Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7f4e6cf6-57b7-3cda-a118-fcd5f39c094e.roa
File:                     7f4e6cf6-57b7-3cda-a118-fcd5f39c094e.roa (raw, json)
Hash identifier:          6q7nZvY2Bc9Njvzv54w0Cv1BVkXSTo6t+oWyybXblEE=
Subject key identifier:   94:CD:53:70:52:DE:EF:B3:F5:E1:3F:56:39:D8:B9:44:41:C1:0F:68
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584ABEB0DFAFB3066A503410DD20
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7f4e6cf6-57b7-3cda-a118-fcd5f39c094e.roa
Signing time:             Mon 04 Aug 2025 13:00:36 +0000
ROA not before:           Mon 04 Aug 2025 13:00:36 +0000
ROA not after:            Sun 02 Nov 2025 14:00:36 +0000
asID:                     9009
IP address blocks:        45.39.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:be:b0:df:af:b3:06:6a:50:34:10:dd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug  4 13:00:36 2025 GMT
            Not After : Nov  2 14:00:36 2025 GMT
        Subject: CN=b92608f7-3614-46d2-ba7c-981da0a09a7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ae:3f:2a:44:f8:eb:98:3d:50:92:76:03:d0:
                    ff:15:de:bb:a6:27:74:d7:49:f9:22:3e:c6:77:fd:
                    b8:63:0e:d4:54:af:50:80:71:84:a0:3d:93:a3:91:
                    99:ea:29:5c:53:e3:a8:74:4d:86:83:13:cc:28:49:
                    d4:8b:6d:76:1e:2c:23:04:56:06:67:92:48:cb:48:
                    cd:a5:d8:b1:d4:9e:58:df:6b:87:1a:c1:8e:2b:ae:
                    25:4c:b8:8c:3b:d2:17:e7:ee:21:3d:1c:95:cd:80:
                    a0:d9:fd:24:60:da:36:df:4c:62:3b:38:d3:ca:1e:
                    b9:3e:a2:79:f3:60:29:91:54:87:26:7e:78:98:5e:
                    c5:0d:dd:4f:e4:9f:f7:08:1f:ba:10:d4:64:fe:58:
                    00:ad:b6:4b:61:9e:86:31:38:85:ba:36:20:e5:5e:
                    a7:a1:52:d2:ca:4a:eb:0e:ba:dc:76:46:d1:33:1c:
                    94:9a:69:4a:ae:3b:fa:73:f6:d0:d2:05:67:d6:e0:
                    94:c2:c6:da:52:26:06:3d:7a:79:3d:50:fc:60:00:
                    a0:66:a8:db:54:7d:9d:53:fc:e8:30:20:a2:d5:6d:
                    f6:e7:3c:9f:fc:53:e9:1f:7e:dd:e5:bb:85:aa:a0:
                    7c:9b:ab:c9:6d:13:79:d1:56:e2:9d:90:ab:97:d5:
                    49:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:CD:53:70:52:DE:EF:B3:F5:E1:3F:56:39:D8:B9:44:41:C1:0F:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7f4e6cf6-57b7-3cda-a118-fcd5f39c094e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:0a:96:7b:33:c9:a4:b0:87:b9:db:12:2c:98:63:bb:b9:7b:
         5f:76:b7:d9:32:88:e7:4e:eb:69:09:6e:65:dd:b7:b0:32:eb:
         83:c6:39:b8:d1:b9:48:d0:e1:2b:cd:c6:9f:3d:63:f7:e2:1b:
         dd:ba:25:90:92:1f:16:fd:7a:be:4d:95:e8:8c:4b:ea:fb:dc:
         f7:d0:cb:17:88:7d:ec:2e:54:da:ad:88:eb:de:cd:16:87:87:
         c2:63:d5:9a:8d:62:24:01:7e:de:8d:10:93:db:4f:2c:ac:4b:
         cc:1d:ca:5d:48:86:4e:4c:8e:a9:58:04:8c:7c:0c:7d:63:46:
         cd:fe:16:2a:77:72:29:0d:90:4d:1b:b6:fe:1c:db:81:79:d4:
         35:7c:64:d2:b5:ac:fc:0f:87:a1:2e:7f:45:04:78:cb:ff:f8:
         ae:c8:99:51:79:64:4f:1f:14:93:a2:7b:97:e2:49:bb:df:ee:
         4a:cf:43:40:b8:87:d3:2d:83:dc:09:ce:d3:96:1f:ff:06:59:
         70:36:7a:6b:ee:37:16:3d:61:9d:a6:ef:12:01:e6:65:b8:ce:
         2d:e8:00:e6:c9:d5:32:85:11:1b:eb:eb:ab:66:4e:cd:55:d7:
         b0:57:38:1a:58:f0:4a:f4:f7:06:ae:5f:5e:4d:aa:65:8f:92:
         e5:cd:58:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:24:10 2025 by rpki-client