Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/003e87bb-4774-359b-bf12-d6d73d94e7fa.roa
File:                     003e87bb-4774-359b-bf12-d6d73d94e7fa.roa (raw, json)
Hash identifier:          8Rl5atjm8it/yI4x7U8n4LngU/6AOlzoWRAueXudNuA=
Subject key identifier:   68:63:C0:A4:A3:C9:D7:A4:1F:83:64:8A:06:D9:C6:22:CA:00:89:6A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849B149FB9D8F7978F830A66D40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/003e87bb-4774-359b-bf12-d6d73d94e7fa.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     44477
IP address blocks:        45.38.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:49:fb:9d:8f:79:78:f8:30:a6:6d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=fc473c39-0371-42d3-b217-320661c4987f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:30:53:6c:4a:ba:14:89:2d:54:d1:e3:59:be:
                    ef:c6:f6:89:c7:3e:0f:fb:0e:79:45:95:c0:8b:97:
                    ce:08:5c:3d:08:f5:7a:9e:3e:d0:84:06:c6:94:1c:
                    42:fa:49:33:9a:7b:c7:87:d5:a4:84:8f:c8:0a:fe:
                    a9:4a:21:a1:47:4b:b4:a0:99:bd:96:39:86:a3:df:
                    32:ab:2f:e2:53:aa:42:ff:a2:93:c5:17:6e:d3:e1:
                    0b:a8:b9:e6:85:99:1a:af:c3:a4:c2:c5:e8:52:b3:
                    f9:2b:73:f2:ad:04:e4:9b:3e:b7:b4:7c:a3:a0:60:
                    fc:5f:54:ef:e2:03:70:58:c4:8f:d7:6a:f6:ae:bd:
                    43:4d:f8:45:ae:93:52:aa:6c:aa:db:57:94:62:9a:
                    d5:85:21:3c:a8:b8:cb:f9:06:10:cd:37:f6:d8:df:
                    c3:ea:d1:61:97:7f:f1:68:9b:1c:ad:c1:61:fd:41:
                    4b:c2:98:c7:91:6a:c9:2e:f3:4f:9f:78:89:af:97:
                    e1:85:c9:9f:38:e0:d7:67:6d:7b:be:04:6c:1f:9f:
                    dd:1c:d4:b2:78:00:e8:dd:4b:68:51:e1:ad:20:5a:
                    6b:70:48:4d:f8:e5:29:22:0b:3c:2d:e3:e6:22:06:
                    52:51:f3:64:1d:42:ba:1f:a1:c7:29:55:f5:c8:9f:
                    29:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:63:C0:A4:A3:C9:D7:A4:1F:83:64:8A:06:D9:C6:22:CA:00:89:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/003e87bb-4774-359b-bf12-d6d73d94e7fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:87:a7:f6:37:a6:7a:bf:1e:0a:11:cf:e7:c7:29:d3:54:46:
         25:90:d2:1e:a2:44:a9:26:b1:73:aa:c7:47:4a:0e:04:1c:96:
         64:b4:b0:d7:26:95:dc:52:54:37:62:bc:c7:f3:f3:51:c6:b7:
         cd:c7:fd:94:5d:18:09:4f:f8:8b:8d:9a:3e:dc:fa:80:84:5b:
         07:cb:93:eb:aa:81:77:42:1c:29:93:ff:0d:90:a7:ce:28:f0:
         b0:42:bc:aa:29:11:ca:3f:9f:42:f2:47:43:ad:97:99:7e:ce:
         dc:23:7c:47:82:92:48:b4:cc:40:8b:e1:3e:af:ce:63:ec:04:
         15:cf:8d:f0:10:e1:0a:12:f0:9b:5f:b4:d0:66:21:fd:dc:1b:
         e6:1e:c4:a8:ea:a5:76:66:89:74:db:b1:a9:09:3e:07:a8:63:
         cf:ea:30:8b:71:b7:cc:23:0e:14:c0:cd:b2:c1:d7:cd:41:f8:
         17:4e:28:54:39:ca:b2:f5:eb:68:54:8c:e2:28:dd:b9:08:f5:
         c0:f7:96:40:42:f6:33:5f:ca:cf:dd:03:1a:ef:95:01:aa:e2:
         00:28:ee:b3:fa:0f:b9:49:46:b9:3a:4c:a3:9b:36:7b:68:b7:
         e0:1c:dc:f7:45:35:e0:23:1c:8d:fd:6d:22:53:ae:a0:72:d1:
         db:c2:4b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:49:54 2025 by rpki-client