Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2dea858b-b53e-3ca7-92af-d9974acd3c09.roa
File:                     2dea858b-b53e-3ca7-92af-d9974acd3c09.roa (raw, json)
Hash identifier:          8HwxPCrYQqi3Bw3HWHaQdBelLWSUwFZewdNWWenNKlY=
Subject key identifier:   6F:12:98:98:34:E5:B8:CF:39:E7:9D:D8:FF:2E:B2:14:21:59:BB:BF
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849B149FBACBCC31C5B28165100
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2dea858b-b53e-3ca7-92af-d9974acd3c09.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     44477
IP address blocks:        45.38.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:49:fb:ac:bc:c3:1c:5b:28:16:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=6cb3a48b-8e6a-4b78-8bb8-21aa48fae3c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c0:94:90:5f:97:ce:87:73:25:05:a1:12:0e:
                    a7:9a:44:90:a4:da:5b:81:b7:45:0f:ec:e5:47:55:
                    eb:3c:c1:8e:ec:0e:df:23:de:4a:6f:38:8b:e6:e6:
                    13:2a:09:ce:a9:2a:17:12:54:11:ac:cd:58:07:cd:
                    fa:85:5d:18:71:eb:ac:5a:a0:dc:37:d8:ea:0d:a7:
                    b8:6e:a0:82:fe:c8:93:5c:13:61:29:a3:ea:00:2b:
                    99:f9:2d:3b:6c:1a:ba:0d:b7:99:25:20:56:6c:a4:
                    b0:ae:ee:9c:31:8a:24:a2:d0:33:71:ea:84:2d:2b:
                    1a:37:ff:95:3e:e6:f5:b1:1a:99:d5:29:2e:b7:61:
                    55:1d:8c:f6:41:90:ea:5f:52:f2:c5:1a:69:1b:0f:
                    41:f6:75:05:dc:06:95:a6:19:83:1e:dd:15:b3:68:
                    e6:d5:5d:5f:a8:36:59:43:89:dd:db:a7:b6:4a:e9:
                    c1:4a:ae:85:9d:07:6f:1b:4c:34:58:0e:b2:7e:e9:
                    5f:e4:d0:1b:02:e0:74:fd:f3:3c:44:74:71:43:88:
                    0b:b2:0f:68:4a:3f:1a:4d:74:f3:22:97:4b:62:b0:
                    4b:58:52:6a:ff:05:fc:44:4e:7a:38:f6:75:27:83:
                    4a:2f:a8:9d:ae:5b:e6:d6:85:f7:43:f4:eb:69:fa:
                    9d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:12:98:98:34:E5:B8:CF:39:E7:9D:D8:FF:2E:B2:14:21:59:BB:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2dea858b-b53e-3ca7-92af-d9974acd3c09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:bd:44:68:0a:a0:cc:40:02:42:07:22:11:9c:24:63:bc:55:
         cd:a9:18:b9:41:a4:2f:e8:b4:00:e2:64:d2:e0:b0:f2:91:f9:
         bd:72:64:c7:07:d5:fc:dd:2b:d3:64:22:0d:00:10:c4:0f:16:
         e0:80:55:de:a8:9e:1b:0a:27:bb:39:5f:8b:96:55:7e:cf:21:
         6b:5e:36:9b:c5:55:ce:e4:30:84:ed:45:ac:d3:99:49:a1:3e:
         c3:3e:ec:88:83:ca:75:e7:35:5a:98:02:f1:0a:1d:05:69:5d:
         ab:42:08:13:6f:e4:bf:aa:4d:53:cd:26:a3:66:4f:6d:ce:29:
         70:5e:54:3f:71:5a:a0:9b:37:f2:56:6a:38:2a:82:f2:de:31:
         01:98:5b:a1:e8:1d:02:5c:51:26:d8:1e:6d:dd:e8:b3:0a:30:
         75:f2:22:d8:41:d7:2a:47:25:3d:f6:f8:b0:79:3b:85:39:f1:
         bb:45:0d:45:55:12:6a:8d:c1:8c:25:c4:0f:24:3e:f7:94:66:
         dc:ab:bc:c1:dc:6d:df:d7:37:42:01:46:58:6f:19:39:51:2f:
         11:1c:c3:e4:41:02:64:0d:00:9d:66:1d:38:62:1f:2f:47:e6:
         3f:c2:1b:97:be:cc:17:d4:07:ed:35:21:8b:f4:e9:4e:12:da:
         29:3e:ec:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSfusvMMcWygWUQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk
NmNiM2E0OGItOGU2YS00Yjc4LThiYjgtMjFhYTQ4ZmFlM2M4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcCUkF+XzodzJQWhEg6nmkSQpNpbgbdFD+zl
R1XrPMGO7A7fI95KbziL5uYTKgnOqSoXElQRrM1YB836hV0YceusWqDcN9jqDae4
bqCC/siTXBNhKaPqACuZ+S07bBq6DbeZJSBWbKSwru6cMYokotAzceqELSsaN/+V
Pub1sRqZ1Skut2FVHYz2QZDqX1LyxRppGw9B9nUF3AaVphmDHt0Vs2jm1V1fqDZZ
Q4nd26e2SunBSq6FnQdvG0w0WA6yfulf5NAbAuB0/fM8RHRxQ4gLsg9oSj8aTXTz
IpdLYrBLWFJq/wX8RE56OPZ1J4NKL6idrlvm1oX3Q/Trafqd9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG8SmJg05bjPOeed2P8ushQhWbu/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMmRlYTg1OGItYjUzZS0z
Y2E3LTkyYWYtZDk5NzRhY2QzYzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSajMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABG9RGgKoMxAAkIHIhGcJGO8Vc2pGLlBpC/otADiZNLgsPKR+b1yZMcH
1fzdK9NkIg0AEMQPFuCAVd6onhsKJ7s5X4uWVX7PIWteNpvFVc7kMITtRazTmUmh
PsM+7IiDynXnNVqYAvEKHQVpXatCCBNv5L+qTVPNJqNmT23OKXBeVD9xWqCbN/JW
ajgqgvLeMQGYW6HoHQJcUSbYHm3d6LMKMHXyIthB1ypHJT32+LB5O4U58btFDUVV
EmqNwYwlxA8kPveUZtyrvMHcbd/XN0IBRlhvGTlRLxEcw+RBAmQNAJ1mHThiHy9H
5j/CG5e+zBfUB+01IYv06U4S2ik+7NI=
-----END CERTIFICATE-----
Generated at Sat May 10 04:48:26 2025 by rpki-client