Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a6cccabd-5179-3939-a707-5f68202992e8.roa
File:                     a6cccabd-5179-3939-a707-5f68202992e8.roa (raw, json)
Hash identifier:          7uCZuxHA4LjW1LkXEJEYXjkuRpKcf640PN1f0+UzuIo=
Subject key identifier:   C8:CE:92:57:7C:C1:1A:4F:26:93:88:F2:52:D2:43:CC:2B:15:FA:49
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849CFFF6E1F46E1DAF7898CCD00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a6cccabd-5179-3939-a707-5f68202992e8.roa
Signing time:             Sun 11 May 2025 01:00:47 +0000
ROA not before:           Sun 11 May 2025 01:00:47 +0000
ROA not after:            Sat 09 Aug 2025 01:00:47 +0000
asID:                     18779
IP address blocks:        45.38.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cf:ff:6e:1f:46:e1:da:f7:89:8c:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 11 01:00:47 2025 GMT
            Not After : Aug  9 01:00:47 2025 GMT
        Subject: CN=bc12f3d7-54ba-4c79-9b2e-5e4b1fcc10fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ac:ad:04:01:ec:1f:88:c6:55:9c:62:c5:8e:
                    af:b0:59:47:ff:b3:16:1e:25:ec:47:14:38:c6:e0:
                    2e:b0:0d:b8:d9:aa:71:97:77:44:a3:26:03:06:b1:
                    45:17:5a:4f:bb:08:0f:09:cd:5f:98:0e:80:41:bc:
                    1a:41:d4:91:13:95:64:82:24:07:33:42:21:93:18:
                    b0:3a:c6:53:1a:3c:ff:47:0d:10:2e:bf:4e:de:62:
                    6a:30:d2:43:64:f2:be:c7:c6:1c:e5:76:0b:f7:dd:
                    80:73:a4:a5:ab:53:0a:77:25:71:98:17:6c:dd:85:
                    d5:19:48:a3:4d:92:dd:ab:89:42:7b:c1:25:79:1b:
                    ca:c1:36:e7:2e:98:3b:85:6f:72:42:03:89:b3:29:
                    83:37:3f:43:d2:28:9a:65:57:a4:c9:46:c7:8a:42:
                    82:ac:ad:b2:f9:a0:b0:65:2f:48:6b:ca:51:95:7e:
                    06:4d:48:54:ec:ba:83:e2:d5:85:79:01:43:a1:ad:
                    08:22:ef:9b:a6:72:3b:8d:c1:ce:a7:05:d7:b2:51:
                    c7:c5:b4:30:88:32:17:a4:e5:9e:8d:db:df:42:3e:
                    17:e9:2b:de:56:4d:f5:24:bd:a3:aa:de:9e:2b:4e:
                    08:a4:46:55:c4:2c:dd:a2:a3:77:5c:2b:a2:a6:29:
                    e3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:CE:92:57:7C:C1:1A:4F:26:93:88:F2:52:D2:43:CC:2B:15:FA:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a6cccabd-5179-3939-a707-5f68202992e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:39:db:7a:ef:c2:a5:b8:fd:94:67:42:48:a1:39:ef:76:83:
         43:ba:ba:c4:f9:42:4e:b8:ae:47:ed:e8:6a:5e:29:e0:dc:dc:
         7b:ac:cf:61:d8:d1:70:b0:18:e7:46:ec:0e:3a:00:b2:fd:01:
         b3:a6:b8:2c:72:71:ac:33:0f:66:cf:7c:0c:1a:4e:63:ba:5d:
         9d:d7:0a:65:5e:fd:ff:b5:cd:d9:4a:27:46:35:dd:98:98:aa:
         a3:ef:ed:bb:ee:77:ef:77:bd:5d:96:2d:fb:a0:21:04:aa:23:
         61:23:43:3a:ba:d9:71:4a:a4:d7:6d:36:46:10:69:d3:87:d9:
         b3:aa:9e:fc:ed:4b:03:2c:4e:a2:89:25:f3:01:74:47:ba:7d:
         11:f3:2e:bf:1d:93:cc:89:ad:bf:4f:42:ed:5c:ca:c0:b3:c0:
         af:56:c0:15:9e:d8:81:ad:5b:19:cc:40:66:c2:75:ca:05:19:
         d1:53:bc:10:02:7e:88:69:29:2f:ec:29:3e:14:60:f9:b7:6b:
         7e:66:ff:c6:0c:1f:ce:80:2d:86:6b:4f:e8:b5:74:d8:c1:ae:
         68:95:b4:7a:d7:68:98:3a:a8:3d:c3:53:e6:73:df:fe:6f:8e:
         8c:44:eb:b5:cb:6c:b5:bc:5c:8f:20:a0:5f:0e:f9:47:eb:32:
         98:9d:cb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:24:46 2025 by rpki-client