Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4f8432c7-b686-3f47-b1c6-1e3a43a3c8cb.roa
File:                     4f8432c7-b686-3f47-b1c6-1e3a43a3c8cb.roa (raw, json)
Hash identifier:          wx40tzl+tsX++T+ecDv3xZdRvcvw0AHvDbwvow2E2Fo=
Subject key identifier:   5F:C7:16:70:23:53:5F:16:21:5C:C4:FC:59:7C:5F:19:2B:53:A7:E3
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AD0D66B5DAEC8873802961740
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4f8432c7-b686-3f47-b1c6-1e3a43a3c8cb.roa
Signing time:             Mon 11 Aug 2025 01:00:32 +0000
ROA not before:           Mon 11 Aug 2025 01:00:32 +0000
ROA not after:            Sun 09 Nov 2025 02:00:32 +0000
asID:                     25893
IP address blocks:        45.39.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d0:d6:6b:5d:ae:c8:87:38:02:96:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 11 01:00:32 2025 GMT
            Not After : Nov  9 02:00:32 2025 GMT
        Subject: CN=c471c407-db56-41fc-89b7-9874e95c6039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6c:ab:77:d3:58:b4:60:33:c0:44:92:a3:43:
                    fa:bf:f8:a1:78:59:91:9b:73:85:9a:1c:f9:7e:f5:
                    18:70:de:bc:e0:86:a9:be:ad:62:76:3f:e1:e1:fb:
                    62:23:0d:f1:41:d3:8b:c9:0f:fe:03:d4:b4:ab:2d:
                    06:d0:47:7d:b0:05:36:73:d8:cc:91:98:fc:8b:33:
                    b9:6b:f5:bd:f6:6f:e3:53:55:4c:eb:b4:7c:69:38:
                    10:2b:50:2d:b1:26:8d:99:c8:14:c2:c3:54:3e:de:
                    0b:59:62:c8:fd:21:a8:7d:1a:09:ac:6b:b3:dd:22:
                    26:59:30:d6:be:3e:92:21:f0:26:9b:cb:8b:09:03:
                    75:1a:1e:41:ff:ab:43:e0:9c:0c:11:9f:1f:9b:4d:
                    60:e7:8c:39:32:c4:46:ec:fb:fd:4a:d2:8f:fc:ed:
                    91:c4:2a:7b:fe:73:b7:20:1c:01:c3:ff:6a:e5:8b:
                    f4:db:99:da:e2:cb:40:52:f2:e2:c3:f9:2d:fd:b3:
                    e3:5e:6c:49:55:3a:4d:21:a3:60:2f:e0:d8:7c:2a:
                    b0:c7:d3:e3:f2:84:96:aa:84:42:e5:e0:f3:5b:b4:
                    16:4e:c2:74:e9:99:93:d6:25:6a:aa:65:d6:a3:8e:
                    a5:8c:7f:17:ad:a4:d3:d7:3d:97:25:26:3d:26:2a:
                    2d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C7:16:70:23:53:5F:16:21:5C:C4:FC:59:7C:5F:19:2B:53:A7:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4f8432c7-b686-3f47-b1c6-1e3a43a3c8cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:f7:cb:79:7b:bb:f0:9d:57:82:d8:dd:70:f1:51:de:94:32:
         f1:d6:ad:47:10:1a:1a:e7:a6:5e:40:9b:66:79:cc:f9:f5:61:
         3d:97:b4:df:8b:5c:7d:a3:79:7b:9e:98:d5:6c:1a:04:49:5b:
         37:45:55:93:bc:bd:54:6f:3e:d8:82:49:39:b6:d0:e8:67:5f:
         37:62:94:38:31:16:2e:93:b3:5f:12:5e:41:0e:3a:0d:cd:1b:
         49:ee:3d:63:7e:fd:d6:92:df:4b:d9:5e:0f:a3:a9:0f:0e:b3:
         07:58:9c:80:81:5a:31:21:31:36:a0:76:db:bb:67:f0:32:49:
         5d:94:32:e9:1b:79:ed:05:28:d0:78:3d:7b:82:d6:20:13:69:
         b4:f9:26:da:20:3d:6b:c7:0e:83:f1:be:ad:81:cf:5d:78:ca:
         5a:92:d3:2c:b4:36:21:a4:6f:cb:6c:d8:b7:30:ed:1f:3c:e5:
         ad:2a:5d:9b:f6:5f:ae:db:b1:02:41:fc:ff:16:3f:e2:1d:3a:
         3b:1a:24:8b:b5:be:70:e0:0c:b0:9d:8a:4d:8f:ed:0f:fb:43:
         26:46:56:54:e0:92:62:e2:a7:f0:92:5b:88:19:9a:1d:5b:6d:
         5d:3a:8e:49:7e:ea:b9:99:6c:6e:fb:6b:6e:7f:b5:0e:13:d6:
         0f:25:19:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:22:10 2025 by rpki-client