Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a8d6aa7c-667b-346e-a228-eea6c13c4edf.roa
File:                     a8d6aa7c-667b-346e-a228-eea6c13c4edf.roa (raw, json)
Hash identifier:          BpVRAfVXTHhhspYL+AwUWPvR8tYB1QfUOWEHzj5jCYU=
Subject key identifier:   99:EC:E3:AC:CB:62:3E:3C:88:B5:CC:9A:7A:41:6D:66:29:68:34:91
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849F861C3CD8D6FFD93D0D657F0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a8d6aa7c-667b-346e-a228-eea6c13c4edf.roa
Signing time:             Sun 25 May 2025 12:11:17 +0000
ROA not before:           Sun 25 May 2025 12:11:17 +0000
ROA not after:            Sat 23 Aug 2025 12:11:17 +0000
asID:                     214238
IP address blocks:        45.39.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:61:c3:cd:8d:6f:fd:93:d0:d6:57:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 25 12:11:17 2025 GMT
            Not After : Aug 23 12:11:17 2025 GMT
        Subject: CN=25fd17b2-cbf1-4f99-9996-5b05cd24a34d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e3:79:73:90:26:32:7c:fe:00:51:7a:a0:40:
                    b7:ad:87:c6:a6:fb:1a:da:3d:39:39:bf:97:a2:22:
                    13:f0:01:f9:75:56:df:96:b7:41:24:b6:31:93:ad:
                    f7:87:43:fa:8e:be:d6:12:6c:41:11:a1:43:5b:3c:
                    a2:f1:ec:e8:f0:1b:6a:3c:d5:da:6e:8a:e5:3a:83:
                    60:6f:c6:f6:f8:9f:b8:51:54:30:d5:f6:d9:c9:69:
                    1d:a0:3e:32:dd:f0:4a:a2:24:75:82:31:10:a4:66:
                    86:64:db:8e:a6:e4:7b:de:11:f8:43:8a:23:87:b1:
                    43:80:41:d7:da:a5:ed:30:16:95:ff:69:5c:9e:d1:
                    29:4b:3a:7e:af:87:0c:0b:f3:cf:5d:d8:42:2d:98:
                    ff:de:26:65:b4:4b:c4:23:99:fc:10:51:b2:09:68:
                    df:56:9e:5b:1b:d8:82:b5:8c:bf:88:2a:43:9c:e7:
                    fb:ff:17:55:c6:77:39:6a:87:96:f9:18:fd:0e:46:
                    8a:40:81:d9:f7:5c:63:df:fd:eb:eb:40:80:cc:72:
                    99:e2:a4:cb:a8:ff:da:80:af:7c:87:71:eb:7f:f6:
                    e5:00:99:56:15:f5:09:e9:83:30:06:34:04:90:74:
                    2e:1f:d3:d4:13:5b:8b:9d:3a:30:49:dd:d7:58:ae:
                    ea:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:EC:E3:AC:CB:62:3E:3C:88:B5:CC:9A:7A:41:6D:66:29:68:34:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a8d6aa7c-667b-346e-a228-eea6c13c4edf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:b1:d6:33:32:4f:e5:02:9d:1b:34:33:13:75:c6:1e:40:4b:
         f3:47:2f:65:e5:74:8c:6a:a7:5a:7a:8f:ee:44:a2:07:28:5c:
         0b:af:59:93:9b:2d:1d:d3:48:ea:fe:8b:31:e0:92:59:37:9a:
         b2:94:e6:28:04:19:05:ad:03:74:24:b1:c6:2a:35:be:7c:59:
         73:72:09:7b:52:51:cc:a6:6b:81:01:f9:f4:10:62:8a:a5:b9:
         68:b4:f9:a1:e2:a7:c5:ae:d7:1e:3d:16:b3:9e:ba:de:8d:6c:
         3e:97:b9:2a:4c:58:3f:ba:96:c9:29:3e:29:0b:76:51:00:0f:
         7e:0f:8a:25:83:0a:a7:19:0c:08:01:00:e0:9b:06:94:e3:d1:
         65:9b:c1:5e:6d:40:d4:a8:c7:87:61:73:bd:81:4d:c8:2c:83:
         54:35:3b:05:84:f0:d9:d6:8e:4c:6c:dc:27:9d:b0:c7:cb:95:
         d5:bb:f9:53:03:c3:d7:39:16:92:18:6a:07:34:50:5b:86:57:
         18:06:34:67:a9:29:43:3d:df:de:84:e7:03:02:b4:70:62:b7:
         41:e5:65:08:4c:32:8b:d0:ee:a2:24:1d:ff:a0:7f:20:7d:cf:
         d4:27:b9:bf:0e:b4:01:49:56:69:a8:19:6b:e8:61:86:7c:a8:
         b2:07:38:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:09:47 2025 by rpki-client