Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a58076d2-db72-3b9b-bc9f-e6a88f938767.roa
File:                     a58076d2-db72-3b9b-bc9f-e6a88f938767.roa (raw, json)
Hash identifier:          drczGYdgJzGm38t67K6PRF9UHnJrMBWDUfPtnCVs7/s=
Subject key identifier:   D1:D9:38:CA:A6:55:DF:DA:6A:A9:31:BF:F2:4E:BB:E3:D5:99:04:C7
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B64CE6DFA477E65385EC7C100
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a58076d2-db72-3b9b-bc9f-e6a88f938767.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     44559
IP address blocks:        45.38.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:6d:fa:47:7e:65:38:5e:c7:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=868d0816-49ae-492d-b76f-aab0b3b2c372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3c:9c:b1:3e:24:f3:d3:87:cd:58:66:2f:93:
                    13:6b:90:af:96:ec:ad:68:03:b6:ef:c3:6d:bc:51:
                    45:b4:0f:fe:3d:39:0d:4f:2d:ac:f1:9a:9c:40:ba:
                    5b:eb:b4:9b:6b:12:93:aa:34:a7:c7:98:88:50:7e:
                    b8:60:76:be:a5:cc:9e:e9:e8:c4:96:e7:f2:34:e2:
                    45:b5:81:22:22:74:50:be:cf:1a:0a:d7:ca:12:2d:
                    b4:16:ee:78:ea:5a:85:90:a5:8f:3f:a4:4b:8a:ac:
                    c6:fc:b0:83:dc:5f:bd:1f:e6:18:bf:6e:07:69:ad:
                    ba:54:06:7b:dd:f4:2e:76:80:9d:08:f2:dd:9a:fc:
                    ca:26:50:67:b4:9c:3a:bf:dc:07:d3:fd:2d:63:b9:
                    2d:60:44:64:f2:ec:77:ce:bd:bd:7f:af:35:c0:d1:
                    6c:af:7f:d4:d4:5c:4f:26:8a:e4:f9:26:75:62:87:
                    16:b0:b5:77:a7:72:ee:0e:5c:3d:f1:f3:23:dc:ee:
                    c4:b6:8e:fe:ce:05:51:9c:33:8a:57:83:4d:48:77:
                    c1:7e:a3:af:db:c7:f3:ea:13:5e:93:b9:c6:2f:db:
                    37:c1:59:36:53:12:5c:f3:f2:a0:33:8f:91:61:4a:
                    a5:ea:6c:e3:ed:9b:2b:fe:ac:47:3d:63:5b:ff:48:
                    c6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D9:38:CA:A6:55:DF:DA:6A:A9:31:BF:F2:4E:BB:E3:D5:99:04:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a58076d2-db72-3b9b-bc9f-e6a88f938767.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:8d:30:d9:54:29:92:2b:9b:23:f7:d1:5a:e1:37:54:fc:37:
         86:1e:32:11:a7:57:7f:c9:f4:ea:ec:f8:6e:a7:d9:d8:65:06:
         64:e2:49:d3:bb:81:90:ec:35:2a:02:18:8a:db:9b:3a:8f:0a:
         f9:3e:c7:ac:09:8e:e9:9b:6b:0f:6a:0c:f0:7d:23:34:33:2b:
         cc:c5:8d:2e:22:3c:f6:a4:c0:b6:1b:04:6c:e6:fe:f5:88:05:
         8f:09:15:04:21:66:3d:8f:03:ec:33:f9:fa:bc:4f:ba:50:b2:
         b1:d8:56:c3:22:2e:72:cd:8a:04:63:59:ee:17:87:d3:20:d3:
         0f:16:cb:6b:00:3a:0e:38:a2:09:7d:dc:be:b4:81:8d:14:4f:
         94:8d:9d:b9:50:3d:e5:a7:8a:72:fb:4c:d2:32:c7:e5:9d:a5:
         bc:45:d3:bd:ad:af:e1:0e:3d:ce:87:f4:78:71:b8:de:a5:0c:
         b2:26:71:b8:a4:1d:1f:c0:90:d8:8c:5a:13:85:d9:28:02:f7:
         8a:73:3e:c6:1b:c7:36:d5:49:a6:91:69:e7:44:31:b6:d2:58:
         82:ef:5b:b2:3a:7d:ea:17:59:c9:86:bc:2a:06:aa:b7:02:e2:
         18:8d:af:69:fd:5a:38:fe:1f:2d:22:39:89:e2:92:89:28:2d:
         cc:b0:36:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:58:40 2025 by rpki-client