af:38:65:a1:34:d0:c5:ba:80:05:69:3f:ce:87:45:
                    26:bb:00:31:21:16:cf:1a:01:16:af:49:94:8c:f6:
                    98:72:80:d3:5c:77:91:ba:26:0c:1f:3d:e7:29:43:
                    43:d6:cc:05:ce:12:e2:05:2e:cf:ed:26:50:68:82:
                    c4:11:3e:6d:f8:6f:72:d6:fd:db:9f:e2:ab:5e:8b:
                    96:b3:fd:00:69:5d:bd:91:f2:5b:96:9d:7f:ca:f0:
                    20:61:ad:a7:4d:8e:53:53:f8:cd:d5:78:24:46:5e:
                    42:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:50:71:9C:30:C7:74:53:D0:59:38:E5:16:35:CD:8F:18:94:56:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/71ad6aaa-6a59-3f79-831e-519741c2161c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:56:6d:e5:f7:cf:cb:c5:fb:39:86:b3:02:ea:b5:52:60:28:
         73:f1:18:99:0e:83:52:3b:c1:86:39:0d:e2:6e:d8:27:33:6d:
         e5:8a:a5:3b:56:2b:ff:90:1b:42:9e:4c:01:0d:ac:0f:43:9a:
         31:36:b9:77:3a:d2:c8:7a:5a:a7:43:e8:f0:6f:a5:03:22:36:
         f5:6a:65:9b:9f:a8:e4:8e:99:f5:9d:8d:3f:de:ea:56:c8:a0:
         4c:9a:dd:3d:69:3d:62:fb:3f:77:6c:a4:18:94:1a:84:c1:5b:
         e2:1c:96:3c:5d:98:d6:8d:e2:f6:66:ef:85:e4:18:9a:94:5e:
         8b:7f:d1:45:a1:d9:97:d3:56:2f:da:62:7e:5e:0b:4b:6c:af:
         8c:6b:57:43:66:78:d9:62:f5:60:a9:81:c5:2d:4c:52:01:01:
         a1:f3:c2:c0:4c:35:f7:d9:b7:cb:bd:3b:ec:9e:93:c7:37:0b:
         1b:75:69:c9:ca:7f:aa:d6:83:67:61:61:bd:da:0a:e2:74:68:
         c2:2f:0d:31:c4:9c:c3:bb:99:63:e0:b2:71:d7:e5:15:5a:8f:
         3f:ad:b4:bd:81:3d:cf:eb:ce:4b:19:ca:79:98:1a:8c:f6:22:
         3b:36:f3:17:f4:cb:fe:ef:bc:48:1d:b3:df:36:06:a8:d7:c6:
         05:dc:4a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:59:45 2025 by rpki-client