Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/199a2585-b641-3344-9301-844948da2018.roa
File:                     199a2585-b641-3344-9301-844948da2018.roa (raw, json)
Hash identifier:          FdFw9euANrBPi5/82f8f+vWmCfaTUxPmCVA6S5+VfOE=
Subject key identifier:   98:4A:B1:47:FD:15:6B:2F:61:25:DB:5D:D5:8D:CF:60:7F:8F:27:69
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B87B21CFD055D7120F4BC0B80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/199a2585-b641-3344-9301-844948da2018.roa
Signing time:             Wed 15 Oct 2025 13:00:38 +0000
ROA not before:           Wed 15 Oct 2025 13:00:38 +0000
ROA not after:            Tue 13 Jan 2026 14:00:38 +0000
asID:                     400402
IP address blocks:        45.38.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:b2:1c:fd:05:5d:71:20:f4:bc:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 15 13:00:38 2025 GMT
            Not After : Jan 13 14:00:38 2026 GMT
        Subject: CN=de317df9-53f2-4f62-b160-ac8d2d445f4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9d:c3:48:de:18:c0:b6:49:a2:4a:bf:d9:40:
                    b0:99:eb:39:e5:90:c4:4b:13:eb:62:ab:a4:f0:e8:
                    5c:6c:7c:41:44:16:f9:92:ee:b2:a0:13:58:bc:ff:
                    51:2b:f8:04:69:3f:0a:19:ac:d2:b3:6f:12:22:dd:
                    dc:03:5f:92:62:9b:80:61:a0:1e:e1:88:9e:ee:13:
                    b7:00:33:65:08:9c:f1:7c:e2:7f:0a:9b:3c:46:4b:
                    0d:66:59:87:5a:1d:54:00:af:c2:a2:93:f2:51:f6:
                    2f:68:e9:08:2c:48:67:5e:89:7e:df:97:c8:48:b9:
                    84:57:6a:b2:39:07:38:d5:e8:1a:c8:ab:05:1b:20:
                    b7:cc:9c:ce:55:ff:b4:f9:d0:4e:d8:f0:15:2e:e2:
                    8c:05:cf:af:3c:ff:ea:ef:32:62:3b:c5:5b:d0:44:
                    db:c0:02:45:61:0e:ff:22:f4:ed:ad:6e:2c:18:0c:
                    35:45:12:ae:26:ab:8e:a0:10:e1:a8:af:13:27:8e:
                    90:07:79:6c:e6:58:7f:6a:01:bd:12:e0:81:d3:6c:
                    dd:08:ff:8f:da:d0:a3:26:0e:2f:1a:d0:72:2c:ec:
                    a9:58:f4:8e:26:c4:36:30:c0:73:77:29:58:b7:89:
                    00:a6:58:dc:fe:9e:63:da:5d:23:97:e9:94:9e:52:
                    74:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:4A:B1:47:FD:15:6B:2F:61:25:DB:5D:D5:8D:CF:60:7F:8F:27:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/199a2585-b641-3344-9301-844948da2018.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:24:0c:bd:d1:48:de:30:ee:a9:f5:19:d3:79:e0:df:85:92:
         aa:54:39:a2:40:cc:ea:41:73:77:f4:9a:75:69:cb:e1:fe:f2:
         61:1b:cc:ae:5e:b2:d5:d4:dd:dc:90:7b:d1:07:c6:af:62:ed:
         7f:87:d8:67:f0:64:6d:4d:9d:0d:8e:ee:85:cf:c1:4c:5c:04:
         aa:af:b2:33:67:8b:f7:e0:a8:9e:55:51:8a:ef:c1:56:92:50:
         fc:1e:96:79:3f:6b:2a:76:3f:9c:8f:b6:ec:a7:b5:95:04:a5:
         e9:3b:c8:87:41:af:9b:94:fe:ff:fa:fa:ea:68:32:f0:b2:10:
         a7:29:12:76:d4:b3:ee:bc:f3:ec:0e:2e:87:03:64:a8:59:79:
         c9:19:a4:2f:af:1f:f1:85:39:6f:e8:18:85:4b:b9:52:a2:6b:
         f5:ad:a2:36:c8:be:41:a4:64:8f:e4:64:dc:12:7e:8a:b5:8c:
         5c:32:9d:32:74:f4:a0:de:15:0c:02:0b:d3:d0:c1:13:a1:28:
         c8:12:ce:39:e7:3d:ef:46:b4:a1:0d:03:e9:27:a5:b1:46:44:
         dc:42:f6:1e:26:f0:2d:22:7f:ba:68:0b:ac:d5:2a:f9:4b:dd:
         ca:af:97:41:d5:ab:e4:7a:b2:64:d6:33:d4:63:00:3a:eb:ad:
         a6:78:42:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:43:53 2025 by rpki-client