Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/471a721d-2b05-3cad-a38f-50fdacd58077.roa
File:                     471a721d-2b05-3cad-a38f-50fdacd58077.roa (raw, json)
Hash identifier:          MuH+lJWaph4feEiLcwxJJj4MH0LYI387W1Hp2dBmYcE=
Subject key identifier:   04:1E:51:7D:1D:4D:FB:79:2D:0C:5B:D3:B0:4E:99:8E:62:3A:09:A5
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A29556F7DB96D6E87B0E663E0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/471a721d-2b05-3cad-a38f-50fdacd58077.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     62160
IP address blocks:        45.38.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:6f:7d:b9:6d:6e:87:b0:e6:63:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=4981e269-6d70-4cd4-b2e7-f4ea89354239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:14:26:f7:51:8c:ba:9d:76:cb:90:a2:18:d1:
                    92:0c:64:05:bf:15:3a:01:80:c1:d3:a9:7d:d5:60:
                    1a:63:60:2b:40:6e:f9:0f:c9:01:e9:2f:08:18:1d:
                    ee:66:c4:64:ba:80:9b:11:5a:e9:2f:d8:bd:e6:77:
                    a5:63:c5:81:c7:f3:20:f2:52:8a:c5:f2:b7:e3:dc:
                    92:25:93:4d:fa:30:39:19:fd:f5:a6:d8:02:36:cc:
                    36:11:00:d3:6e:24:41:b1:49:7a:3f:6d:9a:13:57:
                    13:f5:3d:42:04:0f:b2:d2:e6:01:77:1c:43:eb:a8:
                    6c:76:49:cc:75:f1:a2:f3:41:9b:61:6d:3f:c2:bb:
                    a4:0a:ca:9f:d6:e5:e0:68:24:56:52:12:d1:f5:3b:
                    4b:23:b9:60:75:91:dc:e7:e2:15:d2:6a:ad:34:c3:
                    27:4d:2c:41:19:89:ab:31:88:bd:78:62:f8:c0:04:
                    13:e7:04:b5:60:7e:80:08:f2:1e:9e:5e:96:3a:60:
                    b1:72:0e:fe:d0:a8:96:5f:c0:64:ea:30:d8:69:bf:
                    5e:0f:cc:5b:c9:30:9d:98:49:18:64:83:ce:8a:ad:
                    1f:92:47:a9:d7:de:98:a5:8a:28:47:5d:a4:ff:fe:
                    fa:fd:d9:92:f5:f9:60:3e:98:f0:69:9f:8d:e5:08:
                    9d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1E:51:7D:1D:4D:FB:79:2D:0C:5B:D3:B0:4E:99:8E:62:3A:09:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/471a721d-2b05-3cad-a38f-50fdacd58077.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:28:51:5b:d3:2f:a0:43:71:88:dd:0c:17:8c:b1:2a:6c:34:
         5f:39:cf:25:11:c4:80:b2:be:5f:5b:35:f7:72:63:7a:b3:04:
         d6:e8:7d:34:2c:d5:ed:f6:06:ae:77:2e:e9:95:f4:be:2e:9e:
         f9:e5:a8:42:de:35:ab:83:56:79:34:84:d5:bc:d8:d3:45:40:
         ef:97:1e:d8:96:a8:e5:36:1c:ce:e3:d2:e7:02:62:39:04:be:
         4f:b2:4c:20:35:b5:60:d0:6f:4e:ce:db:3c:ec:03:94:6e:aa:
         50:84:40:2c:8d:ea:e5:36:fc:42:37:8c:11:c5:14:41:d8:f9:
         62:f2:27:25:1d:20:72:58:09:a7:b9:2d:a6:29:46:2a:2a:7b:
         6e:5d:43:f4:c8:d5:81:ad:bd:98:4c:6c:56:47:ec:fb:0f:46:
         bf:da:1d:6c:47:4a:ac:33:2d:86:ae:ce:45:7f:a1:03:56:6a:
         9d:2f:b0:8b:a8:05:92:f6:d1:b1:90:e0:00:f8:3c:1d:62:52:
         7e:bf:32:44:55:58:38:1d:87:b2:99:08:7c:ef:79:5f:be:2d:
         0d:ad:82:5d:85:02:6e:ce:4a:e7:2f:e7:5e:c8:e1:8f:a8:1d:
         95:b6:c0:9a:65:74:5a:29:e7:67:0c:58:74:59:3e:26:e0:9a:
         fb:f0:bb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:33:01 2025 by rpki-client