Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/13ba02db-9636-3791-a2a4-e7ea32f032aa.roa
File:                     13ba02db-9636-3791-a2a4-e7ea32f032aa.roa (raw, json)
Hash identifier:          5vNJhKaLSt1THc6HFbu3tNsb7K/fwDO/9ydJUYGVqFo=
Subject key identifier:   3E:C9:F4:0B:1D:18:F4:94:91:C4:FF:DB:7C:FE:29:3D:86:79:84:26
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AEE269306AE4D293CBEB4CB80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/13ba02db-9636-3791-a2a4-e7ea32f032aa.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     212238
IP address blocks:        45.39.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:93:06:ae:4d:29:3c:be:b4:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=8e794ea7-ceb6-4790-a1f8-aaee6f8a646b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:dc:b2:64:b0:cb:8d:c1:1b:79:df:93:c1:7c:
                    9b:7b:d8:46:e3:3a:fa:a5:b9:79:8a:e7:f6:d3:e0:
                    32:13:bc:69:7d:57:3d:51:11:8b:fc:74:fb:ba:b3:
                    5b:1f:d9:7c:83:16:ba:31:33:38:18:87:cb:b8:13:
                    9d:a0:e2:7b:a8:7b:f8:a2:0b:5e:8f:d1:80:80:b8:
                    19:5e:c0:53:c2:e6:02:cb:8a:0f:96:99:d6:97:70:
                    72:8d:95:ff:0a:ee:d2:15:1f:d2:05:e9:12:fc:4b:
                    9b:37:dd:8a:45:fc:c9:60:8b:78:39:e8:ba:60:85:
                    ee:52:85:de:fb:db:a0:f4:a5:7d:d6:ae:5b:9b:d8:
                    65:c3:98:f5:a6:ea:3c:e8:a0:63:ab:89:a5:5c:89:
                    02:b2:15:4b:07:cb:68:5c:f5:a3:c8:9e:7a:4b:7b:
                    92:a7:b0:77:d7:cf:40:b2:19:1f:32:b3:98:f4:56:
                    8a:4a:96:ce:7a:8a:7b:c3:5b:0d:8b:dd:40:1f:3d:
                    ca:f1:39:ff:d3:d9:79:2a:83:aa:8a:74:7d:fd:bc:
                    2f:6a:f2:f1:e6:40:3e:67:fa:81:14:63:cc:86:cf:
                    fe:0a:d2:22:c6:59:ae:09:b9:5d:2c:0f:79:2e:ed:
                    72:57:e8:ca:bd:71:1c:dc:68:b7:3a:ab:0d:06:1f:
                    b0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C9:F4:0B:1D:18:F4:94:91:C4:FF:DB:7C:FE:29:3D:86:79:84:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/13ba02db-9636-3791-a2a4-e7ea32f032aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:d7:ec:b0:68:c3:2b:25:db:87:4d:cb:b3:9f:0e:0c:0f:3c:
         e8:24:21:27:58:b0:a4:cf:07:c0:4e:ba:ee:24:51:3b:a2:d9:
         5a:12:cd:17:fa:28:f1:fa:2a:ca:94:4b:b9:2e:d7:84:e2:cd:
         b1:16:45:41:a2:4c:ad:57:5f:92:96:00:fe:48:a2:d3:28:eb:
         dc:0f:aa:a2:b8:67:41:38:34:ad:d9:c0:4f:38:3d:85:4e:29:
         c2:ac:5a:4c:2b:13:12:4c:6a:f9:ad:57:a4:47:e8:83:b6:11:
         b0:4d:b5:5a:8c:be:ea:6a:ea:5f:b0:67:b7:c4:33:97:b8:ff:
         3c:ec:33:d5:2d:10:0e:4b:b0:44:ac:e2:da:51:c1:71:b0:d2:
         4c:27:d9:f0:68:8c:3b:4a:d9:f0:cd:d7:f6:29:e3:dc:21:89:
         df:5e:65:9f:19:06:19:69:23:b1:95:41:d6:b1:a5:59:f2:3f:
         40:05:98:b8:6d:7b:d6:1d:73:b7:de:45:49:43:93:2b:8d:3e:
         8b:39:f1:93:ca:85:9f:9f:48:75:6d:5b:0e:a1:22:57:eb:19:
         9c:35:c6:48:80:6e:95:85:3b:6f:58:d5:5b:d1:c6:4e:4b:ca:
         f8:dd:65:da:dc:2e:e5:c0:c9:d2:8c:06:fa:f4:1a:39:58:e2:
         82:74:f6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:51:43 2025 by rpki-client