Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/31dd7c9c-7291-328e-8c60-28ddd87d13f2.roa
File:                     31dd7c9c-7291-328e-8c60-28ddd87d13f2.roa (raw, json)
Hash identifier:          FJuDofX5KN9K8+o01R3Iyt/JL6XZ8zaCg3mVLjgKphw=
Subject key identifier:   09:F3:CE:6D:43:98:22:11:FB:19:21:F5:0D:18:2A:20:58:C9:17:BD
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AEE2692BD7FD630B4D0EE2E00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/31dd7c9c-7291-328e-8c60-28ddd87d13f2.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     212238
IP address blocks:        45.39.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:92:bd:7f:d6:30:b4:d0:ee:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=0ff6bda0-42a5-48cb-bd6f-814b0e1fe131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cf:ee:93:e8:63:3c:3f:72:ab:e5:63:17:13:
                    a0:0b:6c:0d:44:e9:b1:e6:df:38:bf:8f:d1:cc:cb:
                    79:14:62:76:39:27:18:5c:43:7f:da:36:a3:a6:f2:
                    3e:5e:41:7d:d4:33:a5:d6:d2:87:bb:f9:f7:26:c5:
                    39:0e:01:86:b4:46:b9:c7:ca:cb:fe:8f:d7:4b:3c:
                    cf:35:b3:d1:30:5d:e1:03:b7:ab:a9:e2:da:a3:80:
                    f6:36:32:ef:f9:51:1b:51:af:a2:bb:a3:18:14:cf:
                    03:40:c8:b7:00:3c:3d:58:e9:6c:35:64:2a:ba:c8:
                    86:78:06:e7:c7:4a:f2:26:3c:8c:4f:9b:1f:8e:c5:
                    80:22:c2:d5:23:10:2f:af:ca:a8:50:dd:15:c7:16:
                    2e:45:a2:0f:96:fe:8d:cf:35:8a:de:ed:d5:61:8b:
                    8c:f6:f9:01:df:58:00:1a:da:33:9d:33:46:ac:f0:
                    8a:53:50:95:b9:ff:ee:d9:56:36:4b:d8:f3:07:59:
                    ba:ed:db:55:35:b9:cd:f1:80:4b:40:76:90:b1:fb:
                    d2:74:19:07:23:46:cd:f6:a4:86:34:c7:82:bd:55:
                    5c:dd:51:a8:06:a9:11:35:e6:fc:68:45:75:bc:f9:
                    77:7a:de:99:0a:da:d3:fa:5b:6c:a9:55:b4:be:30:
                    bf:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F3:CE:6D:43:98:22:11:FB:19:21:F5:0D:18:2A:20:58:C9:17:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/31dd7c9c-7291-328e-8c60-28ddd87d13f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:7d:04:09:70:28:b9:98:ed:82:06:ac:4b:a9:5c:0a:0d:ca:
         84:d7:d8:e6:d6:82:e3:0e:78:b3:c4:5a:99:ef:31:bc:fb:5d:
         d4:e4:07:c8:dc:f6:7d:fa:b8:1b:47:90:96:7c:ca:c7:89:f1:
         b3:d8:f6:16:fb:a5:06:6b:4d:b5:3b:e4:79:5a:ce:eb:e7:97:
         c4:4d:42:0d:82:23:08:84:34:0a:55:5f:8a:63:c9:37:c9:37:
         70:cf:82:aa:ef:de:2a:31:52:f0:0b:76:a9:73:52:76:2a:e8:
         95:db:eb:5b:7b:9f:9d:96:b8:ca:1a:37:52:9c:82:0f:52:a5:
         0e:b1:5b:dc:48:bf:2a:72:e6:c8:d2:81:6e:98:df:f8:e8:f7:
         ea:83:21:37:94:f0:37:8b:5f:07:e8:8b:99:7d:0d:66:9d:0b:
         d4:83:21:2c:79:2e:37:84:63:03:66:b7:e1:07:53:81:69:6a:
         95:f9:de:05:46:b3:a0:0f:2f:f6:c1:28:91:88:40:12:6f:87:
         93:fe:d0:a2:cc:b6:c5:fe:1f:3b:78:6c:72:d9:b8:37:34:b3:
         95:83:88:44:e6:5c:af:94:e3:a8:b0:df:b2:c8:cd:78:3e:0c:
         85:09:93:1d:58:33:5b:98:47:55:5c:4a:43:09:24:9d:fd:aa:
         38:88:5a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:50:27 2025 by rpki-client