Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7baa862d-74bf-3149-b712-faf5c5dead8c.roa
File:                     7baa862d-74bf-3149-b712-faf5c5dead8c.roa (raw, json)
Hash identifier:          ntT3v8pVZydPEDinBKbBZ57Fe6XnWXEHBTlNS0LkFSE=
Subject key identifier:   50:D2:94:0C:39:D9:B9:39:C1:E7:1B:DA:57:2F:65:20:BF:3C:AB:27
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B91776D0004943C28D67B4AD0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7baa862d-74bf-3149-b712-faf5c5dead8c.roa
Signing time:             Sun 19 Oct 2025 01:00:30 +0000
ROA not before:           Sun 19 Oct 2025 01:00:30 +0000
ROA not after:            Sat 17 Jan 2026 02:00:30 +0000
asID:                     18779
IP address blocks:        45.38.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:91:77:6d:00:04:94:3c:28:d6:7b:4a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 19 01:00:30 2025 GMT
            Not After : Jan 17 02:00:30 2026 GMT
        Subject: CN=fc636a22-a36e-4fea-acbb-d44645fade24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:54:7e:27:cf:f4:aa:af:2b:1d:91:c9:31:91:
                    28:fe:5e:7d:1a:f6:b3:91:9e:a8:b0:d2:30:21:0c:
                    3d:c7:b8:51:04:be:9e:12:3d:66:cf:ae:9b:2b:c4:
                    e0:e4:da:e2:6b:ec:df:4d:20:53:3a:89:05:78:fe:
                    ca:ba:89:39:97:46:f2:28:1c:92:4f:bd:48:c0:5b:
                    0c:07:13:ff:ab:df:86:79:f9:64:70:c2:be:a7:66:
                    d8:50:a2:73:09:c3:8c:f1:b2:4b:f4:9d:92:a4:0f:
                    fc:2e:1a:f1:7e:7a:b1:5e:08:52:9d:1c:41:ae:42:
                    b0:9d:51:f9:32:29:60:2e:96:7f:2c:fa:f4:14:92:
                    f2:6d:9e:03:46:d5:24:c6:dc:45:dd:fd:52:45:b3:
                    e7:86:87:5f:1a:ae:0e:07:37:38:90:87:b7:50:b4:
                    b6:69:33:4a:b8:4c:f3:c4:8c:1d:96:03:27:45:f7:
                    bd:0c:8b:5d:9e:93:2a:fb:2b:5b:7c:ea:9d:c2:9b:
                    1a:9d:a2:ef:3b:ed:02:37:cb:e7:06:dd:67:d9:69:
                    29:e3:e2:08:6c:a3:a7:f5:f8:7d:29:55:6a:f9:e4:
                    8f:bd:1b:27:d0:a8:91:8b:dd:e7:78:f7:50:6f:28:
                    5e:ea:62:da:35:e6:42:5c:a2:b1:46:9a:a7:e3:c4:
                    35:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D2:94:0C:39:D9:B9:39:C1:E7:1B:DA:57:2F:65:20:BF:3C:AB:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7baa862d-74bf-3149-b712-faf5c5dead8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:7f:5c:41:49:d5:f1:b0:cc:a6:a4:84:9d:6e:23:41:cb:40:
         a1:72:28:9d:b5:4f:8e:00:bd:60:fe:89:07:1b:43:c0:58:77:
         14:48:2e:d2:da:a1:3a:74:ae:a8:54:c7:e5:22:4c:11:34:44:
         aa:ec:e7:ef:4c:ba:23:7c:66:9c:41:ab:b3:da:8c:9c:48:4c:
         c1:53:63:2f:08:fe:9f:e3:15:f2:c7:cc:28:77:65:25:cb:4f:
         48:9d:a0:77:7a:67:5e:3b:2b:cf:3b:ef:8d:93:8c:07:b4:3a:
         6e:10:c4:82:3d:ef:4f:0f:b3:c4:a4:14:14:c2:b2:7e:c7:d8:
         fc:89:7f:15:e4:21:24:29:37:05:da:83:4c:5f:03:6c:38:bf:
         f6:f8:d7:12:8e:64:60:3b:72:5d:8f:ab:64:ec:02:66:cb:9c:
         76:08:34:c0:82:d7:d8:c6:a2:2c:33:33:ff:fa:a0:23:81:80:
         4b:d9:05:a9:d8:2b:7b:92:65:da:2a:2d:6c:70:90:ec:74:f0:
         cf:b1:c3:8f:23:6f:03:39:fe:49:c6:59:95:63:e3:bd:66:20:
         41:ba:fb:30:2b:1d:32:3f:ad:b4:d6:bc:ee:21:50:3d:16:bb:
         51:cf:b7:12:3d:4e:7f:83:86:9e:d7:24:eb:92:e7:8f:3c:4a:
         aa:41:f7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:26:21 2025 by rpki-client