Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/490e6417-2eaf-397c-b8a3-0285d9419607.roa
File:                     490e6417-2eaf-397c-b8a3-0285d9419607.roa (raw, json)
Hash identifier:          joYN6hnbSJ6DG+nfmaJ/lSn3FZlisCd18vRbRojUUL0=
Subject key identifier:   3B:98:7A:1D:4D:C2:36:81:0A:90:05:61:8A:42:2C:5A:53:F3:F2:14
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849CFFF72804F8809DBAB941FC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/490e6417-2eaf-397c-b8a3-0285d9419607.roa
Signing time:             Sun 11 May 2025 01:00:47 +0000
ROA not before:           Sun 11 May 2025 01:00:47 +0000
ROA not after:            Sat 09 Aug 2025 01:00:47 +0000
asID:                     18779
IP address blocks:        45.39.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cf:ff:72:80:4f:88:09:db:ab:94:1f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 11 01:00:47 2025 GMT
            Not After : Aug  9 01:00:47 2025 GMT
        Subject: CN=53dfd095-5916-4a89-b54a-f0e4303eb5cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:05:b0:a3:86:22:b5:67:02:7a:35:b3:25:25:
                    81:bb:33:f5:69:22:94:0f:9a:ce:9b:ae:87:b8:25:
                    6a:82:b0:47:f0:ab:3b:e8:91:52:63:17:8c:8d:9e:
                    64:b3:8e:8c:cd:2a:cd:1a:26:78:02:5c:d5:d0:13:
                    46:8e:de:a5:d0:1f:57:0f:b4:99:e0:17:78:a1:39:
                    ba:a2:cc:bb:ed:86:51:f9:c2:5e:aa:b3:bc:47:88:
                    22:94:60:c2:5e:84:f7:05:8d:8f:7e:42:a9:a6:5d:
                    43:7a:5d:67:e3:5b:05:c1:b9:b7:df:7f:19:bd:74:
                    0c:49:af:97:30:2d:3f:31:17:f2:0d:51:e0:50:71:
                    1e:da:65:15:db:71:48:18:e9:63:b8:71:c3:4b:19:
                    19:a0:f7:85:59:79:9c:d5:84:5b:5f:d0:eb:18:24:
                    cb:36:6b:c2:a2:fb:92:f7:94:cb:ca:78:46:8c:e0:
                    dc:c5:9d:04:c3:17:e0:8c:b8:c5:ae:eb:af:08:66:
                    38:b7:6e:43:0c:ea:f4:be:62:41:c6:4e:40:5a:d0:
                    63:cb:f7:dd:5b:db:fd:55:04:36:34:47:ff:6a:f0:
                    05:34:97:a4:76:a7:44:78:3e:3c:ef:aa:ca:e0:42:
                    e5:51:be:d1:47:2c:1a:d1:1b:a7:ee:48:42:a2:21:
                    3b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:98:7A:1D:4D:C2:36:81:0A:90:05:61:8A:42:2C:5A:53:F3:F2:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/490e6417-2eaf-397c-b8a3-0285d9419607.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:5e:fa:d6:3a:01:0d:86:c3:3e:cb:77:2b:b5:ae:7d:0f:1d:
         04:3c:f3:04:d2:6d:30:e3:da:94:49:7f:7d:58:9f:42:46:50:
         bb:ca:b4:71:c0:96:31:5a:bd:34:74:22:c8:2f:dd:ab:90:af:
         59:fd:c1:02:6f:34:5e:6a:05:d4:57:5e:72:a6:c8:df:e3:57:
         4c:8e:bf:a8:f5:0f:7d:06:9c:93:2c:91:09:a8:b4:32:c8:69:
         89:db:f6:30:dc:97:01:a8:0e:25:7d:ec:e7:77:d7:10:3a:10:
         ee:1f:df:51:b2:bc:f2:cf:3d:e7:db:50:cb:99:3d:2d:47:1e:
         f6:e5:17:6a:ed:21:0d:12:97:90:41:42:32:ee:46:61:41:e2:
         1d:fa:aa:73:1f:60:39:e3:ee:cc:d3:15:08:0e:4f:7c:7b:51:
         d4:0f:33:5b:12:23:bc:85:57:2e:44:10:db:f3:0e:6a:22:fb:
         8b:50:4e:2b:17:8f:c3:68:7b:69:4a:de:cd:69:ca:00:2b:c3:
         6b:af:35:2b:2a:17:c7:2b:88:e2:2e:79:06:ab:b9:08:a4:97:
         99:60:ba:60:c7:9f:06:67:b1:8f:29:05:fb:39:a2:4d:0c:b0:
         41:7c:24:1d:06:9c:e7:0a:14:25:7f:a3:9f:79:df:5d:ba:7c:
         1c:9f:06:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:02:58 2025 by rpki-client