Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e261ed8e-ab7b-3e43-bc84-d417508b3599.roa
File:                     e261ed8e-ab7b-3e43-bc84-d417508b3599.roa (raw, json)
Hash identifier:          hmnzWH1bARAOZ3J1Cr7OIeVBwNhDgZ2qcADOnaB0WJ8=
Subject key identifier:   A0:42:50:F9:3E:C0:8A:30:89:E5:92:EA:65:1F:40:78:EE:1E:01:CE
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849203C0F62F1DF55CD8BE45500
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e261ed8e-ab7b-3e43-bc84-d417508b3599.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     40676
IP address blocks:        45.39.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:0f:62:f1:df:55:cd:8b:e4:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=acdda475-1008-46b7-b7b6-f8a52796be78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:43:16:a1:5d:a0:86:e5:67:11:b2:41:66:dd:
                    ea:49:95:73:a5:07:5a:06:92:a5:02:aa:4f:d7:8c:
                    7d:a2:ea:0e:e5:25:19:39:2f:08:ac:9f:2b:ea:90:
                    f6:de:24:28:4b:49:16:70:3b:36:62:c4:cf:42:52:
                    33:d1:b7:30:69:ed:0a:8f:70:e9:ca:9c:f8:ff:77:
                    4c:76:6c:b4:f5:46:2a:bb:98:88:33:2d:65:36:e9:
                    f0:bb:0c:39:5a:d3:18:f6:58:5b:76:a9:27:6a:7c:
                    76:c6:0d:ec:b0:3f:61:28:ee:64:c8:a3:b5:0f:a8:
                    f8:be:2a:07:91:39:70:ef:82:6a:d1:11:d9:80:b4:
                    57:95:86:64:e1:15:5e:d3:7d:98:af:32:76:4e:79:
                    06:48:dd:0b:3c:31:9b:5c:4d:70:84:42:01:72:89:
                    63:ee:a0:ff:9c:38:64:dd:5f:f9:7e:0f:75:cb:d1:
                    07:23:5c:b6:88:cd:02:0a:ca:fa:a6:03:a4:6a:39:
                    dc:37:ab:91:32:d7:ca:d5:69:e3:e7:81:91:60:71:
                    c6:e4:b6:2b:f6:21:03:d5:4a:9f:49:6e:de:94:56:
                    98:40:9b:f6:fe:07:be:02:9d:ef:63:8c:2e:b0:5c:
                    a4:90:02:9b:08:3e:d6:aa:30:4f:4d:b7:fa:76:b0:
                    28:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:42:50:F9:3E:C0:8A:30:89:E5:92:EA:65:1F:40:78:EE:1E:01:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e261ed8e-ab7b-3e43-bc84-d417508b3599.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:2e:73:16:3f:9f:d9:b8:6a:a8:4a:0c:76:bc:94:9d:4c:1e:
         56:cc:fb:6a:26:2c:44:bf:48:21:03:29:27:25:e2:d4:08:80:
         d6:ea:75:f9:fc:b8:c6:6d:16:fe:a2:4a:7b:da:7a:f2:6c:62:
         5a:03:0f:32:48:5f:21:a0:92:01:fb:c1:04:95:f2:47:72:ec:
         7e:b9:8d:ed:a1:60:00:34:83:66:f4:36:02:81:fe:81:04:a6:
         0d:9a:7b:51:6b:08:81:cd:a6:75:0a:57:57:fa:c6:79:70:c8:
         79:eb:79:75:6b:35:fb:c7:e4:22:54:18:47:04:a0:af:5d:64:
         44:27:e2:87:7b:8a:4c:72:71:14:cc:43:6c:e0:1a:58:76:0e:
         af:05:d5:27:37:b1:5d:21:5f:45:05:b5:c4:3f:85:e1:7e:67:
         e5:2d:08:ff:78:d7:9e:20:42:0d:17:e7:50:a1:1d:80:61:8a:
         35:cf:46:fd:44:6b:7c:3c:ef:29:d4:ea:c0:c9:c0:cb:aa:f7:
         98:c3:df:c4:cf:ad:26:68:0f:58:2b:19:67:00:ba:33:a0:8b:
         47:e1:a3:7f:07:63:0a:0c:1a:f3:56:4e:62:91:f9:ef:eb:e6:
         e2:e8:ff:eb:10:6b:0f:88:5b:77:64:0d:d1:c6:f7:7c:4c:50:
         0c:fb:d7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:48:04 2025 by rpki-client