Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/39a0986d-4b21-36f2-bf8a-135295dd4dcd.roa
File:                     39a0986d-4b21-36f2-bf8a-135295dd4dcd.roa (raw, json)
Hash identifier:          goCQCmyQwO4QLKkEMRbRTQdm19iNNXojZkYeSBy7dIE=
Subject key identifier:   C8:FC:77:BA:94:F8:02:4C:D1:B7:E6:BB:CA:2A:EA:43:A7:32:D8:6E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AE0311F9B149C7D14F2734720
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/39a0986d-4b21-36f2-bf8a-135295dd4dcd.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     40676
IP address blocks:        45.38.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:1f:9b:14:9c:7d:14:f2:73:47:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=ed0133a7-f16b-462b-84d3-6bca826094b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f4:48:08:0c:8f:70:2c:d2:df:b7:50:28:29:
                    ed:7c:23:0d:8d:17:89:da:14:b1:b8:03:f0:55:11:
                    b5:c4:f9:31:0b:2b:ac:ac:76:7a:a4:87:b2:a9:6a:
                    97:6e:e1:de:39:93:03:d8:6b:69:a9:7a:ec:49:62:
                    b5:b7:b9:89:32:2b:bb:d7:9f:68:6f:2d:f1:6e:4b:
                    22:e8:4a:c4:0b:f6:4b:72:71:ff:71:6b:bb:6a:f5:
                    aa:2a:4b:d0:f5:86:a5:c4:b9:c8:3c:db:b8:f9:62:
                    cf:12:98:62:7e:97:7a:73:00:8f:b3:b5:26:23:c5:
                    0a:44:4c:32:2c:b3:00:1f:4f:06:a7:6f:40:b5:3c:
                    3d:62:64:95:86:a9:1c:c7:ad:6b:30:9f:49:b9:db:
                    69:09:ae:13:a5:bc:10:5d:98:27:e0:8d:25:47:f0:
                    e7:c7:c3:9d:ed:40:84:17:32:36:13:15:47:ac:b5:
                    dd:d0:3b:06:27:03:ef:4f:b7:ec:3d:9a:66:df:a1:
                    fc:4e:33:e5:2f:1b:68:78:a1:5d:9f:47:06:8d:18:
                    16:b7:9d:ad:51:f1:f2:c1:b2:8e:85:66:27:d0:82:
                    57:7b:77:25:38:ba:df:ef:b7:f8:ac:d6:7b:eb:3c:
                    46:0d:25:ef:fd:65:6d:fc:6b:56:ef:e2:ee:33:d8:
                    e8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:FC:77:BA:94:F8:02:4C:D1:B7:E6:BB:CA:2A:EA:43:A7:32:D8:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/39a0986d-4b21-36f2-bf8a-135295dd4dcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:21:91:07:f2:b3:6d:3b:a6:a4:33:c1:93:21:28:b9:1a:66:
         91:40:84:7b:ca:fa:97:0e:61:4d:3b:5a:c4:b4:c7:3f:d0:be:
         89:f7:dc:ae:9d:7f:ad:7a:37:d7:36:9a:36:d1:3e:20:0a:65:
         64:f7:38:92:51:06:8a:48:f7:27:e5:30:59:ca:fd:c1:9a:08:
         33:89:23:f0:95:08:84:ef:03:30:af:28:2c:73:3e:48:60:7f:
         28:ec:d3:6b:a4:37:98:91:8c:be:2c:84:14:d0:f9:02:c1:e2:
         db:29:72:fd:78:7e:a2:b7:1a:b4:31:c9:8b:e0:0a:0b:c4:2a:
         12:54:1d:61:db:10:9a:3b:80:b0:57:d6:95:c0:c9:4b:19:d5:
         59:17:d3:79:3d:fa:00:78:e4:21:dd:d6:05:8e:56:41:49:82:
         5d:e5:7d:96:5a:10:27:d9:e8:8d:6c:64:38:71:54:45:96:01:
         c2:de:00:93:fc:23:60:08:68:30:e6:d6:e5:94:e8:8f:1d:dd:
         c8:f2:97:18:72:ee:ac:f1:20:35:78:af:ee:c2:c5:eb:1f:19:
         73:b3:92:76:66:e1:3c:31:ba:b3:d9:03:1b:0c:16:f9:31:c3:
         9b:3a:84:28:9b:50:ea:f8:df:13:01:7c:0e:60:47:f0:24:8f:
         df:3b:e1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:32:29 2025 by rpki-client