Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/01594c98-635b-36b1-a43e-37d9c06a07e3.roa
File:                     01594c98-635b-36b1-a43e-37d9c06a07e3.roa (raw, json)
Hash identifier:          qUxVhVUr53ydLyjpr20Hgwu1z6NNBJMGHXDwzKG8Fq8=
Subject key identifier:   3D:30:E0:53:3D:88:D7:0E:39:68:EB:84:ED:0E:38:8E:94:3E:AE:73
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A5600579FDD870EEC61FDCB00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/01594c98-635b-36b1-a43e-37d9c06a07e3.roa
Signing time:             Sat 28 Jun 2025 01:00:48 +0000
ROA not before:           Sat 28 Jun 2025 01:00:48 +0000
ROA not after:            Fri 26 Sep 2025 01:00:48 +0000
asID:                     59711
IP address blocks:        45.38.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:56:00:57:9f:dd:87:0e:ec:61:fd:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun 28 01:00:48 2025 GMT
            Not After : Sep 26 01:00:48 2025 GMT
        Subject: CN=c9842679-27f8-48bb-a9e5-020bf95fff6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:38:ba:f0:e9:3d:cb:4e:39:88:a0:f7:2e:2b:
                    3f:c3:9c:50:12:53:26:8e:c3:03:b7:a8:c7:54:fc:
                    2e:5f:43:9e:19:62:42:c0:89:05:bb:57:a7:7a:dc:
                    62:55:6e:71:af:0e:33:c2:33:da:29:af:fc:f7:05:
                    ef:44:87:15:5b:2b:66:c2:e3:b2:5b:9a:09:ca:bd:
                    6e:bb:7e:a1:ef:11:66:eb:c3:ae:24:81:36:55:9d:
                    88:7b:aa:b6:69:27:0c:9b:24:b5:72:03:05:a6:75:
                    f5:41:9b:5e:a0:41:6b:2a:ef:27:f8:19:31:04:0e:
                    5a:90:bf:da:02:02:f3:90:34:91:49:78:28:fe:54:
                    7e:8b:4b:65:db:ee:fb:0c:9a:ce:94:da:61:27:ae:
                    40:0a:25:f7:d8:14:45:32:97:11:61:0d:0f:67:51:
                    41:52:32:ca:c3:2d:14:24:4f:ed:fc:a0:42:f1:1c:
                    cb:5c:6d:92:f7:53:db:7d:e6:36:00:5f:d6:cf:81:
                    bd:99:20:d1:b9:cc:d0:5f:f5:e7:c0:22:35:06:13:
                    86:ba:08:0f:ed:a1:8c:af:e8:df:b0:ee:14:8c:b9:
                    3d:2e:e1:43:d4:e7:f3:1b:a5:df:09:fc:6d:71:da:
                    f6:71:f1:9a:2b:ac:bc:da:aa:b1:fe:6a:2e:b9:af:
                    32:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:30:E0:53:3D:88:D7:0E:39:68:EB:84:ED:0E:38:8E:94:3E:AE:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/01594c98-635b-36b1-a43e-37d9c06a07e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:41:6d:c2:39:44:d6:51:10:e3:43:cf:33:b9:c5:cf:26:76:
         5c:17:61:ce:49:24:ef:8e:a7:9e:6e:80:46:6e:c3:06:c6:e3:
         10:64:12:6a:6b:f5:e7:06:22:82:e3:b0:2b:b7:b6:55:b5:9c:
         64:50:3a:43:ec:27:d3:4c:af:7e:51:24:c3:bd:86:89:0d:d7:
         b4:0e:d4:1d:e9:91:28:0f:52:d7:70:d6:7f:ee:27:7d:14:15:
         b4:a4:4d:08:63:16:ec:ad:b2:99:d2:a3:b5:59:65:39:ef:2e:
         d6:aa:e1:20:6a:88:ca:ca:af:7c:d9:3a:bc:c1:9c:de:67:ea:
         41:dd:be:74:39:6e:f5:2a:71:eb:b8:b8:2a:84:e5:85:69:9a:
         96:73:a2:5f:5b:eb:75:f5:36:a8:e0:9c:08:2b:b9:85:11:f3:
         c0:f3:ce:d7:c6:d6:fb:82:52:52:d4:34:c4:d0:23:74:45:f7:
         dc:ac:a7:4f:04:96:1b:bc:00:95:de:67:54:44:07:66:e5:da:
         47:85:d6:db:37:ed:fd:5f:73:d5:31:e9:df:ca:72:3d:3d:85:
         8f:68:be:45:a5:02:85:5b:a7:82:c3:46:3f:2d:e8:5d:ff:96:
         0f:10:a8:5a:d1:4d:5d:99:72:bb:69:b4:01:f1:de:f8:81:68:
         b2:81:bd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:04:59 2025 by rpki-client