Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/91c59d39-923f-39e6-9a22-88908f327d41.roa
File:                     91c59d39-923f-39e6-9a22-88908f327d41.roa (raw, json)
Hash identifier:          pxiBFUAedrO+4NYVSfaqe1SDa+TSn/jybf81747E5Wk=
Subject key identifier:   0A:62:33:EB:D8:13:7B:6D:C0:68:31:A7:A1:AD:1C:4F:57:A7:22:15
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584949FEB3A36FF6FEDCB83D6DC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/91c59d39-923f-39e6-9a22-88908f327d41.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     62160
IP address blocks:        45.38.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:b3:a3:6f:f6:fe:dc:b8:3d:6d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=a4313520-e236-4752-b111-51e8a19a9c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b9:ab:61:30:d8:b9:5c:d6:28:3b:37:70:df:
                    8e:26:7f:69:0e:95:db:d3:1f:f4:16:27:01:ae:fc:
                    18:b3:fd:ac:75:8b:c5:02:72:32:9c:26:5f:7d:11:
                    49:27:95:5f:15:ab:5f:77:28:e0:2f:8a:ba:55:f7:
                    c7:02:72:38:b8:00:93:01:01:fc:7a:38:90:13:47:
                    a8:3f:4b:b7:b5:f1:ec:2f:ca:4e:75:ee:5a:d1:c6:
                    cc:06:c6:9b:ef:2f:01:ec:61:b5:21:3d:7e:55:b1:
                    2e:37:5c:45:3c:6d:1a:c6:21:cb:ce:2d:3c:20:ea:
                    42:a4:cf:d0:27:d5:c7:10:94:37:38:ee:37:18:98:
                    46:7e:1e:c9:ff:75:3f:b7:04:90:6a:57:32:6f:7f:
                    9e:9a:56:66:16:b5:12:21:49:ee:1e:de:9a:8f:0b:
                    8e:c8:3c:c1:3f:c9:36:3e:83:5b:20:9b:5c:89:2c:
                    99:79:b3:be:ea:4d:c0:24:2a:06:e6:b4:fb:d3:f1:
                    f6:91:82:8d:a8:2c:30:ef:68:25:d5:44:12:4d:2d:
                    0e:55:85:e6:d5:78:97:5a:ba:0d:48:c8:67:13:18:
                    7f:67:77:5c:d2:7c:cf:95:13:27:7e:5a:75:0b:b5:
                    68:ec:6e:7b:0a:10:e7:82:5d:6f:ba:d7:07:90:9b:
                    a1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:62:33:EB:D8:13:7B:6D:C0:68:31:A7:A1:AD:1C:4F:57:A7:22:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/91c59d39-923f-39e6-9a22-88908f327d41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:3b:2a:82:3d:1d:ab:0c:ae:bd:63:d5:ae:3a:01:43:be:d5:
         e7:e2:18:2d:f0:51:ae:f3:7a:91:7e:72:39:47:64:11:2b:06:
         3e:40:99:6e:aa:3a:f8:d4:94:98:06:80:e3:13:78:23:a8:b3:
         f0:ad:98:b7:6c:69:8b:ad:64:eb:ca:5e:1e:74:f7:0d:53:96:
         20:ac:89:ab:f6:c8:ef:e9:16:3d:60:fd:bf:f5:dd:63:9c:84:
         f5:c6:a6:36:60:8f:ee:8a:b0:e2:e4:04:7a:6e:21:b5:ef:da:
         31:87:d4:04:b7:f0:38:98:4c:c6:eb:68:be:f9:f1:d4:8a:b9:
         ec:5b:35:b4:83:2c:3b:ae:df:8c:31:9e:43:e3:93:43:12:da:
         56:79:5d:d1:17:4a:6a:0b:51:bd:09:45:a3:47:87:35:22:46:
         b2:4d:45:b7:59:99:e3:77:52:31:3c:c4:d1:82:2f:30:69:31:
         5d:b4:62:27:a6:1b:69:6a:ed:95:cf:8b:ec:7a:52:35:c3:15:
         25:54:e6:f0:6d:fc:78:e0:4d:52:6c:28:ca:22:bf:7f:84:55:
         64:d3:3d:0b:ac:fa:41:9b:33:58:a0:12:91:be:66:3b:81:83:
         9a:ab:6e:a6:4f:62:8f:14:bd:a9:81:b1:c5:51:09:17:33:bc:
         cc:52:58:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:52:55 2025 by rpki-client