Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a0a68591-85be-37bc-8430-bde04f4b0039.roa
File:                     a0a68591-85be-37bc-8430-bde04f4b0039.roa (raw, json)
Hash identifier:          MzFy6V5UHvMKB27OY9AER3h+qLGOuhfPRUNrMZcOURM=
Subject key identifier:   AF:BC:DF:C5:73:9E:08:03:80:11:7B:2E:28:32:31:9A:23:5F:A0:72
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848D6412BC63086AB1C28BF2520
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a0a68591-85be-37bc-8430-bde04f4b0039.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     212238
IP address blocks:        45.39.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:2b:c6:30:86:ab:1c:28:bf:25:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=7c99a881-c10a-4d1d-9198-cd0fda209b8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2d:10:47:5a:b1:92:a4:c5:f7:20:c4:8d:77:
                    fc:7a:a0:df:91:f1:28:50:b6:3a:01:ab:12:3c:58:
                    71:da:5f:7a:a9:f5:a3:44:d0:f4:8c:68:41:90:12:
                    52:c0:15:15:c4:cb:0e:21:8b:5f:a5:a4:21:88:d5:
                    5d:5d:7b:8b:b7:0d:94:a5:32:ea:d0:e0:f8:45:fb:
                    8a:92:5c:38:4c:32:93:7e:f2:11:14:2a:50:e7:10:
                    6e:c0:50:6a:01:48:96:62:ab:ea:93:9a:14:bd:21:
                    43:a6:73:03:72:45:af:8e:c0:d0:48:ff:79:0d:db:
                    85:b5:16:19:67:c2:96:a7:ee:eb:c7:6f:9b:4d:20:
                    d4:bd:2d:ac:a6:8f:3b:53:43:d9:31:74:4a:5b:0f:
                    7f:85:20:7a:85:ea:87:2c:e3:c1:f6:b4:07:59:73:
                    63:b8:a9:3e:57:20:3b:b0:e8:ec:d1:2e:f1:4d:f7:
                    8b:ed:f5:68:8b:02:15:63:7f:f8:93:e7:b6:52:1a:
                    ea:87:cd:49:a4:b3:8c:3a:1f:ef:16:4b:c7:ee:8d:
                    9a:45:11:62:16:79:9b:31:77:4b:1a:0a:1d:f7:14:
                    55:15:94:6d:3a:08:88:a0:39:72:29:65:45:79:fe:
                    df:70:7b:12:19:35:36:42:36:97:cf:e8:56:a2:b9:
                    2f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:BC:DF:C5:73:9E:08:03:80:11:7B:2E:28:32:31:9A:23:5F:A0:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a0a68591-85be-37bc-8430-bde04f4b0039.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:9a:9f:26:1b:97:20:16:39:b2:81:a0:cb:00:5b:43:e1:f6:
         95:a8:23:d0:3b:5c:d3:5c:fd:35:20:41:ef:0a:09:38:f5:c7:
         c6:d8:b1:a5:b2:40:8e:38:3b:fb:95:86:c1:52:1d:59:ee:99:
         bf:7c:65:05:5f:05:96:4d:95:74:91:41:e7:9a:6a:44:bc:55:
         d1:d8:1b:5f:cf:c1:d9:04:ae:9c:60:f5:b8:b4:61:c6:83:1f:
         bf:1d:6e:fe:fd:e1:99:b1:dd:fc:2f:cb:f6:b9:41:fc:e0:01:
         22:11:b8:45:6a:1f:00:72:18:1a:bb:f4:a9:80:ba:7f:42:9d:
         31:6f:e4:cf:d2:3a:6d:31:76:5d:c0:74:de:fc:a2:be:03:58:
         1f:79:a4:ae:2b:91:93:ad:3e:e5:74:7c:36:be:8e:5a:03:be:
         e8:f3:81:41:d5:9e:6e:cc:51:c9:ec:67:85:32:eb:23:e7:99:
         8a:89:9f:cc:ac:28:f1:ac:17:02:2a:6c:83:f9:c2:52:2f:b3:
         1a:b3:9f:58:7f:1c:cc:ce:66:84:79:c7:d0:06:ae:47:5b:a1:
         d8:27:b9:7e:dc:ec:2c:2c:31:4b:5a:0d:bd:49:79:a1:c2:14:
         ce:d8:10:11:e1:d1:95:91:da:c0:c2:95:4e:d3:73:fa:90:01:
         f5:b2:a6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:52 2025 by rpki-client