Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8d1c3346-ccb5-3d81-90cc-c9026a0bb8b3.roa
File:                     8d1c3346-ccb5-3d81-90cc-c9026a0bb8b3.roa (raw, json)
Hash identifier:          a+mrU+hZZq+9TveKUJ53VGNrGFBrUI+I+R+NTrGBRq4=
Subject key identifier:   C5:83:39:19:3E:1D:23:56:2A:A3:E6:95:1F:5D:A7:6B:AE:4E:93:C7
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B8CF3BAA381A25352DEF02B80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8d1c3346-ccb5-3d81-90cc-c9026a0bb8b3.roa
Signing time:             Fri 17 Oct 2025 10:11:57 +0000
ROA not before:           Fri 17 Oct 2025 10:11:57 +0000
ROA not after:            Thu 15 Jan 2026 11:11:57 +0000
asID:                     18779
IP address blocks:        45.38.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8c:f3:ba:a3:81:a2:53:52:de:f0:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 17 10:11:57 2025 GMT
            Not After : Jan 15 11:11:57 2026 GMT
        Subject: CN=287fb716-4fe1-4278-9568-c14d3da8660d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:44:80:6e:69:d4:38:6d:ed:6e:08:47:66:be:
                    25:cd:64:e9:b2:85:e5:25:af:8c:dd:27:20:28:80:
                    44:37:52:e7:51:78:0d:a3:fd:61:31:85:39:2d:ec:
                    d4:f1:b5:81:cc:53:d2:ae:c9:b3:05:49:95:52:f6:
                    bf:06:0c:ce:1f:a5:35:da:41:b2:72:35:cc:56:5b:
                    e5:18:16:22:a5:97:3b:3c:3b:14:e8:9f:38:b0:6a:
                    cc:3b:53:96:39:d4:ae:65:34:11:50:e4:4d:cd:2b:
                    64:7d:ca:17:60:b5:1a:94:36:71:16:72:f4:9a:92:
                    cd:75:22:5b:f4:25:2a:c9:fe:b8:3e:14:1a:dc:e6:
                    40:92:d3:34:6f:52:44:84:61:ba:c5:f3:5d:a7:b6:
                    b6:0a:2d:19:95:08:dd:c8:f9:fc:be:b6:07:4f:e6:
                    b0:ee:00:97:b0:f2:fe:07:b7:18:1f:2d:16:64:d6:
                    2d:79:00:2b:f4:e9:d5:87:db:63:39:3e:d2:0d:01:
                    97:95:c3:4f:67:4d:41:a2:ca:4c:c9:1c:eb:87:42:
                    60:b9:f7:d8:5b:03:0e:ef:c3:88:01:85:4a:ff:10:
                    40:75:28:eb:87:d6:a5:a2:9b:37:2d:98:8b:58:98:
                    9d:bd:8f:a2:3c:ad:5c:08:63:98:d2:37:68:18:51:
                    8e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:83:39:19:3E:1D:23:56:2A:A3:E6:95:1F:5D:A7:6B:AE:4E:93:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8d1c3346-ccb5-3d81-90cc-c9026a0bb8b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:fc:cd:56:99:76:51:5c:a7:35:d1:00:9f:bc:15:03:06:d8:
         ac:15:6e:4c:bb:64:58:a3:8c:17:7e:fc:79:11:5e:37:be:3f:
         3b:54:db:f5:08:71:2b:76:19:e9:2d:d9:6f:ee:7f:b8:65:8c:
         32:1c:c1:4c:2f:c9:37:8a:09:27:56:fb:6c:d0:6d:97:62:7e:
         12:c0:3e:3e:85:b3:a9:f8:11:5e:08:a0:ca:8c:f8:83:78:18:
         c1:25:24:1c:98:39:ef:ff:97:db:52:5a:0a:67:2a:95:11:74:
         b5:47:24:98:42:71:88:f0:f0:97:b4:66:c6:a5:02:e7:e6:d7:
         46:03:01:da:5a:d7:12:5f:61:ff:39:cb:be:49:ed:b8:ae:80:
         82:28:96:ce:9b:4f:47:db:2d:77:ce:85:a5:6d:be:70:f8:d3:
         29:7e:6a:34:de:de:39:86:55:95:cd:b5:fe:1f:94:c6:d6:37:
         67:57:2a:19:8f:d1:ff:2c:60:26:24:06:77:8c:9c:2a:40:5f:
         1e:16:da:4f:c4:94:75:20:f2:cf:6d:42:6c:a7:58:fb:d2:64:
         21:fb:32:fe:36:eb:9a:9e:29:c0:ad:f5:0d:97:71:28:2a:99:
         81:94:36:99:ad:e1:b4:00:0b:3d:73:fe:a8:b1:4d:35:db:69:
         16:61:ba:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuM87qjgaJTUt7wK4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MTAxNzEwMTE1N1oXDTI2MDExNTExMTE1N1owLzEtMCsGA1UEAxMk
Mjg3ZmI3MTYtNGZlMS00Mjc4LTk1NjgtYzE0ZDNkYTg2NjBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10SAbmnUOG3tbghHZr4lzWTpsoXlJa+M3Scg
KIBEN1LnUXgNo/1hMYU5LezU8bWBzFPSrsmzBUmVUva/BgzOH6U12kGycjXMVlvl
GBYipZc7PDsU6J84sGrMO1OWOdSuZTQRUORNzStkfcoXYLUalDZxFnL0mpLNdSJb
9CUqyf64PhQa3OZAktM0b1JEhGG6xfNdp7a2Ci0ZlQjdyPn8vrYHT+aw7gCXsPL+
B7cYHy0WZNYteQAr9OnVh9tjOT7SDQGXlcNPZ01BospMyRzrh0JguffYWwMO78OI
AYVK/xBAdSjrh9alops3LZiLWJidvY+iPK1cCGOY0jdoGFGOEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMWDORk+HSNWKqPmlR9dp2uuTpPHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOGQxYzMzNDYtY2NiNS0z
ZDgxLTkwY2MtYzkwMjZhMGJiOGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSbIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEn8zVaZdlFcpzXRAJ+8FQMG2KwVbky7ZFijjBd+/HkRXje+PztU2/UI
cSt2Gekt2W/uf7hljDIcwUwvyTeKCSdW+2zQbZdifhLAPj6Fs6n4EV4IoMqM+IN4
GMElJByYOe//l9tSWgpnKpURdLVHJJhCcYjw8Je0ZsalAufm10YDAdpa1xJfYf85
y75J7biugIIols6bT0fbLXfOhaVtvnD40yl+ajTe3jmGVZXNtf4flMbWN2dXKhmP
0f8sYCYkBneMnCpAXx4W2k/ElHUg8s9tQmynWPvSZCH7Mv4265qeKcCt9Q2XcSgq
mYGUNpmt4bQACz1z/qixTTXbaRZhui4=
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:48:04 2025 by rpki-client