Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8486fda7-abde-3415-92c1-6957c309cb61.roa
File:                     8486fda7-abde-3415-92c1-6957c309cb61.roa (raw, json)
Hash identifier:          O5y280me0zkvvC5aegp9/XnFg8YlfA2FWbk0HrveaSk=
Subject key identifier:   85:2F:73:98:E7:FA:52:5F:37:43:79:0E:01:68:20:E1:7A:BA:49:AA
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A42758592B0D75A1662846680
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8486fda7-abde-3415-92c1-6957c309cb61.roa
Signing time:             Sat 21 Jun 2025 01:00:48 +0000
ROA not before:           Sat 21 Jun 2025 01:00:48 +0000
ROA not after:            Fri 19 Sep 2025 01:00:48 +0000
asID:                     59253
IP address blocks:        45.39.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:42:75:85:92:b0:d7:5a:16:62:84:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun 21 01:00:48 2025 GMT
            Not After : Sep 19 01:00:48 2025 GMT
        Subject: CN=3b8a5ee6-fcfb-44cd-be22-e1d763218b83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:34:29:e9:8b:86:5b:5f:d3:b0:ed:ca:01:e7:
                    00:01:0c:c9:90:71:26:c5:2e:a0:95:1c:e0:c4:ce:
                    22:21:8a:49:f7:91:aa:0b:69:0e:56:27:5d:d2:d1:
                    8e:98:be:ed:10:95:52:39:5b:31:00:8a:b1:00:2d:
                    f7:34:c7:f5:b0:f0:7e:2b:93:af:f7:36:92:91:ae:
                    e8:72:e2:5c:ea:16:53:cf:92:1a:bd:11:66:4a:42:
                    d8:53:cd:28:87:32:b5:b4:2a:1d:19:8d:8b:20:8d:
                    d0:b8:da:f2:85:e0:76:a1:e8:a5:f7:a7:6b:d7:89:
                    0c:f2:b1:af:d6:da:74:c1:96:72:0d:3a:d1:da:fc:
                    90:c0:82:a1:5c:cf:97:c4:ab:06:86:9d:d3:62:96:
                    64:24:ea:5e:8f:df:e0:e3:78:71:a4:ee:5a:8e:f1:
                    83:a1:5d:3d:5d:1e:d0:2f:cf:57:eb:af:2a:13:f7:
                    aa:74:23:d8:21:6d:71:93:d5:46:d0:1e:41:83:ce:
                    de:14:eb:b9:90:01:9c:12:f9:0a:3a:f8:0d:f9:ce:
                    bb:bb:93:95:c2:0e:fb:8b:7e:cb:f9:4a:35:84:9e:
                    2d:3c:26:71:0f:3d:61:2b:e5:1d:6c:db:a9:b7:fd:
                    5d:36:a3:6d:04:4a:45:b3:3b:5a:66:f9:5b:1d:e5:
                    32:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:2F:73:98:E7:FA:52:5F:37:43:79:0E:01:68:20:E1:7A:BA:49:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8486fda7-abde-3415-92c1-6957c309cb61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:20:fc:ad:07:49:10:9e:9f:30:a2:f8:5d:66:32:88:ff:a2:
         3f:0a:b9:69:b7:cf:c3:da:61:b8:55:e1:fd:49:6a:a6:1f:58:
         62:9c:8b:68:2a:8c:ab:b3:53:a9:67:f1:d4:d5:e5:73:99:33:
         74:91:cf:05:26:76:fe:3d:03:3c:64:7f:b6:3a:c9:2e:a1:c0:
         89:15:b2:ac:99:8b:1d:a4:7b:c8:97:a9:85:7b:4b:5e:ae:c0:
         56:fd:e2:a0:64:a7:17:d0:c5:d4:81:8f:52:2c:9c:8a:d1:8d:
         b1:79:bc:34:26:f5:44:c5:b4:0d:03:b7:a2:02:45:b0:4d:2a:
         77:b5:33:c1:c7:5c:3a:0f:ba:44:12:d2:63:8e:a0:0a:27:0b:
         68:01:b0:32:7e:71:0b:03:7a:a5:67:86:ce:e1:72:57:04:a2:
         1b:92:de:6f:d3:b0:a6:58:b6:7e:dc:71:3b:53:c6:c4:d1:60:
         60:02:e8:e9:42:3b:a2:95:72:a7:2f:ba:7c:c3:39:2c:0e:75:
         3e:cd:6c:91:d7:5d:02:ba:65:d3:dc:21:8b:16:1d:9f:b5:20:
         df:75:dc:d9:d3:c6:0b:73:72:95:84:1c:d3:67:98:0b:69:3e:
         be:15:7e:87:8b:77:dc:c1:42:51:b8:b0:53:cd:ee:76:71:53:
         81:71:e7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 06:12:02 2025 by rpki-client