Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/69f56baa-ecc8-30dd-9272-88113a4aeeaa.roa
File:                     69f56baa-ecc8-30dd-9272-88113a4aeeaa.roa (raw, json)
Hash identifier:          IBLVXYato2nXhJBKPtkbCbukrkp8TD00u6Hbb8oQC2Q=
Subject key identifier:   35:55:29:B7:DE:1B:30:EE:1C:74:58:20:EE:AB:46:F8:C3:AA:C9:1F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AD23C376E74342151DDB04380
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/69f56baa-ecc8-30dd-9272-88113a4aeeaa.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     214238
IP address blocks:        45.39.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:37:6e:74:34:21:51:dd:b0:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=44f0cd03-3d4e-494d-92ef-d50a327190db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7d:1b:81:19:b0:f2:ed:bd:27:53:fa:79:62:
                    1e:20:37:f1:e7:0d:32:00:d4:d9:05:48:05:5f:88:
                    43:23:f8:7d:02:28:12:0a:f6:fb:39:7b:57:9f:f9:
                    41:51:b3:04:54:23:1d:4d:22:3d:63:51:df:33:8c:
                    f4:64:e3:56:cd:a0:ca:f9:3b:10:2c:7e:20:37:a2:
                    96:ee:47:24:51:0a:41:c8:af:f2:ea:47:77:b0:14:
                    83:2b:fa:c5:b4:c5:30:0b:8c:15:03:a8:f3:1f:bb:
                    5d:d3:6e:32:03:8e:50:1e:e0:57:04:7b:37:72:e2:
                    33:0e:95:48:0c:ad:14:be:22:a8:91:68:61:25:10:
                    9a:a3:4e:4a:de:3b:bd:c5:47:95:9a:b9:5e:fe:fa:
                    04:8d:05:cb:27:65:c0:60:57:8b:3a:81:cc:fc:60:
                    cc:b4:29:f1:f1:94:9e:73:6f:65:a7:2f:7c:64:fb:
                    b0:40:a2:21:f7:82:ba:c4:e7:5f:4d:0f:ac:d4:67:
                    2e:40:ca:ea:db:27:46:eb:89:c6:dd:49:17:a1:bf:
                    c2:1a:1e:d6:51:f6:41:cb:cc:6d:14:1d:b1:b0:1e:
                    71:e5:4d:f9:00:d3:ce:79:6d:85:7a:01:b1:9a:6c:
                    bf:f5:75:e9:e6:f5:5d:e7:9b:9e:53:69:8d:40:51:
                    d2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:55:29:B7:DE:1B:30:EE:1C:74:58:20:EE:AB:46:F8:C3:AA:C9:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/69f56baa-ecc8-30dd-9272-88113a4aeeaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:d8:80:6f:62:ca:33:c0:5c:81:1d:62:a2:aa:03:5c:55:a8:
         7a:ef:ed:1e:71:99:97:55:78:85:43:1e:bc:50:0c:bd:6f:5d:
         95:0d:35:57:bc:a6:e7:34:0c:c3:f2:f0:ea:ea:d5:ba:0a:2f:
         13:48:bc:53:c4:3e:a2:11:cb:41:3d:5b:65:b1:f7:23:94:be:
         a4:ce:fb:c6:f9:a4:e8:4b:91:55:ba:15:9f:42:15:30:9c:34:
         30:80:08:a1:6b:52:21:e4:94:06:15:e4:54:79:e5:e3:48:c2:
         a8:e2:79:33:f7:79:2d:85:20:c6:03:cc:b8:b4:83:cb:eb:e5:
         88:7f:50:43:aa:de:0a:01:ad:d9:70:74:12:4d:3c:09:de:34:
         ec:51:4f:7d:96:83:8f:9f:a4:ad:2a:84:89:a3:df:28:78:01:
         c9:e4:49:b1:80:9e:3a:ee:4c:08:61:02:07:e4:ae:91:6c:de:
         cc:97:4f:62:43:22:8b:41:bd:71:6d:0c:1a:5b:81:2c:26:e6:
         9c:df:91:1e:28:03:71:d3:a9:32:72:9a:18:de:8f:ea:d1:22:
         14:ee:53:6b:36:1b:2b:f1:fa:6f:1e:d7:b2:4d:ea:a6:93:cc:
         40:d6:be:03:6e:f9:30:f2:63:40:4b:b1:4e:c8:3c:bb:d8:b6:
         6a:2a:1d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:02:17 2025 by rpki-client