Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ad8fe25e-57a6-329f-84d1-933201141635.roa
File:                     ad8fe25e-57a6-329f-84d1-933201141635.roa (raw, json)
Hash identifier:          4mStrG84KVJL9ZtaYFszFxQ6xd9YogQkRRRle294DEw=
Subject key identifier:   60:BF:19:DF:6F:A2:70:69:C8:36:30:82:6B:EB:86:94:F5:83:91:4D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849EAE6F8714DB27FD775F3BFC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ad8fe25e-57a6-329f-84d1-933201141635.roa
Signing time:             Tue 20 May 2025 16:18:21 +0000
ROA not before:           Tue 20 May 2025 16:18:21 +0000
ROA not after:            Mon 18 Aug 2025 16:18:21 +0000
asID:                     22340
IP address blocks:        45.39.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:e6:f8:71:4d:b2:7f:d7:75:f3:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 20 16:18:21 2025 GMT
            Not After : Aug 18 16:18:21 2025 GMT
        Subject: CN=927460c5-826d-477a-a03d-04019b836b36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e6:0a:2d:46:5a:d1:a8:af:a7:df:d6:3e:e3:
                    66:5f:90:d8:80:fc:c9:e9:46:92:d4:e7:63:71:33:
                    3e:b6:a3:6f:4b:2e:d7:cc:b8:33:c1:fa:df:1a:f6:
                    d4:74:f9:90:96:a4:ff:8f:e2:72:1a:31:12:b1:9b:
                    d6:b9:ab:c4:55:7d:8f:38:a3:c1:61:98:42:45:ce:
                    e7:b0:85:b6:5f:8c:23:01:9d:2e:68:53:d1:87:c9:
                    d1:ec:d7:55:0a:73:a4:57:78:9d:89:c5:fa:1f:9e:
                    a4:b3:ee:d5:fc:d0:15:e8:ee:d9:3f:c2:ec:21:6e:
                    9c:e5:26:95:a7:a6:ff:3a:25:d3:15:86:e0:a4:13:
                    5f:c4:54:f1:80:32:2f:22:d9:66:1a:96:77:e7:29:
                    19:ef:79:31:3d:38:3c:23:c7:4e:b4:94:db:8d:98:
                    e5:e3:eb:05:07:4d:6d:ad:d5:8d:41:cd:6c:0b:b5:
                    52:27:08:26:cf:d1:2a:21:8d:52:9e:8c:72:89:b8:
                    e8:97:a8:85:f9:f8:ea:a0:60:19:17:e9:63:a0:d2:
                    53:f7:9f:20:f6:18:13:ed:54:0e:58:61:be:d5:09:
                    10:39:10:c4:20:d6:67:23:ea:59:f7:7c:2e:e3:ac:
                    a6:1a:61:27:f1:51:95:04:5d:74:45:10:d2:05:25:
                    9b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BF:19:DF:6F:A2:70:69:C8:36:30:82:6B:EB:86:94:F5:83:91:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ad8fe25e-57a6-329f-84d1-933201141635.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:5f:2b:20:94:01:62:24:18:3f:16:f6:a1:47:37:53:f0:97:
         8d:af:51:2c:d1:7b:a0:25:01:75:22:7b:a3:ee:8f:99:cf:9a:
         7d:e4:b3:c1:97:99:76:e5:93:ab:33:ef:b6:e0:92:fe:e6:1d:
         4a:81:72:15:5e:4b:bc:e1:98:2a:a9:e2:bc:f1:b5:2b:60:09:
         e4:61:bf:2d:ca:6a:5f:6f:7d:dc:62:b2:da:0b:84:8e:cc:d4:
         7b:8b:9a:b9:92:be:ae:30:b9:5d:f5:9a:d4:f1:b6:1f:bb:80:
         82:ae:e3:be:71:c4:62:52:e4:68:58:c6:2f:66:86:9a:25:bb:
         a6:7f:af:60:7c:07:99:c0:8c:9f:f2:27:e6:f5:77:42:1e:ff:
         d2:ba:fb:af:42:35:ff:2b:cd:78:26:07:f6:65:a4:eb:42:ee:
         11:f4:ab:2e:f0:18:a4:1c:89:28:0d:6f:15:d2:a3:0a:75:b0:
         c4:fa:f1:1a:cc:bb:5a:3b:4e:d4:16:35:a5:c7:9a:d5:ad:37:
         32:0f:ea:c8:65:2f:0b:aa:b0:37:92:0a:50:09:9a:1e:9a:b0:
         23:15:a0:e9:55:df:3a:c9:ee:d7:ab:14:ff:84:3e:9b:bc:21:
         98:3f:8a:4a:fa:54:95:95:f0:93:54:ac:a9:da:4d:97:38:c7:
         9d:4c:0a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:30:21 2025 by rpki-client