Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f45697ad-8ef7-3f6b-ae43-cee419b71bf0.roa
File:                     f45697ad-8ef7-3f6b-ae43-cee419b71bf0.roa (raw, json)
Hash identifier:          DsDBw++V1oahhjG+mdrOfUrAo036yGdlIOZoD3cv5uY=
Subject key identifier:   82:A7:75:6B:04:BA:78:11:AE:C4:39:07:1F:FC:80:43:DC:E1:ED:00
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584949FEB470E12A3AC832A85000
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f45697ad-8ef7-3f6b-ae43-cee419b71bf0.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     9009
IP address blocks:        45.38.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:b4:70:e1:2a:3a:c8:32:a8:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=10d7a35e-d30d-4dcd-8df6-9aae1a46759f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ed:9e:1b:15:a5:ac:67:17:f7:2b:e9:d0:e9:
                    ba:fc:11:fe:d1:ed:64:95:24:e1:c1:c8:81:61:b9:
                    cd:6f:82:88:29:5b:86:e3:b5:73:df:01:e0:47:80:
                    3c:d7:7c:e7:78:b3:4c:ee:02:b0:49:74:34:7e:1a:
                    2b:a3:48:2b:dd:66:fe:5d:7c:fd:5f:21:f1:d2:d0:
                    5b:3b:f2:8f:f5:77:ef:c6:11:fe:1d:42:23:65:c7:
                    22:89:a3:65:ef:15:a0:1e:81:66:5e:67:6e:4f:18:
                    94:3d:23:9c:a5:a4:57:36:8b:99:dc:93:25:66:78:
                    6e:99:25:56:9e:be:4f:43:59:71:ab:ee:f5:ff:38:
                    62:55:22:74:b5:33:d4:d2:b2:25:da:eb:53:a6:43:
                    3f:89:f3:fa:0c:09:cf:e5:27:81:4a:2a:69:3b:fd:
                    1e:73:89:c1:e3:f3:54:65:15:18:1c:80:b1:8a:d3:
                    a3:57:11:22:6d:8a:21:0c:b3:9f:27:91:41:48:dc:
                    29:dc:c2:0e:fa:07:0a:be:2f:5b:47:57:34:73:1a:
                    55:f4:dd:28:68:91:e5:72:8e:17:7b:f1:e2:b6:ca:
                    c8:01:5a:b9:bb:23:65:8f:1d:5e:b4:db:9a:c4:cd:
                    bf:d7:92:5e:f1:68:61:ab:2a:f7:78:03:1a:87:8c:
                    cd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A7:75:6B:04:BA:78:11:AE:C4:39:07:1F:FC:80:43:DC:E1:ED:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f45697ad-8ef7-3f6b-ae43-cee419b71bf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:ef:3c:9a:80:08:83:48:eb:78:ea:21:ae:44:35:80:93:5b:
         e1:73:e6:65:6e:32:b7:ba:1f:1f:65:81:6f:9c:38:41:5c:f8:
         27:16:e9:00:1a:fc:25:8e:d8:2b:02:5b:b4:fc:9e:48:d1:06:
         f8:29:51:4e:a5:a4:33:a9:87:89:4e:55:f2:7e:af:ce:5c:87:
         90:0b:03:7a:40:72:95:67:91:5e:f7:05:aa:f2:e6:3e:5b:be:
         0b:3e:d4:5a:14:fb:3c:62:4a:e8:96:58:07:0f:7b:9e:c0:97:
         9e:22:c8:19:a8:cb:e9:c4:85:16:b9:8c:7a:d6:2f:a5:33:e6:
         86:c2:f9:00:41:e8:62:1a:6c:c7:b6:41:25:87:5f:94:9d:e9:
         1e:39:f6:2d:19:e3:d0:dd:27:3c:69:4b:08:d3:8b:1a:e0:78:
         46:e0:0b:9a:eb:a5:12:fa:50:95:2c:d5:c0:85:94:19:d9:ec:
         d3:07:66:bb:09:d8:99:43:8f:16:35:4f:3a:56:28:bd:87:d7:
         e8:27:82:2c:f7:85:38:c9:30:fa:00:13:52:1d:41:fc:ae:61:
         5d:74:eb:e0:3f:ab:9f:75:90:9a:7b:da:4e:e1:8d:c5:ee:71:
         0e:94:ea:53:9c:b5:64:05:cf:99:71:ba:3e:dc:bc:1d:10:a8:
         b2:f2:a8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:17:09 2025 by rpki-client