Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/199a2585-b641-3344-9301-844948da2018.roa
File:                     199a2585-b641-3344-9301-844948da2018.roa (raw, json)
Hash identifier:          tKeHb7xiJB0j8Y25hpKV5B365mhLx/2ID13CvStST0w=
Subject key identifier:   6A:F1:B4:86:87:D1:97:4A:59:ED:84:87:EC:82:C0:C9:EE:60:91:75
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849C79F61F8019B6A690E2B4F00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/199a2585-b641-3344-9301-844948da2018.roa
Signing time:             Thu 08 May 2025 01:00:47 +0000
ROA not before:           Thu 08 May 2025 01:00:47 +0000
ROA not after:            Wed 06 Aug 2025 01:00:47 +0000
asID:                     400402
IP address blocks:        45.38.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c7:9f:61:f8:01:9b:6a:69:0e:2b:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May  8 01:00:47 2025 GMT
            Not After : Aug  6 01:00:47 2025 GMT
        Subject: CN=a5e1487b-03e8-46a8-85af-75e3e23a1290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:53:42:03:76:9b:42:57:b7:39:25:e3:12:6e:
                    08:c8:7c:75:9b:9d:d2:f8:74:bf:6e:c0:ae:a4:1b:
                    b8:77:cb:ea:4d:0d:9b:2e:c0:14:f9:12:ce:f8:48:
                    b9:b4:1d:d8:c8:52:2c:f5:ef:00:a4:5a:a4:73:a1:
                    0a:60:f9:36:12:7f:32:f3:7c:c8:05:94:e4:4e:93:
                    6b:c5:8f:d2:da:09:54:62:6f:55:12:70:a3:69:3e:
                    a8:4b:6b:fe:de:ca:33:8d:20:5f:1e:cf:40:1e:18:
                    f9:bd:14:ea:87:99:2d:9b:32:e5:af:2c:01:ee:0e:
                    ec:70:91:80:7f:27:72:88:09:f1:03:e8:44:0c:65:
                    21:9f:4f:51:24:f4:ff:a6:8d:44:c0:65:da:89:aa:
                    43:48:d1:7f:14:e0:f6:91:63:a9:58:83:d1:05:25:
                    69:93:0d:27:30:36:91:b1:a9:0e:aa:00:e2:08:8a:
                    bf:6b:7b:88:2f:65:02:d9:f2:a5:a8:d3:ca:d0:8a:
                    b8:ef:08:55:bd:96:21:5e:87:f7:af:fe:f8:8a:06:
                    dc:86:e4:9b:7e:05:f1:34:72:0b:b9:a9:52:db:05:
                    43:bd:e2:1e:9d:7e:8f:58:e9:30:7b:ac:58:dc:e1:
                    f7:ff:57:f6:d9:1c:9b:7d:37:3e:d0:2d:77:50:ea:
                    b9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F1:B4:86:87:D1:97:4A:59:ED:84:87:EC:82:C0:C9:EE:60:91:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/199a2585-b641-3344-9301-844948da2018.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:c4:58:f2:fa:59:1a:e6:ee:d2:9f:4f:80:66:59:02:d8:30:
         55:b4:47:10:81:d3:12:bc:f5:a6:9a:69:5a:a2:a6:f7:35:c8:
         d5:b2:c3:c0:be:ff:5c:6f:dd:49:be:68:8c:9c:3d:da:4f:63:
         93:97:5e:ac:bd:a2:f7:72:37:bb:69:84:b1:e7:62:b7:34:eb:
         7d:c4:94:d7:f6:53:09:9c:64:06:c9:60:38:0e:d8:32:55:cf:
         a8:ad:8e:3e:98:08:cd:7a:f6:08:16:c3:3f:87:47:f8:5b:46:
         74:81:1a:a1:82:b1:4b:9e:7d:c7:3f:68:5f:22:10:84:ba:20:
         94:24:1b:55:08:57:04:37:ee:90:5a:1d:7e:81:5e:9f:31:16:
         3a:9e:d8:8d:b0:85:18:66:6e:cd:5d:29:61:27:fd:30:15:3a:
         3b:72:40:00:9d:12:14:b8:97:cc:d9:d8:88:be:09:e4:cc:a5:
         9b:c1:00:a4:ec:76:31:33:8c:79:23:22:94:ba:e1:74:48:2a:
         be:b7:1e:d6:01:4d:08:4d:d2:bc:fd:47:fe:86:37:a8:32:2a:
         40:de:7f:08:7a:1e:b3:db:f6:60:27:22:60:2d:e4:6a:2f:28:
         b9:a1:f2:e6:de:0b:19:22:14:8c:1b:d0:41:33:e0:0c:79:ad:
         40:29:c5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 04:52:02 2025 by rpki-client