Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/751f605a-6f0c-3f81-a3fd-f55de2943b95.roa
File:                     751f605a-6f0c-3f81-a3fd-f55de2943b95.roa (raw, json)
Hash identifier:          nXKsR3qHL+C7nZoZzP1J9banZwYNtsjtBgArkAVWDSY=
Subject key identifier:   B1:04:F4:57:E4:12:B0:82:98:3E:DB:8A:F3:1E:FD:3B:A7:61:B1:F1
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B87C5A55A25876059B394E680
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/751f605a-6f0c-3f81-a3fd-f55de2943b95.roa
Signing time:             Wed 15 Oct 2025 13:40:04 +0000
ROA not before:           Wed 15 Oct 2025 13:40:04 +0000
ROA not after:            Tue 13 Jan 2026 14:40:04 +0000
asID:                     30058
IP address blocks:        45.39.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:c5:a5:5a:25:87:60:59:b3:94:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 15 13:40:04 2025 GMT
            Not After : Jan 13 14:40:04 2026 GMT
        Subject: CN=c9332eee-91d5-4c9a-80d3-786c4065f0a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:77:1d:50:52:d2:9a:56:14:fd:a5:28:f9:28:
                    1c:46:48:e3:1b:56:bb:f4:e4:b1:70:9d:cd:1f:33:
                    17:d3:e5:13:ba:10:e9:22:4c:5e:72:5a:f6:6f:23:
                    38:b4:b7:52:ca:4e:93:24:de:7d:47:9c:3d:3f:93:
                    37:5f:40:eb:66:e3:f2:e0:3c:3c:ce:32:9b:a4:91:
                    85:b9:37:be:7b:78:05:d2:c3:9e:86:2d:b8:1e:5b:
                    4f:21:4e:7e:e8:c4:36:92:84:ab:24:5c:a2:b9:0d:
                    a6:86:b8:46:03:bd:9b:09:e1:6d:e6:35:e0:20:93:
                    2a:d4:55:1d:11:db:33:58:f6:74:8e:02:b2:f0:95:
                    54:46:e7:70:cf:44:ca:d3:5c:b5:f6:4d:92:f2:81:
                    f2:1e:9c:ee:07:82:eb:2e:7a:65:46:71:95:64:cd:
                    12:5f:d2:c3:0a:df:ee:53:fb:bf:cf:5d:36:ed:c9:
                    6c:56:8a:99:eb:e7:f3:2f:1b:5b:5c:d2:39:8d:86:
                    a4:60:83:c0:88:bc:48:51:bc:5c:33:da:25:97:32:
                    25:d1:75:c6:c2:5f:bc:7b:bc:a6:f5:2e:f5:7f:35:
                    e2:1e:15:b7:c5:eb:b7:d4:10:21:d8:ac:05:56:e1:
                    be:7b:32:03:c8:13:04:f2:70:84:22:37:ef:f9:d1:
                    f9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:04:F4:57:E4:12:B0:82:98:3E:DB:8A:F3:1E:FD:3B:A7:61:B1:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/751f605a-6f0c-3f81-a3fd-f55de2943b95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:bc:11:d3:38:c9:90:69:ba:b0:49:0e:b0:b5:3b:4f:26:ed:
         b0:3e:2a:39:fd:6e:f8:a9:11:f2:2e:ae:64:ac:fd:59:0b:c4:
         50:3e:54:7c:f9:5a:b1:48:cc:58:f4:eb:4d:6a:0c:c1:56:7e:
         f8:ee:4e:bd:9c:78:d4:a2:2f:10:65:63:4e:eb:34:51:dc:88:
         18:bd:1b:49:a7:31:82:00:06:cc:6a:e4:67:c9:19:38:22:28:
         fb:62:a6:d4:63:ca:a6:ad:e5:56:8d:8f:d3:7c:b7:a1:19:fe:
         66:5c:06:5c:e7:19:54:dd:7e:1a:b7:0b:6d:f8:66:5e:ac:54:
         ca:d0:b2:04:22:0f:c1:ec:e2:73:d2:08:a3:7f:05:94:b0:38:
         78:e2:5f:e5:4b:86:c5:eb:9e:4d:7f:4f:20:c4:ac:bd:b8:06:
         2b:ad:4a:18:3e:1b:1b:9a:70:40:46:67:28:b1:23:94:8c:6d:
         44:b3:c0:4f:1f:42:9b:bb:75:aa:36:af:10:7f:c7:84:c2:70:
         ae:36:76:1b:0b:f5:b9:37:2f:06:b3:8f:e8:f9:44:3f:54:88:
         2e:13:ca:df:f4:18:d0:e3:54:7e:e4:05:16:ef:7d:89:6b:8b:
         43:93:1a:ec:78:1a:74:4c:2e:14:c8:a8:12:fe:11:6c:67:0d:
         0d:99:90:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:00:19 2025 by rpki-client