Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/09710c09-3026-3dc9-b2c1-9c603431d534.roa
File:                     09710c09-3026-3dc9-b2c1-9c603431d534.roa (raw, json)
Hash identifier:          RXzQ9wB1VgGzwuLeGgiusP5qd0T216uZ1OpAPN0cu/o=
Subject key identifier:   6A:61:7E:E7:DA:70:77:7D:02:02:18:BC:10:3F:EC:B8:32:D7:16:58
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A348025F0854DAB9FA7208600
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/09710c09-3026-3dc9-b2c1-9c603431d534.roa
Signing time:             Mon 16 Jun 2025 01:00:49 +0000
ROA not before:           Mon 16 Jun 2025 01:00:49 +0000
ROA not after:            Sun 14 Sep 2025 01:00:49 +0000
asID:                     262287
IP address blocks:        45.39.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:34:80:25:f0:85:4d:ab:9f:a7:20:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun 16 01:00:49 2025 GMT
            Not After : Sep 14 01:00:49 2025 GMT
        Subject: CN=e79f4ad1-43c9-4584-a603-81bafdd8d323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7d:20:4c:d3:7b:59:f4:2f:63:0f:c2:50:9f:
                    c5:57:75:c4:d1:5d:1e:af:2c:e7:28:70:65:d4:89:
                    73:11:83:9f:55:18:ca:fa:be:21:d1:80:8b:bf:e8:
                    41:8b:b3:c1:34:c9:f4:f8:bd:ba:76:6b:0c:d0:db:
                    e1:f0:58:b4:02:e4:e7:f6:e1:4a:68:63:53:ad:59:
                    71:ba:69:51:ee:d2:85:2d:28:df:db:e3:b6:3b:67:
                    b0:bc:a8:f3:fe:9e:72:30:2f:39:4a:e0:bf:7c:c2:
                    d7:97:7a:29:1e:a3:4f:3a:8a:9e:e9:74:68:cc:6c:
                    6a:e4:62:c6:11:eb:74:86:c9:7d:97:0a:2d:3e:14:
                    dc:0c:65:62:2f:53:5d:9d:a8:57:5b:d8:25:f2:9b:
                    f2:1b:e6:d4:25:45:78:70:9e:57:00:f6:88:25:49:
                    be:a5:8f:ae:45:be:2f:10:86:7a:da:43:49:ed:12:
                    cd:1e:35:2d:77:7c:1a:b6:72:11:00:cc:38:1f:77:
                    44:d2:4a:20:09:c3:9f:96:0e:5e:24:91:4e:8c:47:
                    51:bd:f1:77:90:9f:f2:49:89:c8:0f:a1:59:bf:ec:
                    77:cc:1d:e0:c0:e7:cd:29:4a:f7:64:3f:75:7a:6a:
                    3a:f9:a3:94:fd:26:37:31:35:57:f4:d7:42:a4:18:
                    27:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:61:7E:E7:DA:70:77:7D:02:02:18:BC:10:3F:EC:B8:32:D7:16:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/09710c09-3026-3dc9-b2c1-9c603431d534.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:72:3f:c0:ae:54:be:2b:69:d5:62:bf:b9:ee:2b:3e:4e:1c:
         99:6c:53:f8:0d:78:03:d8:47:48:2c:47:59:5c:30:02:71:a2:
         8a:55:0a:db:18:3f:20:a2:86:3c:a0:af:ac:6d:36:26:5d:74:
         20:ec:88:da:d5:f6:84:7c:43:33:b3:a1:73:5e:12:9f:18:35:
         db:42:80:ce:1d:14:07:50:d2:bf:6f:c1:27:fd:75:03:98:01:
         f7:2b:19:30:05:4b:22:09:d6:7d:4d:72:26:e5:04:a1:95:e4:
         aa:7a:bd:da:93:ed:95:96:fa:ca:e1:ad:38:05:6c:92:4e:69:
         4f:b7:8a:46:c3:f0:65:d4:85:90:23:c8:48:c8:1f:e2:2c:5c:
         cc:6c:45:a3:02:62:35:19:41:67:ba:59:bf:65:90:a3:a6:99:
         06:5f:1f:2e:3e:83:22:c7:1c:5a:70:68:5c:5f:65:63:38:83:
         59:46:89:4c:66:9c:8c:39:22:25:34:a7:b3:34:f7:96:8c:09:
         77:04:40:bc:a7:ce:b3:ef:bd:d8:77:26:41:fa:63:ae:cd:08:
         bb:24:28:ee:4b:00:70:30:1b:b4:68:6f:5b:0b:4c:56:e3:63:
         26:f9:c4:03:48:8a:8e:ef:41:23:48:09:3c:bc:1d:d7:10:2c:
         b4:cb:bf:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:04:26 2025 by rpki-client