Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f63ded91-fb5d-3ec7-b828-3f2d358295b6.roa
File:                     f63ded91-fb5d-3ec7-b828-3f2d358295b6.roa (raw, json)
Hash identifier:          3dGvSgdvjmXvO/VG+q/TDvHyodAIuxvHAFnbBRQ4sNA=
Subject key identifier:   D8:37:C2:9D:13:7B:B3:31:D0:71:6F:7E:35:BA:91:CD:E7:57:EC:ED
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848D641301791EAADCAD9FA9400
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f63ded91-fb5d-3ec7-b828-3f2d358295b6.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     3257
IP address blocks:        45.39.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:30:17:91:ea:ad:ca:d9:fa:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=b2a0cb99-bcff-46e2-9784-02ceba16bd14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c0:e5:3b:76:6f:2e:6e:90:13:19:c4:5a:0d:
                    2f:d3:52:b6:97:f6:51:fa:e8:1d:34:e6:c7:e4:43:
                    a8:95:9c:9d:9d:6f:b0:00:48:40:47:26:86:38:cd:
                    9c:1d:43:64:42:a1:de:be:8a:7b:ba:2e:d9:ec:de:
                    1a:b3:e9:de:fd:0f:95:7b:9a:d4:57:bd:cd:80:84:
                    d6:3f:ac:c1:9d:01:3a:5a:b0:e3:27:6c:c2:5b:83:
                    93:fc:37:89:2b:0e:1a:08:c4:b6:93:d5:d2:cd:56:
                    78:45:4b:51:c7:ce:b5:7b:44:28:75:6b:63:82:d4:
                    a0:ed:37:5b:fb:93:55:8f:9e:22:1c:53:47:a0:e6:
                    45:2d:ba:de:19:10:4d:79:68:61:dd:58:42:67:33:
                    58:22:db:92:01:66:20:c9:f7:2d:9f:3b:92:c5:ca:
                    db:24:a9:8b:33:d1:b0:0b:5f:22:d9:f8:11:70:07:
                    3f:c8:29:68:15:3f:42:76:67:93:e2:b2:c9:98:7d:
                    27:48:bb:05:92:8f:f0:ae:b8:c6:4e:53:5f:82:5c:
                    6f:85:02:35:10:76:41:6a:24:f6:ce:d8:c8:b3:05:
                    c4:3e:ff:63:1a:fb:5d:9e:b8:46:a8:30:04:8a:29:
                    f5:95:0d:81:95:78:53:20:11:63:2d:59:55:e3:e9:
                    ee:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:37:C2:9D:13:7B:B3:31:D0:71:6F:7E:35:BA:91:CD:E7:57:EC:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f63ded91-fb5d-3ec7-b828-3f2d358295b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:7a:11:ee:4b:5a:37:d7:73:01:c2:1a:be:2f:6e:51:43:45:
         b2:53:3a:03:12:59:15:77:10:f4:f5:92:92:45:cf:05:32:04:
         47:67:70:5e:83:d6:5c:39:ee:63:8f:b6:f4:bf:74:d0:14:15:
         d2:e5:61:4d:91:a2:f8:18:52:85:79:50:7a:28:10:e3:ef:7d:
         5a:88:df:70:4c:2b:ce:df:0e:4b:34:d9:75:22:3a:f9:16:2f:
         08:03:99:e1:46:6c:30:4d:72:66:2e:2b:fa:46:0f:3e:ba:d5:
         b3:54:d9:63:86:b7:7f:3d:50:6f:17:dc:3c:c1:f9:4b:2d:82:
         79:04:81:e1:38:fa:4e:4c:f7:e9:a8:9e:ae:e9:36:66:11:68:
         26:81:79:c4:45:ab:5a:4c:ac:14:e7:da:b7:04:34:93:8d:03:
         6b:76:2d:bf:0d:79:d3:20:8c:de:28:a4:78:46:df:d6:fa:3d:
         0e:7f:42:df:ec:3e:19:a4:f5:ae:9c:93:01:9f:c8:23:93:fe:
         cb:54:e5:99:65:5a:a1:23:94:b9:9e:4e:c8:b9:bb:18:ce:7a:
         98:97:8c:1a:79:35:74:4a:f2:21:20:72:e4:33:5e:e1:7a:7b:
         79:39:f4:fd:5d:1a:1a:7a:a6:9b:d7:6d:86:15:89:3a:ec:04:
         0c:d6:cf:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:10:39 2025 by rpki-client