Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bab0712e-3754-307e-ba48-061f9b975ebf.roa
File:                     bab0712e-3754-307e-ba48-061f9b975ebf.roa (raw, json)
Hash identifier:          Gy2Mjv47OXLaoBHj6vzVBz1iVFlK/MyQwpgsx7yhsRA=
Subject key identifier:   E4:3B:D8:09:C8:3F:07:3D:83:49:13:CF:B4:EC:42:49:E7:D9:B3:CA
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858496E498284D824B101953815F0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bab0712e-3754-307e-ba48-061f9b975ebf.roa
Signing time:             Sun 06 Apr 2025 01:00:47 +0000
ROA not before:           Sun 06 Apr 2025 01:00:47 +0000
ROA not after:            Sat 05 Jul 2025 01:00:47 +0000
asID:                     214238
IP address blocks:        45.38.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6e:49:82:84:d8:24:b1:01:95:38:15:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr  6 01:00:47 2025 GMT
            Not After : Jul  5 01:00:47 2025 GMT
        Subject: CN=3c2fb152-028d-4874-af91-3ff05ffe5405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6f:59:a0:ac:79:cc:9e:33:ad:1d:33:1d:60:
                    cf:65:ef:ba:95:d6:db:95:64:e1:a9:04:b0:6b:3c:
                    7d:a4:a2:de:11:37:32:50:7f:52:2c:df:e0:1d:0e:
                    91:ee:52:cf:d9:b3:c7:88:30:82:c1:1a:e4:a2:8f:
                    52:f3:6c:0f:50:b8:fc:b5:48:65:4d:26:8a:02:7d:
                    92:74:fb:56:6c:ab:bd:b6:f6:77:86:cd:1a:a4:db:
                    0f:d2:30:a8:40:20:ca:b9:62:73:bd:8c:a1:05:83:
                    bf:25:08:c9:1e:01:f1:c4:a3:01:e4:a7:ff:52:67:
                    60:ce:62:32:42:89:1a:02:91:f7:ac:5e:e2:56:d5:
                    e6:5e:43:85:05:11:49:46:85:63:d8:8d:17:e1:2b:
                    b0:af:15:f7:b6:2b:ee:38:a5:66:50:0f:bf:69:3a:
                    2d:df:82:e9:7c:61:f5:aa:53:c0:65:05:23:75:84:
                    3f:73:05:1b:95:1b:b5:09:16:e0:c9:4e:fa:6e:7e:
                    ef:0d:5f:ac:07:5c:b7:95:52:cc:7f:d3:c2:af:50:
                    14:43:29:7a:2c:85:e6:54:e7:af:52:56:a8:b7:e7:
                    50:e4:3a:45:fe:88:31:f2:34:15:ef:3a:e1:57:9c:
                    99:a7:a3:fb:b3:52:f0:d6:cf:07:2e:6f:9b:5f:81:
                    f9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3B:D8:09:C8:3F:07:3D:83:49:13:CF:B4:EC:42:49:E7:D9:B3:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bab0712e-3754-307e-ba48-061f9b975ebf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:a7:3d:ef:86:4e:59:e1:c6:29:d0:8a:d3:fd:1f:2b:80:41:
         3e:2d:8e:31:3d:d8:db:35:81:f7:40:ee:90:0a:6b:7e:d4:b1:
         ca:d4:64:cf:0d:8f:0a:4c:ab:2c:65:0e:92:10:79:ee:68:ae:
         69:60:0a:dd:41:3d:9a:3f:4b:48:68:42:99:1e:86:e6:f8:eb:
         bf:44:1d:ac:59:6e:d7:cf:21:24:08:a8:6b:19:1c:67:af:31:
         d1:88:2b:08:89:f2:bb:92:49:5c:94:a8:7f:f5:ed:8a:19:a2:
         b1:ed:56:f7:2f:ee:ea:91:52:44:82:ad:6e:1b:7c:63:70:f9:
         2e:b7:b6:c3:37:ba:bc:78:8c:ec:38:76:84:e3:c5:50:81:42:
         4f:fd:69:f6:a5:ca:19:b1:cc:0c:4b:f7:7f:f8:72:2b:aa:92:
         8d:93:92:37:66:1b:b8:a8:29:6d:0f:ea:40:70:9f:f2:0e:2d:
         36:3a:9b:de:a7:33:31:d1:c8:37:b8:95:bc:e3:07:f9:c5:4b:
         eb:2c:70:98:60:ca:21:b5:da:bb:a0:5f:83:e1:97:b8:04:c8:
         a5:8e:26:3a:8a:71:f5:88:31:56:da:92:81:d8:46:8a:09:a2:
         82:e1:fc:6f:66:bb:e1:a8:f0:cf:fc:45:0f:a0:9d:61:8e:da:
         af:eb:d4:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEluSYKE2CSxAZU4FfAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDQwNjAxMDA0N1oXDTI1MDcwNTAxMDA0N1owLzEtMCsGA1UEAxMk
M2MyZmIxNTItMDI4ZC00ODc0LWFmOTEtM2ZmMDVmZmU1NDA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvG9ZoKx5zJ4zrR0zHWDPZe+6ldbblWThqQSw
azx9pKLeETcyUH9SLN/gHQ6R7lLP2bPHiDCCwRrkoo9S82wPULj8tUhlTSaKAn2S
dPtWbKu9tvZ3hs0apNsP0jCoQCDKuWJzvYyhBYO/JQjJHgHxxKMB5Kf/UmdgzmIy
QokaApH3rF7iVtXmXkOFBRFJRoVj2I0X4SuwrxX3tivuOKVmUA+/aTot34LpfGH1
qlPAZQUjdYQ/cwUblRu1CRbgyU76bn7vDV+sB1y3lVLMf9PCr1AUQyl6LIXmVOev
Ulaot+dQ5DpF/ogx8jQV7zrhV5yZp6P7s1Lw1s8HLm+bX4H5FQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOQ72AnIPwc9g0kTz7TsQknn2bPKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYmFiMDcxMmUtMzc1NC0z
MDdlLWJhNDgtMDYxZjliOTc1ZWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSYoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEOnPe+GTlnhxinQitP9HyuAQT4tjjE92Ns1gfdA7pAKa37UscrUZM8N
jwpMqyxlDpIQee5ormlgCt1BPZo/S0hoQpkehub4679EHaxZbtfPISQIqGsZHGev
MdGIKwiJ8ruSSVyUqH/17YoZorHtVvcv7uqRUkSCrW4bfGNw+S63tsM3urx4jOw4
doTjxVCBQk/9afalyhmxzAxL93/4ciuqko2TkjdmG7ioKW0P6kBwn/IOLTY6m96n
MzHRyDe4lbzjB/nFS+sscJhgyiG12rugX4Phl7gEyKWOJjqKcfWIMVbakoHYRooJ
ooLh/G9mu+Go8M/8RQ+gnWGO2q/r1EI=
-----END CERTIFICATE-----
Generated at Thu Apr 10 18:38:19 2025 by rpki-client