Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/02ff1aa6-8721-3c67-9821-73638a34300a.roa
File:                     02ff1aa6-8721-3c67-9821-73638a34300a.roa (raw, json)
Hash identifier:          6z3A1LSmy+qUpTzMdrcTVSJuL1b42sk+Ns3ScmR1v6k=
Subject key identifier:   B9:0B:96:B5:35:23:4E:2C:B7:3B:67:67:48:8C:CA:A6:34:80:C6:2B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A35E58BB607D577FFDE82F500
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/02ff1aa6-8721-3c67-9821-73638a34300a.roa
Signing time:             Mon 16 Jun 2025 13:01:03 +0000
ROA not before:           Mon 16 Jun 2025 13:01:03 +0000
ROA not after:            Sun 14 Sep 2025 13:01:03 +0000
asID:                     13213
IP address blocks:        45.39.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:35:e5:8b:b6:07:d5:77:ff:de:82:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun 16 13:01:03 2025 GMT
            Not After : Sep 14 13:01:03 2025 GMT
        Subject: CN=ae314ec8-4cdd-4291-9554-2ed63b92c9ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d3:e3:cd:64:41:92:62:6d:71:4c:72:30:70:
                    e5:74:a8:35:5c:16:b7:6f:b2:c6:3a:39:12:21:ae:
                    a3:ca:3f:b1:7e:48:76:76:b1:04:f3:4f:ea:90:f9:
                    9b:9c:3f:71:12:18:2c:1d:88:c0:5b:8c:a7:81:be:
                    f9:94:35:e4:6a:2b:6c:76:4b:eb:01:90:7f:e5:97:
                    13:3b:16:b7:24:4b:db:70:e4:0f:f8:cc:99:35:48:
                    65:99:17:62:25:6b:2e:ac:42:0e:08:78:89:a6:59:
                    a5:1d:f6:1e:15:51:39:2b:1d:5e:f1:74:71:26:17:
                    b6:ee:3c:48:e5:e5:ae:22:a8:c6:30:05:5a:3a:6c:
                    45:49:98:34:2e:7c:f7:10:52:b6:c5:14:f1:5a:6a:
                    bc:4b:93:1c:65:75:58:34:62:af:c3:f2:91:f3:24:
                    41:bd:53:1e:ae:fd:aa:43:f0:0c:4d:1c:68:d2:6a:
                    e5:26:9c:59:1b:20:8e:c6:86:36:b1:2d:de:87:46:
                    22:ff:83:20:78:4f:b1:5f:26:f4:99:8f:d3:c9:6c:
                    23:7c:9a:16:fc:61:f6:0a:3c:14:9e:29:5c:7a:ea:
                    75:1d:94:a9:f8:63:ef:dc:cd:8b:ec:c0:f2:8c:f8:
                    7c:e7:43:a1:a7:95:6d:04:a8:33:fe:e5:c1:96:1a:
                    fd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:0B:96:B5:35:23:4E:2C:B7:3B:67:67:48:8C:CA:A6:34:80:C6:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/02ff1aa6-8721-3c67-9821-73638a34300a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:78:bc:96:79:df:74:15:2a:0d:5a:71:18:22:7d:2e:b4:83:
         d3:e3:42:52:0c:5f:f4:08:00:c4:1d:a0:4f:c7:5a:d9:92:04:
         f4:f5:c3:27:db:1a:86:d4:ef:dc:d7:e0:bc:79:0e:ba:32:e8:
         1d:74:fb:de:c7:4d:5a:a4:43:e7:de:32:18:ef:59:76:d7:97:
         f2:b8:68:bb:c0:24:e0:5b:86:0e:80:2e:d7:d5:f2:47:a4:57:
         1f:28:7e:9e:7a:e8:1d:af:9b:ba:b9:b2:a4:22:6d:a3:34:02:
         56:59:24:27:66:a8:2e:a1:db:41:36:f2:9b:03:d4:74:86:82:
         0e:18:ea:b0:90:b3:5c:71:e5:74:76:dd:64:81:dd:96:ec:1e:
         e5:8f:b2:b9:23:0e:22:5f:b5:9b:ff:6f:56:19:c7:da:b1:4c:
         d4:3f:47:0e:31:1e:ef:33:ee:98:44:f6:60:18:10:7e:9e:d1:
         0e:4a:18:29:05:bd:8f:10:82:3e:6a:72:4d:6e:64:13:94:73:
         97:c0:40:80:a8:76:a4:9c:64:8e:d4:61:88:91:f5:2a:c8:26:
         20:86:2c:6a:5b:d6:86:16:23:85:9f:ea:08:e0:5c:5f:bd:96:
         0d:a7:0c:40:5d:c4:a5:11:ec:bc:69:b4:1f:bb:84:9a:d8:b8:
         d9:d9:8a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:49:58 2025 by rpki-client