Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ee9959b3-4633-322e-a5cd-8e8aa53fe165.roa
File:                     ee9959b3-4633-322e-a5cd-8e8aa53fe165.roa (raw, json)
Hash identifier:          ckdcGm0hiPpINyjHe//MPYYioJKeGMbKmfng3p0utwA=
Subject key identifier:   68:0A:79:08:20:FB:C7:B6:B7:7F:CA:53:AF:38:F4:34:2A:38:3D:45
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A5FC5CEAE2B539C0714C08100
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ee9959b3-4633-322e-a5cd-8e8aa53fe165.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     174
IP address blocks:        45.39.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:ce:ae:2b:53:9c:07:14:c0:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=93b72153-5c76-41b5-9cdb-896c1faed0bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3a:ce:c2:e2:55:2e:cb:0a:83:84:34:74:13:
                    b4:22:1a:bc:13:7c:1a:9f:80:94:fc:e5:9a:23:d4:
                    6e:ad:a7:31:fd:03:49:ed:ca:2d:eb:55:8f:f1:04:
                    2d:48:11:64:e0:51:15:17:df:58:4d:a3:49:02:f8:
                    a4:53:88:48:b5:ea:85:bf:5e:12:36:d5:24:89:90:
                    37:c1:6c:e2:a2:10:81:5a:b8:f6:a9:ed:ec:a3:51:
                    a8:a8:92:50:b3:0d:ed:61:c2:5d:d9:3b:71:fc:04:
                    79:4d:3e:fb:8d:41:ac:45:c9:9c:ee:7a:58:0f:c8:
                    8b:a9:1e:44:9e:b1:7e:bf:8c:37:3e:3d:40:e0:c4:
                    8f:2f:f7:43:e7:58:e1:b3:19:b7:aa:63:47:80:6d:
                    31:11:75:35:b1:24:83:50:6f:e7:95:b5:b4:f5:7b:
                    13:5d:45:9e:94:1d:f6:96:53:ed:19:c8:aa:c7:14:
                    19:00:11:95:54:89:35:79:c5:9b:e4:a9:48:16:92:
                    74:d1:8b:9a:c7:0c:3c:d6:c1:d3:5c:0e:cc:3a:45:
                    3a:ce:a3:86:6c:fe:fb:98:11:b8:c3:6c:92:d8:0a:
                    96:08:91:90:19:3d:87:5d:e3:59:c7:9d:39:47:7f:
                    fb:d5:f1:42:93:63:9d:9e:e7:27:cd:69:12:d1:c5:
                    97:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:0A:79:08:20:FB:C7:B6:B7:7F:CA:53:AF:38:F4:34:2A:38:3D:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ee9959b3-4633-322e-a5cd-8e8aa53fe165.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:e7:da:a2:b5:ec:19:4a:91:63:c2:19:d1:63:26:cf:98:95:
         be:ef:93:cf:f6:4f:17:ae:03:55:20:9e:87:e8:e4:7b:63:a2:
         01:b9:51:24:2a:d8:69:d9:36:cc:2c:a9:d5:d3:e9:56:12:4a:
         ac:24:9d:c6:10:ac:51:9d:1a:6d:a5:c1:65:09:56:3f:46:a1:
         42:80:af:fe:b0:d1:2a:7c:a5:c7:dc:07:30:e9:8b:d7:64:00:
         6e:7c:3b:9d:c4:ea:df:4a:41:a6:3b:33:e5:1a:15:fc:5b:cf:
         4f:23:c0:09:1b:ff:d5:7c:3a:8c:4e:45:97:46:ef:28:2a:e7:
         b1:09:7a:97:2b:fc:8b:45:7f:e1:e1:a7:67:b7:5d:b0:fa:f4:
         28:4e:dc:3b:67:82:fc:31:22:a9:34:03:e5:8a:68:57:9e:d6:
         4c:e9:a4:d9:1d:2a:c1:54:c8:71:02:4f:eb:36:6b:9a:79:81:
         b2:72:56:93:45:7e:ae:5b:33:4c:94:02:07:40:4a:55:79:7c:
         7d:53:83:de:13:ab:3b:50:23:cf:f2:09:ae:2d:eb:d6:42:c6:
         47:d8:df:78:e3:93:2b:57:48:27:42:52:14:be:bf:a7:48:c5:
         1f:68:ed:c6:2b:35:0c:ff:a6:c3:13:fc:4d:da:bc:1e:44:19:
         a6:44:56:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxc6uK1OcBxTAgQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk
OTNiNzIxNTMtNWM3Ni00MWI1LTljZGItODk2YzFmYWVkMGJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTrOwuJVLssKg4Q0dBO0Ihq8E3wan4CU/OWa
I9Ruracx/QNJ7cot61WP8QQtSBFk4FEVF99YTaNJAvikU4hIteqFv14SNtUkiZA3
wWziohCBWrj2qe3so1GoqJJQsw3tYcJd2Ttx/AR5TT77jUGsRcmc7npYD8iLqR5E
nrF+v4w3Pj1A4MSPL/dD51jhsxm3qmNHgG0xEXU1sSSDUG/nlbW09XsTXUWelB32
llPtGciqxxQZABGVVIk1ecWb5KlIFpJ00Yuaxww81sHTXA7MOkU6zqOGbP77mBG4
w2yS2AqWCJGQGT2HXeNZx505R3/71fFCk2OdnucnzWkS0cWXIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGgKeQgg+8e2t3/KU6849DQqOD1FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZWU5OTU5YjMtNDYzMy0z
MjJlLWE1Y2QtOGU4YWE1M2ZlMTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSfWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACvn2qK17BlKkWPCGdFjJs+Ylb7vk8/2TxeuA1Ugnofo5HtjogG5USQq
2GnZNswsqdXT6VYSSqwkncYQrFGdGm2lwWUJVj9GoUKAr/6w0Sp8pcfcBzDpi9dk
AG58O53E6t9KQaY7M+UaFfxbz08jwAkb/9V8OoxORZdG7ygq57EJepcr/ItFf+Hh
p2e3XbD69ChO3DtngvwxIqk0A+WKaFee1kzppNkdKsFUyHECT+s2a5p5gbJyVpNF
fq5bM0yUAgdASlV5fH1Tg94TqztQI8/yCa4t69ZCxkfY33jjkytXSCdCUhS+v6dI
xR9o7cYrNQz/psMT/E3avB5EGaZEVtw=
-----END CERTIFICATE-----
Generated at Thu Jul 10 22:26:12 2025 by rpki-client