Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/12dd9a86-0b05-3378-9cd4-49b71d5b0331.roa
File:                     12dd9a86-0b05-3378-9cd4-49b71d5b0331.roa (raw, json)
Hash identifier:          JnIJ3Pg1hsPVKkTibP9eNvKXXxHr4Kzq8/YiubmX63M=
Subject key identifier:   6A:32:4C:B1:FF:EA:E4:CC:1C:A2:B9:9F:D5:9F:4C:11:57:71:B1:26
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849CFFF7336715E4049CDDDD980
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/12dd9a86-0b05-3378-9cd4-49b71d5b0331.roa
Signing time:             Sun 11 May 2025 01:00:47 +0000
ROA not before:           Sun 11 May 2025 01:00:47 +0000
ROA not after:            Sat 09 Aug 2025 01:00:47 +0000
asID:                     18779
IP address blocks:        45.39.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cf:ff:73:36:71:5e:40:49:cd:dd:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 11 01:00:47 2025 GMT
            Not After : Aug  9 01:00:47 2025 GMT
        Subject: CN=cc4f6931-6f49-49ed-8c2d-f08e1506df0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:48:c0:19:50:1d:11:f9:a8:a5:80:df:33:67:
                    7e:83:3e:b6:b0:b0:15:20:3d:25:95:ad:51:d2:b9:
                    4b:43:c3:dc:dc:a5:be:d9:f4:6a:03:63:5f:6a:3b:
                    3c:b9:cf:b5:0d:d2:07:cc:a0:3e:5a:8b:1e:5c:b3:
                    be:fe:61:b0:71:f4:c3:09:28:c3:1b:b8:88:43:42:
                    e3:5f:a6:c3:85:6c:15:cd:e4:6d:92:ea:f4:77:06:
                    12:26:0c:c5:63:fb:09:24:70:41:0f:da:98:4d:ca:
                    bc:f1:fa:58:93:6a:e6:f5:5e:4c:d9:5f:a2:f4:b2:
                    73:22:ca:67:db:30:61:45:7e:22:9a:0a:60:19:23:
                    50:ab:ea:46:ec:0f:8e:20:f1:93:7a:ef:96:f9:1c:
                    72:9b:c6:3e:a0:28:06:4c:81:48:02:0c:ec:d8:2e:
                    db:4d:33:ac:c4:58:66:54:77:22:b2:2d:33:31:27:
                    0a:0e:6a:c8:15:4a:cc:2c:76:a8:55:0b:e4:37:75:
                    94:c4:95:15:ed:56:80:30:5b:7c:13:66:e4:67:bc:
                    c0:6b:bd:7a:4f:8b:37:7b:cc:63:68:c4:f0:b2:fe:
                    20:16:2b:3e:63:a7:be:54:b3:c3:67:df:51:f4:6c:
                    0b:c5:69:d2:61:3a:2f:b8:f5:15:87:fc:5f:19:ec:
                    17:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:32:4C:B1:FF:EA:E4:CC:1C:A2:B9:9F:D5:9F:4C:11:57:71:B1:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/12dd9a86-0b05-3378-9cd4-49b71d5b0331.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:16:44:88:cc:c8:63:c0:bd:19:9a:4b:5d:b6:51:01:04:96:
         83:81:0d:9c:da:0a:cd:b4:00:6e:e0:79:c7:d9:e2:28:90:e8:
         db:ee:61:5f:5b:39:35:54:4c:87:f2:c9:4c:ea:3b:df:b6:54:
         98:24:93:b9:8f:42:5c:10:75:b2:28:ba:e3:ab:c0:4b:04:b5:
         e2:78:22:14:99:3b:49:a3:2d:6e:98:c2:6b:9c:4a:6b:ec:b3:
         e2:ff:8e:6d:f9:20:da:07:0a:54:f3:27:d3:bc:cb:8b:4c:76:
         27:98:fa:3e:d0:84:c9:89:a3:e2:aa:70:78:89:79:7f:de:58:
         4b:92:8c:a0:40:ff:43:07:8a:6d:77:5d:b6:f3:79:55:d4:c7:
         60:c4:bf:86:6d:7e:25:40:b2:00:db:49:a9:45:f1:f7:f2:0e:
         e9:2e:d8:78:24:b6:43:fd:aa:de:99:ed:5f:51:af:c7:0f:a2:
         12:52:b9:a7:e6:11:3d:84:68:38:74:1c:1a:12:f7:71:3b:dc:
         10:17:6b:09:0f:d6:31:1b:d7:95:89:bd:16:90:e2:5c:05:5a:
         53:ef:f8:bf:c1:8b:7a:f5:07:d9:d6:3f:b8:fe:31:be:ea:d7:
         56:24:8d:9d:e8:f9:6c:c7:3b:48:aa:4e:dd:50:83:75:29:6c:
         01:cd:11:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:27:29 2025 by rpki-client