Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4bf59df8-1c54-33e8-8874-fb1ddfc9cfee.roa
File:                     4bf59df8-1c54-33e8-8874-fb1ddfc9cfee.roa (raw, json)
Hash identifier:          LXFgqIWFE8peIb86I49w7biD+M1VYFerJEO3yABXgv8=
Subject key identifier:   8B:FB:6A:10:A2:A2:D1:46:76:3B:8F:30:08:20:F4:62:BC:58:F3:9A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849B6DF55C412E644E43C8B0CC4
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4bf59df8-1c54-33e8-8874-fb1ddfc9cfee.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     204957
IP address blocks:        45.39.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:55:c4:12:e6:44:e4:3c:8b:0c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=8d35b762-5cd5-4176-8513-60b802d4b1c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2a:8a:82:c5:8b:26:8b:8b:3e:66:92:ae:15:
                    ef:02:43:6c:8c:d8:e3:60:eb:97:98:6c:cc:a4:43:
                    8e:9b:6f:39:b1:55:99:0d:e5:26:67:3c:97:95:7e:
                    b5:bb:c5:d5:fc:4b:b5:69:10:8e:f6:00:a4:10:53:
                    26:21:8d:3a:ce:a4:35:79:63:da:3e:38:60:75:d5:
                    4a:6c:cd:32:cf:3e:3f:84:68:7d:aa:01:6e:11:46:
                    6a:61:b7:f5:30:5b:f9:58:64:9a:3f:e6:2c:1e:96:
                    68:55:19:94:56:50:0f:de:74:e4:f7:c8:1b:4d:af:
                    63:30:a1:e6:75:a2:ae:1f:59:f0:46:25:79:21:ee:
                    e9:70:4d:cf:e1:ab:67:b7:11:d2:8d:3a:e4:ca:fe:
                    7a:65:bb:a0:c1:ae:74:be:b2:17:e1:9d:a8:33:c9:
                    19:d3:b9:35:6b:e9:05:41:32:fb:bd:7b:41:a5:4f:
                    ba:dc:89:ad:d8:42:c2:4c:39:f5:a4:98:82:e2:dc:
                    a7:54:00:f0:d0:15:fe:ff:1e:db:fd:82:34:82:03:
                    ba:44:bd:2f:eb:c3:37:59:f8:69:69:4d:5d:f5:a0:
                    be:3c:f5:f9:27:20:bf:fb:bb:d5:07:01:b5:77:52:
                    1b:c0:7a:50:cb:61:7a:3d:78:9b:a8:d7:ac:b8:6f:
                    7f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:FB:6A:10:A2:A2:D1:46:76:3B:8F:30:08:20:F4:62:BC:58:F3:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4bf59df8-1c54-33e8-8874-fb1ddfc9cfee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:4f:85:ec:ce:ce:98:d8:35:59:73:da:3c:26:8a:c5:5a:9f:
         3a:4b:f1:c0:fa:ca:4a:82:9c:dc:d1:c2:f7:bb:61:2f:f4:15:
         3d:57:a4:94:c8:ee:a0:89:ee:f6:67:79:eb:19:c4:8e:96:48:
         61:a0:47:b8:7f:1f:b1:e7:fa:6f:ce:cf:1d:f2:70:23:e4:f8:
         8e:c4:be:b9:8d:74:90:c2:cd:7f:09:4a:67:e5:80:0a:df:9f:
         3c:ee:27:6a:88:4e:d9:52:60:33:8c:c9:57:3d:3e:a5:97:de:
         ad:fa:b4:2b:ed:f0:87:8f:0d:00:c7:97:23:57:22:4c:1a:d5:
         5d:6c:18:27:c4:7a:b1:ac:35:cf:f7:ba:8f:c9:65:ed:d5:63:
         e8:50:cb:25:0c:a2:ff:7c:71:74:05:ea:01:bb:f7:25:72:dd:
         f5:b7:50:b5:38:e8:2a:f5:89:d9:7f:76:2a:81:59:f5:14:50:
         ac:29:c8:24:77:a5:a7:28:03:51:83:41:95:79:7c:2a:92:d4:
         d0:38:df:3a:df:4d:df:22:e4:d7:05:04:e0:48:c0:61:63:de:
         f6:24:f4:f5:3c:4c:2e:dd:86:13:b1:46:c7:d2:bb:93:86:15:
         41:e8:db:b5:bf:b3:f0:d9:87:57:c9:bb:08:4e:08:77:a2:58:
         39:8f:67:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm231XEEuZE5DyLDMQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk
OGQzNWI3NjItNWNkNS00MTc2LTg1MTMtNjBiODAyZDRiMWM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CqKgsWLJouLPmaSrhXvAkNsjNjjYOuXmGzM
pEOOm285sVWZDeUmZzyXlX61u8XV/Eu1aRCO9gCkEFMmIY06zqQ1eWPaPjhgddVK
bM0yzz4/hGh9qgFuEUZqYbf1MFv5WGSaP+YsHpZoVRmUVlAP3nTk98gbTa9jMKHm
daKuH1nwRiV5Ie7pcE3P4atntxHSjTrkyv56Zbugwa50vrIX4Z2oM8kZ07k1a+kF
QTL7vXtBpU+63Imt2ELCTDn1pJiC4tynVADw0BX+/x7b/YI0ggO6RL0v68M3Wfhp
aU1d9aC+PPX5JyC/+7vVBwG1d1IbwHpQy2F6PXibqNesuG9/fQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIv7ahCiotFGdjuPMAgg9GK8WPOaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNGJmNTlkZjgtMWM1NC0z
M2U4LTg4NzQtZmIxZGRmYzljZmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSf0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADxPhezOzpjYNVlz2jwmisVanzpL8cD6ykqCnNzRwve7YS/0FT1XpJTI
7qCJ7vZneesZxI6WSGGgR7h/H7Hn+m/Ozx3ycCPk+I7EvrmNdJDCzX8JSmflgArf
nzzuJ2qITtlSYDOMyVc9PqWX3q36tCvt8IePDQDHlyNXIkwa1V1sGCfEerGsNc/3
uo/JZe3VY+hQyyUMov98cXQF6gG79yVy3fW3ULU46Cr1idl/diqBWfUUUKwpyCR3
pacoA1GDQZV5fCqS1NA43zrfTd8i5NcFBOBIwGFj3vYk9PU8TC7dhhOxRsfSu5OG
FUHo27W/s/DZh1fJuwhOCHeiWDmPZ+M=
-----END CERTIFICATE-----
Generated at Sun May 11 00:36:54 2025 by rpki-client