Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3b5c668b-9a5d-3c4c-8441-d45066355601.roa
File:                     3b5c668b-9a5d-3c4c-8441-d45066355601.roa (raw, json)
Hash identifier:          KYzIWLp5Ww5M42FUr9k9DZffT67IjxRImheap6KTHoQ=
Subject key identifier:   FD:C3:BB:6E:69:D6:53:A5:60:7C:51:75:59:43:1F:92:0B:CA:F7:98
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AD23C3D40AFDEB1C6B11F0A60
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3b5c668b-9a5d-3c4c-8441-d45066355601.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     44477
IP address blocks:        45.39.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:3d:40:af:de:b1:c6:b1:1f:0a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=52a3201f-64df-4bd9-a2c0-5ac97d707dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:12:c1:47:4d:4f:b6:b1:e0:38:17:1d:cc:20:
                    c9:2e:fb:9f:b9:d6:df:9e:3c:9b:f2:5d:47:ab:15:
                    e1:f7:9d:e8:5e:b8:da:bb:0f:f0:c0:f5:2c:03:fe:
                    2b:0b:f4:ad:50:fa:e2:ac:b9:61:0f:32:04:a4:f5:
                    91:ed:fc:0b:0e:83:94:8b:28:ba:e7:50:bc:7a:bb:
                    bd:3b:b6:29:60:e1:bd:a8:9e:b8:27:63:31:81:e5:
                    17:05:e4:49:f6:22:e9:67:3f:71:b9:05:df:af:dc:
                    92:68:12:06:12:1f:92:69:be:5d:1e:b9:3d:35:44:
                    5e:b1:c3:6c:12:1f:a7:f8:ac:e5:99:9d:da:d5:30:
                    5d:c0:ed:df:ee:8a:47:50:25:ee:99:29:47:a8:d3:
                    58:3a:58:75:f7:18:e3:ab:1b:1f:0e:27:9e:14:47:
                    a3:00:80:83:37:5f:be:f0:dd:88:17:46:b5:22:22:
                    89:12:9d:bf:bc:f2:14:d7:3e:18:07:48:70:ad:84:
                    56:3e:67:4d:b8:48:4a:38:ca:21:ef:20:37:63:69:
                    a2:09:ff:92:86:ec:16:bb:18:5f:84:e2:9e:8d:9b:
                    38:d2:79:39:0f:05:7b:72:f7:27:77:69:6f:f2:df:
                    f7:46:9b:0f:3b:9b:f4:ea:fb:ab:02:3b:40:cf:6d:
                    2d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C3:BB:6E:69:D6:53:A5:60:7C:51:75:59:43:1F:92:0B:CA:F7:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3b5c668b-9a5d-3c4c-8441-d45066355601.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:ac:c9:fa:6e:47:13:9f:18:8f:61:c8:9a:f3:d3:b7:d0:d8:
         c6:10:be:58:7d:17:32:12:c6:6b:cf:5a:d4:50:d4:da:18:ae:
         6f:fc:a0:e7:0c:5c:f0:fa:16:a6:99:a5:49:ac:40:02:26:49:
         c5:3b:6e:7f:42:4d:25:5e:79:41:9b:67:7c:66:b1:e3:e6:cf:
         8e:7b:46:67:33:a9:f7:7f:48:69:41:ab:67:78:3d:80:96:8a:
         63:2b:5e:29:63:0f:b0:d5:64:a8:b7:e1:b9:b2:c8:f8:07:13:
         25:53:eb:e5:9c:7d:70:bc:e8:5e:d0:28:b7:35:f0:9a:a2:57:
         e2:40:bc:fd:3e:fd:8c:36:2f:ac:fb:7d:8b:fb:4b:6d:61:8f:
         bd:3f:68:71:a6:bf:8d:02:99:81:76:ad:2b:a2:81:bd:1d:a1:
         f6:cf:ea:39:f2:fa:20:8f:e8:2f:4a:e4:6b:e6:0a:3d:c7:d9:
         d2:19:13:6c:65:7b:da:0f:2e:1d:3f:16:7b:1f:28:1c:4a:90:
         a4:12:b1:67:68:c1:69:be:63:c3:62:ed:0b:03:3f:ef:16:9e:
         85:6b:16:78:81:21:d0:37:ff:06:fe:22:41:f7:e3:81:63:26:
         f5:2b:41:74:fe:1c:53:1d:a6:da:68:38:1c:6f:2d:12:b8:ac:
         61:c3:e1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:19:06 2025 by rpki-client