Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5ac96c4f-439c-3099-a0b3-f581b6efc0ed.roa
File:                     5ac96c4f-439c-3099-a0b3-f581b6efc0ed.roa (raw, json)
Hash identifier:          RgYX1eg6vUX74lgaCU5HRhMjiysNAgRshrBsWAuu1bs=
Subject key identifier:   00:3E:37:53:4C:88:22:AC:1A:68:80:CA:3E:35:26:0F:BF:0A:86:1E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A29556F3DC96F4869EC9F2700
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5ac96c4f-439c-3099-a0b3-f581b6efc0ed.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     62160
IP address blocks:        45.38.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:6f:3d:c9:6f:48:69:ec:9f:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=0f2dbd3e-baeb-4550-b3fa-eabddf9613e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7e:e6:4c:63:24:46:83:97:3a:64:63:b5:e1:
                    cf:ab:ff:85:48:fb:a2:85:62:22:05:36:69:10:59:
                    ea:8c:b0:13:bc:27:40:a9:d0:9e:98:2e:ec:fe:e5:
                    af:ca:00:4f:dc:1b:51:ad:4d:43:c1:ef:7f:2d:1c:
                    d3:72:b9:a1:9f:c2:af:02:0e:05:50:39:4c:35:43:
                    01:e0:bd:d6:5d:c2:31:0c:e0:3d:1d:90:9a:aa:ce:
                    a5:d3:57:c3:77:56:5d:45:2d:ae:84:5c:ab:93:3f:
                    eb:6c:62:48:6e:e5:a0:29:f6:09:ca:b0:2f:51:a7:
                    09:0d:19:11:ba:62:29:f2:07:5f:89:69:b8:db:85:
                    dc:40:5a:c9:90:2d:df:9f:40:3c:99:31:34:0b:a7:
                    26:28:b1:15:9c:f9:6b:b7:bc:18:0e:21:c1:f5:30:
                    79:54:03:c3:01:4b:cb:8c:dd:21:72:9e:fd:bb:01:
                    3f:97:6f:e2:b3:35:bb:a0:a8:4f:27:29:90:70:dd:
                    8e:94:04:5f:d2:81:e1:41:3c:47:1d:d9:68:06:4c:
                    42:29:af:51:fb:ed:bb:7a:c6:00:40:bc:7f:46:24:
                    29:2f:3d:da:7b:4f:bb:c3:1e:91:99:93:d4:e4:8a:
                    b1:24:a9:84:71:6e:c4:3e:a8:c1:97:5d:2d:24:37:
                    aa:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:3E:37:53:4C:88:22:AC:1A:68:80:CA:3E:35:26:0F:BF:0A:86:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5ac96c4f-439c-3099-a0b3-f581b6efc0ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:98:bb:2a:aa:fc:2a:77:3c:b3:e5:14:21:43:bf:38:3f:03:
         cc:c8:ef:80:1e:bf:6d:54:ce:b7:1c:73:b1:83:20:b9:0d:5e:
         98:17:7d:78:0a:74:8d:3c:31:5a:94:a2:93:1e:05:e5:15:f8:
         af:67:8a:9e:57:cd:fb:40:1d:49:07:3e:6e:fc:48:56:4b:6c:
         56:4d:1d:76:a9:6a:c1:07:95:6d:60:90:13:5e:de:b9:93:52:
         9a:84:d3:22:b4:29:8f:3a:ff:65:5b:e6:9e:25:79:09:a1:67:
         f4:3b:1d:1d:bd:78:08:37:6b:65:7b:a0:50:be:1f:6b:d6:f2:
         23:ce:69:c6:3f:ba:cc:f6:6c:11:9d:1b:38:2b:da:f1:98:23:
         8f:3c:d8:fa:e9:ae:d1:a0:ce:84:76:e3:6d:b4:d4:79:06:34:
         04:84:31:fe:9d:11:ee:d4:09:90:b4:5e:b2:15:26:3e:71:81:
         5d:15:5d:92:24:93:d8:8e:40:d8:74:f3:a3:a9:3f:c4:98:c9:
         6e:37:f4:11:54:da:85:d0:d4:a3:d8:87:6b:88:cb:4a:88:6f:
         4e:04:3f:c7:80:6e:b2:2b:cd:11:f2:26:aa:8d:3d:4b:81:82:
         45:f9:04:a5:6b:8c:d5:27:15:1d:90:84:b6:89:3f:4e:de:28:
         23:c5:82:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:10:18 2025 by rpki-client