Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7d1c4a8b-1b1a-3c57-940f-eeacd5efda1c.roa
File:                     7d1c4a8b-1b1a-3c57-940f-eeacd5efda1c.roa (raw, json)
Hash identifier:          4zzAV2x5ClhzIyIX8g2uTDmrgIP5J5DgjmhQkx39NVo=
Subject key identifier:   C1:70:92:F7:42:27:CC:21:A2:72:63:C9:22:88:15:DF:59:14:FC:26
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858495529498AA71737D79F5F4CC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7d1c4a8b-1b1a-3c57-940f-eeacd5efda1c.roa
Signing time:             Fri 28 Mar 2025 01:00:41 +0000
ROA not before:           Fri 28 Mar 2025 01:00:41 +0000
ROA not after:            Thu 26 Jun 2025 01:00:41 +0000
asID:                     262287
IP address blocks:        45.38.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:55:29:49:8a:a7:17:37:d7:9f:5f:4c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 28 01:00:41 2025 GMT
            Not After : Jun 26 01:00:41 2025 GMT
        Subject: CN=8b25403e-eabf-4c09-bd03-8114887146f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6c:9f:82:5a:c4:70:b4:22:91:ee:92:f7:4b:
                    7f:c3:6a:15:58:97:f0:4e:d4:07:e4:e2:31:86:b1:
                    1c:ea:44:33:18:e3:0b:ee:97:e0:8b:45:bb:65:c9:
                    28:23:48:8c:98:b3:65:37:e3:ba:d9:5c:06:f4:de:
                    4c:92:4a:40:94:0f:d3:1d:04:f5:84:e1:3a:ae:c6:
                    20:a4:41:68:15:7d:7a:d4:cb:6e:4b:21:93:48:ae:
                    75:07:c5:a2:3e:83:55:d4:01:11:11:e9:c3:75:21:
                    a1:00:5d:3d:a2:bc:5b:d7:f1:11:d0:23:ad:12:9c:
                    23:d4:bd:92:7b:72:60:e9:e8:88:e9:4c:9d:16:6a:
                    d5:a1:e0:3e:c3:01:ca:ad:97:81:68:c7:f7:ba:30:
                    70:69:3b:b9:f6:e8:b0:64:73:81:13:1d:c0:2a:8f:
                    0c:f0:e1:75:1a:1b:f7:55:1f:85:50:f8:6f:c4:67:
                    d4:c6:8c:f3:94:6f:75:56:df:b0:f7:ee:52:1c:84:
                    08:4b:0a:54:cf:2d:00:25:c1:7e:9e:24:95:19:e0:
                    d8:a8:e1:9d:78:30:1b:ff:e9:0e:34:40:a7:71:1b:
                    fc:66:2b:8b:bd:8e:3a:b6:c6:9d:f0:7c:11:e1:2e:
                    d1:1f:89:26:07:d5:71:47:7e:29:b8:e6:31:1f:e7:
                    c9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:70:92:F7:42:27:CC:21:A2:72:63:C9:22:88:15:DF:59:14:FC:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7d1c4a8b-1b1a-3c57-940f-eeacd5efda1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:9f:a5:7a:75:5b:e0:09:d9:04:f1:9e:3c:0d:ee:d6:b3:14:
         b2:e5:75:eb:be:9a:59:f1:10:07:31:86:d2:1d:5d:d8:38:e7:
         39:71:ad:c2:d6:0a:74:36:e5:5b:97:ef:a5:d8:ba:40:2e:b0:
         c6:07:05:ea:b6:56:bc:2b:27:bf:af:a6:60:6d:62:ea:98:cf:
         44:41:32:6e:9c:cf:62:c8:49:62:4f:82:82:16:3d:34:6b:01:
         76:28:25:03:3d:1e:cc:a5:74:01:ed:82:ad:06:ec:0e:d1:11:
         89:e9:b6:6a:45:18:58:ca:5d:53:99:4a:fc:8b:3b:67:6a:be:
         f9:3c:07:0b:d6:37:6b:2f:31:e2:bd:3d:90:0f:6c:dd:1f:3c:
         45:8f:2b:6a:24:9b:f2:17:91:dd:5e:71:cb:06:3d:1e:c5:d4:
         fd:93:20:20:29:05:45:be:3c:bb:41:13:f7:ce:11:98:98:28:
         e1:52:2e:58:31:d1:5d:32:64:7a:4d:96:b7:89:69:a5:a5:b3:
         9e:32:84:b4:47:20:85:9e:98:e1:30:28:84:1e:73:db:21:fd:
         31:61:b3:8f:15:85:bd:54:a3:bf:e6:fe:f2:22:40:da:e8:f3:
         a3:13:06:b7:34:4a:d7:3e:e9:7c:44:76:e7:99:43:a2:a1:49:
         a8:c0:c2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:51:33 2025 by rpki-client