Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2eb9fa42-9093-39d6-91a9-1e3d61348b1f.roa
File:                     2eb9fa42-9093-39d6-91a9-1e3d61348b1f.roa (raw, json)
Hash identifier:          AuMAkfYw4spnR+5T4PA2LJU/zXfdu4Scf/CzD1QGR84=
Subject key identifier:   79:F8:0C:34:2F:4D:54:C9:44:BA:2C:1C:75:7A:F2:DB:C1:36:24:67
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B917774425BBE87C898075BC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2eb9fa42-9093-39d6-91a9-1e3d61348b1f.roa
Signing time:             Sun 19 Oct 2025 01:00:30 +0000
ROA not before:           Sun 19 Oct 2025 01:00:30 +0000
ROA not after:            Sat 17 Jan 2026 02:00:30 +0000
asID:                     18779
IP address blocks:        45.38.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:91:77:74:42:5b:be:87:c8:98:07:5b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 19 01:00:30 2025 GMT
            Not After : Jan 17 02:00:30 2026 GMT
        Subject: CN=d2d2e5ba-f593-48f5-a9c3-d464c7a2ce5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:93:59:3d:14:5b:61:88:6d:07:46:21:a9:63:
                    cd:90:8f:e4:2b:0c:4a:a7:91:b4:5f:98:1b:e1:79:
                    8e:a3:82:6e:d0:63:f8:1c:55:fb:88:bd:4f:35:78:
                    e4:8a:80:b4:17:f8:12:e1:d8:6a:3a:ca:43:62:67:
                    14:0e:d8:cf:ab:49:df:29:0b:f9:94:5c:d2:b2:9f:
                    e5:92:09:6d:b5:f2:09:99:9f:dd:23:ad:1b:97:2b:
                    17:c3:38:ba:26:b7:22:08:9b:1f:ca:99:da:b0:cd:
                    87:76:a2:86:ec:1e:90:ec:47:1c:6e:44:d8:e0:b1:
                    65:0d:b7:40:f4:53:41:63:be:2b:b6:a3:d2:e4:16:
                    0d:f6:73:d6:20:b9:8f:ca:c4:45:7e:8f:65:38:41:
                    24:9e:29:ca:23:1b:87:03:a3:c2:94:7d:02:5c:1c:
                    6f:5f:79:8f:76:9a:72:e5:a6:73:c9:35:79:0b:25:
                    bc:39:1e:fb:ab:79:36:47:1f:35:0b:7c:64:40:0a:
                    b1:30:6f:dd:1f:de:9d:bb:9d:2b:d3:52:a3:bd:f1:
                    b7:d9:59:9b:f9:76:1c:63:3e:2f:9f:cc:6d:96:dc:
                    3f:c9:b7:5a:80:8d:af:b6:8e:d9:44:a5:83:c4:a8:
                    bc:1d:ad:44:a8:c6:c0:35:69:1a:bc:c4:ea:ba:31:
                    2d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F8:0C:34:2F:4D:54:C9:44:BA:2C:1C:75:7A:F2:DB:C1:36:24:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2eb9fa42-9093-39d6-91a9-1e3d61348b1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:77:ac:2c:dc:ac:49:1e:8b:da:20:a9:40:a8:8c:96:77:f5:
         ca:cf:81:0e:28:ec:50:c1:0c:7e:7b:9d:cf:53:0f:bd:b9:23:
         9a:cf:fa:c7:31:ba:e7:51:fa:bc:9b:80:59:6c:fa:2c:31:08:
         7e:78:af:88:e0:d8:4d:4c:29:2e:91:b9:0a:16:87:78:82:4c:
         7a:1f:f3:5a:b7:81:5f:fe:9b:63:31:91:c8:12:c2:93:93:d9:
         e4:ae:ac:8c:c7:83:dc:82:01:e9:c8:69:b7:b1:ee:07:d3:62:
         c5:fc:13:7e:91:49:a6:2c:8f:f9:01:38:cd:86:61:1f:c2:4e:
         39:14:24:da:14:26:07:67:8b:7c:b5:4a:c3:81:20:9a:dc:b8:
         de:8e:27:62:e3:8d:64:ee:61:33:93:0d:b1:ba:ee:10:16:1f:
         f3:32:3d:25:1d:5b:5c:95:1f:7e:3c:25:65:51:44:da:b1:77:
         48:fd:64:11:38:56:2f:bf:c6:20:ba:6d:a2:cd:bb:9e:0b:7a:
         ac:4b:1c:c8:f8:e1:c6:ae:69:fa:62:4d:29:eb:8e:9f:78:c4:
         62:b6:e4:76:af:a0:9d:f9:98:1d:e5:69:0f:79:0a:73:88:c3:
         9d:69:f0:b0:3b:10:4d:d2:54:30:9b:40:ce:08:20:9f:26:b4:
         fd:47:2f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:47:52 2025 by rpki-client