Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dba68e80-726a-3003-a68f-53e9f510b6d1.roa
File:                     dba68e80-726a-3003-a68f-53e9f510b6d1.roa (raw, json)
Hash identifier:          8p1yFwBtrQNtmurKKyteQRRMV3f5Yea+u9fhabIXOtE=
Subject key identifier:   77:78:A0:C0:77:15:89:24:5F:7C:C0:92:CF:F0:7B:36:C8:00:14:85
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B004BF11D349FC49BE864DC80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dba68e80-726a-3003-a68f-53e9f510b6d1.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     264617
IP address blocks:        45.38.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4b:f1:1d:34:9f:c4:9b:e8:64:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=24406443-37da-409f-a641-17d567c9b988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:08:66:c4:d1:bb:34:3c:fa:58:aa:a2:a2:d6:
                    e7:95:27:be:13:ee:37:4f:d4:ce:86:3e:35:4d:02:
                    2e:af:3c:10:6e:a7:03:bf:08:27:82:a1:91:bb:b6:
                    dd:5a:f3:9c:88:23:31:f6:b7:8a:0a:bd:8d:3d:e4:
                    bb:02:3d:2f:ce:4f:de:61:55:d0:b4:0c:5c:3d:cd:
                    5b:53:ee:15:52:16:a5:95:fd:21:b6:89:c1:07:09:
                    b1:c7:36:60:b3:f5:20:1e:fb:cb:4f:05:49:70:91:
                    ef:ee:64:7f:48:67:45:92:6a:90:64:a1:50:f7:f5:
                    54:f5:03:bd:62:ae:78:8d:14:6d:00:10:4d:a9:6b:
                    ba:69:c7:59:5c:da:bb:29:cf:c1:4d:7f:0d:79:94:
                    d0:32:82:4d:01:f6:a7:9b:17:ea:5d:21:8a:53:0d:
                    32:c5:cc:e1:34:fe:37:4c:2c:6a:89:a7:d5:dd:50:
                    b0:0f:45:ea:8f:52:4d:4e:fc:cc:44:8f:00:93:e2:
                    7f:f9:cf:1d:0c:22:41:2f:d7:1d:6a:f7:bd:5d:5c:
                    17:e7:d7:3b:22:98:4d:1b:d1:78:2a:c8:ef:63:fc:
                    64:c5:db:a3:1c:a0:99:7c:ce:ca:7e:8a:4b:4e:7e:
                    69:cd:72:50:ac:00:fb:60:f8:2a:36:ff:ad:9a:71:
                    18:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:78:A0:C0:77:15:89:24:5F:7C:C0:92:CF:F0:7B:36:C8:00:14:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dba68e80-726a-3003-a68f-53e9f510b6d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:72:42:92:c6:84:b1:4e:fa:bd:92:f8:e3:b4:86:2b:11:b4:
         2d:ea:b2:c6:a8:f5:b5:34:72:b4:b2:a5:d2:53:e2:7a:22:bf:
         e8:75:f3:46:44:c0:24:e8:95:47:e3:35:f9:17:92:2d:55:f4:
         87:b2:6e:ec:25:26:ca:ae:c6:14:9b:27:84:41:d1:a9:d4:b1:
         23:f3:4b:61:cc:7f:14:c1:85:b8:29:cc:99:f8:36:41:ed:5b:
         cc:06:8c:59:af:ed:d6:e2:1d:8a:92:43:03:5c:c3:15:47:1a:
         96:a2:2b:6b:a2:49:ec:82:ef:05:75:70:68:bc:b9:57:90:ea:
         ab:92:de:c6:26:ea:67:45:b2:ad:62:96:55:ed:53:de:e6:93:
         a4:5a:2a:b7:27:ad:c6:ad:43:62:c5:e4:55:8f:c6:6a:98:31:
         64:83:66:ab:64:07:43:3f:6f:a6:d8:d7:c6:04:d3:5b:b1:d9:
         2a:1a:35:cb:4c:ae:ff:28:df:28:9f:16:f5:f8:6d:d4:2f:89:
         7b:8b:2b:90:8d:f3:cd:0f:15:02:dc:1a:a2:ea:9f:5e:38:da:
         88:41:ff:98:bc:a6:af:5e:1c:0e:e4:3a:da:8b:03:e3:b2:8c:
         2d:db:50:de:47:e5:94:2b:aa:14:7f:e6:be:41:3f:8e:e2:13:
         66:22:e5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 03:51:56 2025 by rpki-client