Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a1daf7a2-eb51-3b5b-bab2-e5a61926c3e6.roa
File:                     a1daf7a2-eb51-3b5b-bab2-e5a61926c3e6.roa (raw, json)
Hash identifier:          feoffSwihyyE1O2QnY1tluJokJT9FjQLlYt0tnfvAmE=
Subject key identifier:   98:FD:B9:56:B0:80:46:98:C4:44:E0:F2:15:65:24:8B:61:09:B8:01
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848EF7C085384AE5C75A1174380
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a1daf7a2-eb51-3b5b-bab2-e5a61926c3e6.roa
Signing time:             Wed 19 Feb 2025 14:55:00 +0000
ROA not before:           Wed 19 Feb 2025 14:55:00 +0000
ROA not after:            Tue 20 May 2025 13:55:00 +0000
asID:                     18779
IP address blocks:        45.39.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:7c:08:53:84:ae:5c:75:a1:17:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 19 14:55:00 2025 GMT
            Not After : May 20 13:55:00 2025 GMT
        Subject: CN=bdaf0257-6298-4b28-8a7e-acca02f9ad29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4f:d5:60:cb:3f:ec:15:c7:fa:60:c6:81:bd:
                    1a:a6:90:dd:c0:b6:6f:fc:61:6b:9c:3f:22:4a:a1:
                    58:68:f1:e4:62:82:4f:4d:5a:a9:63:95:26:b9:e2:
                    3d:82:1f:81:d9:43:33:15:37:04:77:2a:ea:7c:97:
                    e4:31:16:3a:f8:89:ad:73:54:bc:3a:f2:67:dd:17:
                    4b:8b:f1:f5:6d:a7:ce:a2:3d:66:ad:7f:29:b2:9d:
                    f9:4b:a3:2d:05:f4:ef:75:51:3f:5c:8b:6e:53:53:
                    d0:87:0e:c1:92:fe:1b:49:bb:59:8b:3f:00:cd:9d:
                    68:58:b3:7b:87:a5:0f:af:59:55:ff:ff:df:c1:50:
                    15:0b:3a:94:0c:3e:33:4d:df:d2:ec:40:01:90:64:
                    c7:4b:df:e6:61:0d:c2:a6:96:6c:85:10:d7:cd:66:
                    09:ed:55:38:15:18:be:ac:ea:d9:39:7b:8e:6f:ee:
                    c9:34:f0:54:6a:b7:9f:5d:98:e4:18:c0:56:36:7a:
                    2c:53:60:ae:8b:8a:e0:e2:3c:1b:ab:9f:5f:86:3b:
                    a1:db:ec:53:5d:03:14:71:91:b3:72:46:fe:9c:f8:
                    e7:33:a8:25:38:24:4b:48:49:c9:a0:a6:d3:43:77:
                    72:72:39:a2:ef:88:00:be:ea:66:89:cb:bf:6f:a4:
                    b2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:FD:B9:56:B0:80:46:98:C4:44:E0:F2:15:65:24:8B:61:09:B8:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a1daf7a2-eb51-3b5b-bab2-e5a61926c3e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:bb:e3:86:17:fa:b2:ff:b7:2e:59:f0:22:8b:92:25:8b:71:
         ff:11:02:68:07:e5:8c:8d:a7:83:a4:80:cf:6d:7b:7b:66:04:
         e0:ff:e7:aa:1f:0a:91:e4:ed:96:75:5a:48:c7:78:a9:96:71:
         c0:82:12:49:69:f4:08:5c:fa:fa:e4:98:4a:6c:98:77:d6:1b:
         4b:1b:f1:61:9c:b1:cb:12:c9:f0:11:18:b4:bc:4f:70:b6:5b:
         86:b8:b8:1e:60:f4:d8:bc:e7:43:09:38:ff:cd:d8:df:9e:16:
         2a:e5:40:e1:6d:57:60:12:b0:16:75:ab:79:31:6c:68:e6:a3:
         b8:e6:9f:bc:22:f0:29:c6:30:80:98:66:7f:c4:06:a6:54:44:
         15:43:df:e6:df:b4:d9:3a:ee:19:eb:72:fa:1d:0c:34:91:dc:
         26:78:15:8f:56:29:13:ec:fb:65:ef:1f:76:70:e9:4a:61:2e:
         da:90:b0:0a:e3:f7:a0:72:3f:09:e4:4a:5e:fd:c2:8d:b5:7a:
         e6:02:0b:5e:03:5d:dd:84:4e:db:d6:71:5f:23:25:39:50:80:
         4d:5b:86:15:cd:76:0c:f3:dc:6c:81:51:4b:f9:42:92:ba:b3:
         dd:3b:3d:06:5c:e1:dc:a4:c9:93:d3:a5:46:1f:fc:e9:9f:63:
         46:e6:64:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:29:26 2025 by rpki-client