Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/df0be587-cbaf-306a-8fe4-dfce0955ca20.roa
File:                     df0be587-cbaf-306a-8fe4-dfce0955ca20.roa (raw, json)
Hash identifier:          kSRMZJHnWT/77Q8W1D0HQpF3JVWgqtmiZWDufQgSGNc=
Subject key identifier:   D4:3E:C0:94:A9:97:3E:70:41:1A:69:D4:E6:6F:B2:EA:18:8A:85:7E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849F2AC7AE8F9993B7A60606A80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/df0be587-cbaf-306a-8fe4-dfce0955ca20.roa
Signing time:             Fri 23 May 2025 11:06:58 +0000
ROA not before:           Fri 23 May 2025 11:06:58 +0000
ROA not after:            Thu 21 Aug 2025 11:06:58 +0000
asID:                     44477
IP address blocks:        45.39.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:ac:7a:e8:f9:99:3b:7a:60:60:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 23 11:06:58 2025 GMT
            Not After : Aug 21 11:06:58 2025 GMT
        Subject: CN=d1dca061-1c33-46a1-a66f-8807c5153275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f9:54:57:57:96:01:fb:cc:a7:27:7a:fe:be:
                    24:85:d4:cf:28:5e:de:80:18:8c:78:6e:81:06:f0:
                    6c:35:f2:37:f7:1b:ca:28:5b:30:8c:97:3c:82:9c:
                    8a:d3:03:7f:8f:4a:20:4d:d7:50:59:1b:74:92:07:
                    09:ec:33:81:bd:b3:8e:77:64:91:6e:f7:5d:e9:66:
                    1f:de:92:c7:6e:23:65:27:2f:fb:ff:ae:ca:81:b0:
                    7d:89:42:d3:b6:72:16:88:f7:cc:ac:2a:dc:cb:47:
                    2b:54:78:b1:89:84:5d:c2:d5:4a:4f:9f:8c:9e:f4:
                    84:40:c3:3f:71:29:0d:4c:05:78:ac:e7:96:00:61:
                    3d:a8:49:b3:bd:3a:6e:69:1f:af:90:66:8b:7c:57:
                    b1:4f:73:6d:06:6a:49:8d:8b:56:c5:27:fd:5d:e4:
                    8b:bc:e0:97:af:07:67:55:41:0f:9a:7d:c5:07:f6:
                    e7:c2:b3:f2:d4:e1:48:8b:b1:34:8c:8a:17:e2:c9:
                    51:3f:a0:4d:6a:b8:e1:aa:3d:6c:55:3c:0f:2a:81:
                    2a:9f:15:33:f3:2f:44:9a:fc:0a:c4:9f:cb:9c:26:
                    10:be:f4:2d:cc:8e:c8:e6:87:32:37:ef:f6:f4:ac:
                    d3:19:0f:fd:82:e5:14:83:b8:ee:c7:eb:78:26:ef:
                    6a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:3E:C0:94:A9:97:3E:70:41:1A:69:D4:E6:6F:B2:EA:18:8A:85:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/df0be587-cbaf-306a-8fe4-dfce0955ca20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:11:76:88:c7:87:18:8e:23:1e:a4:28:44:60:8e:52:68:40:
         1e:d8:f1:a3:76:0e:98:8c:c0:af:a2:ac:bd:16:0c:d5:d8:97:
         a3:fd:3d:8d:59:b2:d8:c0:95:85:18:23:be:2d:67:bb:2d:21:
         6a:ec:1b:ef:66:31:c3:26:69:60:38:53:ba:31:2c:19:5d:ea:
         dc:04:36:69:d6:88:be:51:c3:c5:2f:f7:85:b6:5f:86:6d:db:
         81:95:f0:7d:dd:8b:22:fe:fd:11:2e:23:85:7f:27:47:6f:73:
         f9:ee:2d:d7:8c:34:b5:d5:4b:d3:71:be:dd:9c:0b:0b:07:58:
         9d:62:79:b8:4d:8b:16:6a:40:73:75:91:16:61:ac:08:b5:c3:
         26:76:25:27:6f:e7:93:24:ee:ba:48:58:83:f8:ed:58:1c:ba:
         b6:e5:19:d0:0a:3d:85:b2:16:a9:5e:43:96:6e:7d:47:b2:bb:
         38:25:7f:94:af:97:78:ea:ed:c7:cb:be:fb:6e:4e:bc:93:cd:
         ba:75:85:7e:b7:bb:c6:b8:3f:3c:42:5b:a2:56:88:03:42:91:
         ac:92:d7:fc:ed:22:5a:d7:fa:53:49:3b:d3:31:31:f6:39:78:
         fc:2e:e0:a5:d1:43:2f:7c:cc:69:b6:cb:c5:e7:3b:95:7e:9c:
         22:cb:3c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 23:29:30 2025 by rpki-client