Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8d1eb687-0e30-351c-9986-64538e4c799c.roa
File:                     8d1eb687-0e30-351c-9986-64538e4c799c.roa (raw, json)
Hash identifier:          doqsJAfiFfq/uKmJ6TWD/4TditKSMgKjQdvqNYW5Jh0=
Subject key identifier:   F5:B5:E9:59:20:7C:B1:38:CF:FA:8D:74:60:FB:29:F8:26:13:B6:67
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849B57A3568A5523E46F95611C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8d1eb687-0e30-351c-9986-64538e4c799c.roa
Signing time:             Thu 01 May 2025 13:00:58 +0000
ROA not before:           Thu 01 May 2025 13:00:58 +0000
ROA not after:            Wed 30 Jul 2025 13:00:58 +0000
asID:                     212238
IP address blocks:        45.38.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:7a:35:68:a5:52:3e:46:f9:56:11:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May  1 13:00:58 2025 GMT
            Not After : Jul 30 13:00:58 2025 GMT
        Subject: CN=38d158a8-1062-4c3e-b525-65a00f40d900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d4:10:27:5c:85:b3:c8:37:09:2b:ca:ab:2d:
                    33:5c:a1:c8:48:ca:61:60:ff:1b:e3:58:92:7a:86:
                    77:6b:a4:33:2e:b8:56:b5:03:47:d4:5b:bd:01:f9:
                    e3:fe:60:da:ce:24:f9:e1:31:7c:07:08:59:cf:98:
                    3f:42:f4:cd:f3:eb:1d:1e:d1:85:39:10:4f:9a:83:
                    7f:bb:bd:c9:d2:2c:9c:d6:d6:65:b0:97:14:ad:ce:
                    a0:a8:f9:99:2e:37:db:0b:c8:64:5c:39:96:ae:58:
                    0e:ba:b2:cf:80:1e:a9:7f:d0:8b:1f:f0:fe:e9:0f:
                    e3:bf:b6:2f:ee:b7:7b:1a:fb:7d:a3:7a:2f:21:4c:
                    a8:3f:da:8f:b5:7b:25:5a:83:04:e8:31:bf:0d:f2:
                    09:08:bf:47:a6:5a:62:5c:99:35:95:01:76:4e:ff:
                    0b:64:25:65:bd:1d:28:16:fe:41:68:98:ab:1c:66:
                    f7:6a:1e:fa:ad:08:3d:65:00:01:4e:ab:bc:9c:8b:
                    3a:e7:2d:e6:15:d6:b2:c8:b9:85:92:b5:cb:8d:05:
                    92:96:d0:75:13:51:ff:22:1d:91:0a:74:a6:6e:37:
                    7f:b7:92:c4:cf:b8:5f:34:f7:ad:0d:3e:37:9e:d0:
                    5d:d9:5b:d8:76:bc:12:b7:09:50:9f:58:3b:4f:dc:
                    50:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B5:E9:59:20:7C:B1:38:CF:FA:8D:74:60:FB:29:F8:26:13:B6:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8d1eb687-0e30-351c-9986-64538e4c799c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:e4:9d:fa:c8:84:1a:6e:e0:da:8f:35:24:28:bd:d4:75:6a:
         04:27:e2:99:3d:0b:c8:8a:2e:26:9f:f8:84:34:48:f0:fa:70:
         ae:37:9c:b8:60:34:66:b9:00:a0:08:d8:17:55:68:65:b3:a0:
         ec:76:17:d1:5b:9a:1a:a8:cb:c0:20:dd:df:a8:13:d4:25:2c:
         16:5d:c7:fe:a8:f6:95:fc:b9:9f:79:e0:d6:51:7c:1e:95:22:
         03:29:4e:d1:ac:23:49:f8:83:cb:22:7c:e2:eb:f3:3f:08:f2:
         3c:c4:a2:8e:8d:93:81:6e:3a:6c:8c:e4:01:f7:fd:d2:bf:c3:
         9e:0a:1a:68:4a:13:26:75:6d:97:bb:a7:69:71:53:62:6b:64:
         ae:c4:72:54:7f:75:92:18:50:2c:6a:7c:28:5f:20:6f:7d:3c:
         67:06:36:46:09:45:91:03:42:86:c5:31:cc:9f:b8:29:30:91:
         d0:16:12:6c:cf:4f:0e:a2:da:c6:06:15:2a:85:88:bb:fe:49:
         40:be:50:a0:6f:11:ef:db:2e:2b:b4:54:48:7f:9a:65:b1:ea:
         26:8e:f5:9e:86:b3:20:0d:aa:da:9a:31:49:05:27:6d:82:b1:
         e7:f3:0f:95:f2:61:1c:04:0d:d6:dd:26:e6:8c:5b:88:f7:0c:
         e8:64:1e:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1ejVopVI+RvlWEcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk
MzhkMTU4YTgtMTA2Mi00YzNlLWI1MjUtNjVhMDBmNDBkOTAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9QQJ1yFs8g3CSvKqy0zXKHISMphYP8b41iS
eoZ3a6QzLrhWtQNH1Fu9Afnj/mDaziT54TF8BwhZz5g/QvTN8+sdHtGFORBPmoN/
u73J0iyc1tZlsJcUrc6gqPmZLjfbC8hkXDmWrlgOurLPgB6pf9CLH/D+6Q/jv7Yv
7rd7Gvt9o3ovIUyoP9qPtXslWoME6DG/DfIJCL9HplpiXJk1lQF2Tv8LZCVlvR0o
Fv5BaJirHGb3ah76rQg9ZQABTqu8nIs65y3mFdayyLmFkrXLjQWSltB1E1H/Ih2R
CnSmbjd/t5LEz7hfNPetDT43ntBd2VvYdrwStwlQn1g7T9xQNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPW16VkgfLE4z/qNdGD7KfgmE7ZnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOGQxZWI2ODctMGUzMC0z
NTFjLTk5ODYtNjQ1MzhlNGM3OTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSacMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACbknfrIhBpu4NqPNSQovdR1agQn4pk9C8iKLiaf+IQ0SPD6cK43nLhg
NGa5AKAI2BdVaGWzoOx2F9Fbmhqoy8Ag3d+oE9QlLBZdx/6o9pX8uZ954NZRfB6V
IgMpTtGsI0n4g8sifOLr8z8I8jzEoo6Nk4FuOmyM5AH3/dK/w54KGmhKEyZ1bZe7
p2lxU2JrZK7EclR/dZIYUCxqfChfIG99PGcGNkYJRZEDQobFMcyfuCkwkdAWEmzP
Tw6i2sYGFSqFiLv+SUC+UKBvEe/bLiu0VEh/mmWx6iaO9Z6GsyANqtqaMUkFJ22C
sefzD5XyYRwEDdbdJuaMW4j3DOhkHh8=
-----END CERTIFICATE-----
Generated at Sun May 11 15:11:58 2025 by rpki-client