Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0daa2172-5778-357c-a7ca-297148d01e2f.roa
File:                     0daa2172-5778-357c-a7ca-297148d01e2f.roa (raw, json)
Hash identifier:          AkbClO6+/dKJAfM1lpsbX5k+wbms7Y5JKzOA8lKmQ5I=
Subject key identifier:   70:4B:90:C2:50:48:C3:26:9F:08:A1:6A:BD:EA:24:CF:92:31:81:30
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584ADD6679BCA076401A55869600
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0daa2172-5778-357c-a7ca-297148d01e2f.roa
Signing time:             Fri 15 Aug 2025 13:00:41 +0000
ROA not before:           Fri 15 Aug 2025 13:00:41 +0000
ROA not after:            Thu 13 Nov 2025 14:00:41 +0000
asID:                     3356
IP address blocks:        45.39.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:66:79:bc:a0:76:40:1a:55:86:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 15 13:00:41 2025 GMT
            Not After : Nov 13 14:00:41 2025 GMT
        Subject: CN=6386e942-c87b-49b7-be92-b20cd7d6d802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5b:e4:27:17:ab:53:67:ef:da:c8:53:df:b1:
                    60:4a:56:20:20:c9:45:e0:f0:f6:7a:a2:97:0f:00:
                    66:fd:24:2b:34:87:a2:bf:8f:42:09:49:7e:8a:b7:
                    d0:70:2e:70:c7:24:4e:f0:62:e2:ef:bd:58:12:8d:
                    22:45:49:87:5a:e2:d6:20:84:a8:25:9b:34:fc:69:
                    bc:f4:03:ba:44:f8:52:67:a0:f9:89:0b:a5:0d:3d:
                    4b:c7:b2:04:d9:5e:00:a1:08:33:b6:32:d5:bb:7a:
                    f2:ae:33:da:be:d8:28:0b:bf:f7:1b:b0:9e:51:42:
                    27:fe:9d:3e:35:b2:7f:ee:b4:a0:b3:3a:7d:80:4d:
                    f2:3c:57:ed:90:9c:93:fd:ee:81:cb:ba:51:c1:cc:
                    4c:d2:37:50:15:1a:d6:c6:64:19:66:59:00:5d:dc:
                    83:8c:df:cc:2e:e8:9e:2e:74:92:3e:a8:d9:a1:58:
                    fe:4a:8b:83:c7:81:08:54:60:e0:41:4e:7b:5b:9c:
                    29:a2:ce:49:e2:37:81:61:00:39:dc:5b:9c:6c:92:
                    03:30:2e:e7:8c:26:17:bd:dd:ce:d7:1f:a9:f9:1e:
                    b0:fa:c9:32:fe:95:1e:74:18:12:73:e8:e4:f6:87:
                    7a:de:ec:f3:df:25:bf:ab:da:21:f2:f9:97:50:d7:
                    6e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:4B:90:C2:50:48:C3:26:9F:08:A1:6A:BD:EA:24:CF:92:31:81:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0daa2172-5778-357c-a7ca-297148d01e2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:d4:4c:ad:51:8b:4b:b0:f9:a1:45:2f:7d:0c:28:12:95:fc:
         4a:d1:6f:e7:d9:f3:36:6d:a6:bf:85:4a:11:03:60:75:c9:df:
         17:47:a0:40:0d:36:d5:32:d7:63:93:31:2e:0c:f8:c1:2d:29:
         d8:21:f7:3f:ca:8b:0e:d9:25:46:35:23:63:75:c5:f6:c8:c5:
         41:64:c6:15:1d:a9:0e:da:f4:9f:a9:71:43:ba:c6:17:44:0b:
         0b:ba:a9:e1:63:43:75:3e:86:54:57:3c:46:48:fa:4f:66:b8:
         86:c4:1e:34:be:9a:eb:a0:dd:0d:e0:f9:5b:69:96:79:5c:e8:
         28:8a:a6:58:db:58:61:64:7f:ac:49:2a:de:24:69:44:ff:c8:
         d6:e1:07:ec:eb:86:13:54:18:39:80:3c:4c:4d:6d:29:0c:40:
         82:bb:36:b6:eb:c8:29:f6:fa:d1:0a:12:bd:35:f8:52:38:77:
         f6:fe:b1:7b:06:26:65:5c:07:e0:e1:f7:42:9b:3b:e2:29:c4:
         38:21:47:9b:b8:2b:98:98:01:38:c2:7b:d8:82:d8:c4:78:35:
         e8:0a:69:c2:8f:32:5e:ae:1b:12:62:f1:ae:1f:d6:f5:69:12:
         b4:a6:24:ae:68:99:95:11:f3:e5:6f:3a:ec:76:2d:c7:df:ec:
         04:b8:59:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:26:43 2025 by rpki-client