Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ae0831f5-55a7-3ae9-8fce-25e1571f523f.roa
File:                     ae0831f5-55a7-3ae9-8fce-25e1571f523f.roa (raw, json)
Hash identifier:          hTnBdlkT4NabtMZlqXVD76if4b6wstY1RWJP/BY7YEQ=
Subject key identifier:   30:89:23:A4:7E:04:07:4B:59:19:B5:62:71:63:52:90:E3:44:F7:AA
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849B57A246936743608C0F2F180
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ae0831f5-55a7-3ae9-8fce-25e1571f523f.roa
Signing time:             Thu 01 May 2025 13:00:58 +0000
ROA not before:           Thu 01 May 2025 13:00:58 +0000
ROA not after:            Wed 30 Jul 2025 13:00:58 +0000
asID:                     201106
IP address blocks:        45.39.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:7a:24:69:36:74:36:08:c0:f2:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May  1 13:00:58 2025 GMT
            Not After : Jul 30 13:00:58 2025 GMT
        Subject: CN=245eddf7-7692-476a-b115-36b53f49c776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4c:a8:fc:dc:b0:3c:83:31:19:4d:44:8d:5b:
                    05:0a:0b:cc:5a:99:f2:59:98:a3:33:c3:64:25:29:
                    71:73:a9:43:35:86:56:1a:cc:9a:19:a3:11:b4:d3:
                    17:e3:2a:ab:35:cc:e6:89:29:01:fd:e6:68:6a:67:
                    0d:23:62:15:e7:bd:99:e9:d9:d8:62:ea:c6:44:83:
                    c0:70:01:a9:78:a7:1e:72:b0:ec:73:fa:78:d2:68:
                    8d:cd:a8:54:42:99:ca:c8:44:48:e2:a7:e9:87:da:
                    45:15:99:63:09:f8:d7:5a:34:68:6f:eb:14:5f:f8:
                    0d:35:57:17:03:aa:91:57:32:71:98:7d:12:a5:8a:
                    13:6f:e2:15:f9:86:be:22:ec:2e:d5:cd:b5:53:07:
                    12:e2:15:ec:30:66:1e:c6:6f:f7:14:b0:cb:90:cd:
                    8d:47:29:0d:05:ed:5b:84:64:30:a3:60:12:75:37:
                    41:1c:c7:79:87:d6:26:20:df:99:45:09:e0:89:3a:
                    d5:59:0b:dd:73:5d:9e:c2:88:0e:11:5b:b1:15:f1:
                    6d:ae:2e:64:18:4d:04:fc:0f:42:4a:b5:50:7a:81:
                    87:bf:51:21:29:d2:6d:e4:bf:eb:44:99:bd:d4:b9:
                    d5:5b:0c:d9:a4:36:11:c1:b0:fa:d9:1b:b2:40:24:
                    46:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:89:23:A4:7E:04:07:4B:59:19:B5:62:71:63:52:90:E3:44:F7:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ae0831f5-55a7-3ae9-8fce-25e1571f523f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:7c:ac:60:8e:90:bd:85:71:b8:6b:c5:7c:c8:25:36:23:91:
         3a:a9:00:e8:51:79:4b:cb:67:2e:d6:7f:05:eb:4f:78:d8:d9:
         66:c3:0c:4c:69:b9:b2:5c:92:29:0c:c1:df:b3:b3:13:08:58:
         d9:99:c1:57:f5:65:17:1b:14:ca:7c:4a:19:5d:0f:b0:91:7b:
         ec:2b:f9:d4:99:fd:55:0a:99:90:62:6e:ba:cf:22:b8:1b:41:
         e1:59:cc:68:15:db:59:d9:d4:85:3c:b5:80:c9:59:ba:27:eb:
         fe:f1:d2:c3:19:35:44:b4:1e:11:a0:12:5d:06:1b:77:15:7b:
         a4:6d:ab:74:34:c8:bc:55:47:1b:c1:c1:15:c4:40:79:26:7b:
         ee:14:2b:87:53:49:70:ab:45:93:93:3b:da:a1:67:03:fb:32:
         f9:07:ad:58:9e:3a:06:0b:8b:07:e7:f7:1a:3e:e5:08:46:3a:
         c6:0f:fc:45:d2:02:71:37:9e:96:55:23:cb:ca:57:df:c9:f0:
         06:57:e3:03:1f:0a:e0:10:fd:e1:78:b0:c9:8b:db:26:0e:17:
         85:17:7f:e8:89:ca:9f:7e:38:c1:7b:ff:97:68:57:30:92:b5:
         e5:47:ac:29:bd:a3:7b:9c:ca:ee:ad:62:5d:e6:50:f7:d3:cf:
         29:3c:be:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1eiRpNnQ2CMDy8YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk
MjQ1ZWRkZjctNzY5Mi00NzZhLWIxMTUtMzZiNTNmNDljNzc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkyo/NywPIMxGU1EjVsFCgvMWpnyWZijM8Nk
JSlxc6lDNYZWGsyaGaMRtNMX4yqrNczmiSkB/eZoamcNI2IV572Z6dnYYurGRIPA
cAGpeKcecrDsc/p40miNzahUQpnKyERI4qfph9pFFZljCfjXWjRob+sUX/gNNVcX
A6qRVzJxmH0SpYoTb+IV+Ya+Iuwu1c21UwcS4hXsMGYexm/3FLDLkM2NRykNBe1b
hGQwo2ASdTdBHMd5h9YmIN+ZRQngiTrVWQvdc12ewogOEVuxFfFtri5kGE0E/A9C
SrVQeoGHv1EhKdJt5L/rRJm91LnVWwzZpDYRwbD62RuyQCRGJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDCJI6R+BAdLWRm1YnFjUpDjRPeqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYWUwODMxZjUtNTVhNy0z
YWU5LThmY2UtMjVlMTU3MWY1MjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSfLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIt8rGCOkL2FcbhrxXzIJTYjkTqpAOhReUvLZy7WfwXrT3jY2WbDDExp
ubJckikMwd+zsxMIWNmZwVf1ZRcbFMp8ShldD7CRe+wr+dSZ/VUKmZBibrrPIrgb
QeFZzGgV21nZ1IU8tYDJWbon6/7x0sMZNUS0HhGgEl0GG3cVe6Rtq3Q0yLxVRxvB
wRXEQHkme+4UK4dTSXCrRZOTO9qhZwP7MvkHrVieOgYLiwfn9xo+5QhGOsYP/EXS
AnE3npZVI8vKV9/J8AZX4wMfCuAQ/eF4sMmL2yYOF4UXf+iJyp9+OMF7/5doVzCS
teVHrCm9o3ucyu6tYl3mUPfTzyk8vk8=
-----END CERTIFICATE-----
Generated at Mon May 5 18:38:19 2025 by rpki-client