Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bda71ed2-9e31-3f4b-b50c-5771e494c276.roa
File:                     bda71ed2-9e31-3f4b-b50c-5771e494c276.roa (raw, json)
Hash identifier:          dST7EvuWxdIlWDGk4D5/xdr/cpqONJFgei4DIqbRDxo=
Subject key identifier:   14:95:26:40:32:D9:D0:24:7C:79:74:8B:B0:EC:3F:4B:EC:FD:D1:51
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A43DB0A9BC2DB76A98BBBDDC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bda71ed2-9e31-3f4b-b50c-5771e494c276.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     56971
IP address blocks:        45.38.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:0a:9b:c2:db:76:a9:8b:bb:dd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=d15537d9-9934-4986-9453-1c62d36a144e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:13:0f:c0:34:ae:9f:a5:ae:05:42:e3:7f:b2:
                    b9:45:c8:1b:ed:30:5f:fb:ee:e6:8a:30:70:ed:16:
                    a9:64:2a:86:cd:0c:4e:d0:5e:6f:67:60:35:38:ca:
                    13:09:b0:a4:b8:03:17:53:2d:74:63:f8:fa:14:78:
                    28:7e:9d:0c:cb:46:2d:6c:8c:c1:bf:b2:df:7a:1a:
                    a7:38:bb:cd:4b:87:ef:37:3d:f3:e1:40:e5:ec:ba:
                    6e:4f:18:37:76:de:dd:4a:ef:e2:2b:01:f9:10:b6:
                    f4:73:4a:55:dc:9c:1a:0d:2c:c2:e5:c4:c4:e2:9a:
                    bb:c0:a6:31:24:2f:8a:70:de:19:53:4b:3d:9d:86:
                    fa:bf:ee:db:83:80:fc:66:57:45:49:a1:5f:26:b0:
                    9f:8b:49:bb:8c:23:29:53:6e:25:02:4c:70:e0:5a:
                    59:72:22:1e:9b:bf:41:3a:18:86:d0:b2:23:1e:d5:
                    5d:02:6e:0d:02:c5:1f:1b:89:2f:76:02:ba:9c:bd:
                    a9:af:ea:8c:91:14:da:3a:ca:1b:9a:34:1d:05:6e:
                    dc:d0:17:0b:b3:9e:ac:d6:92:c9:66:cc:5c:48:32:
                    ac:d6:0c:58:ae:31:84:a6:b0:ae:b2:1b:60:87:24:
                    dd:7a:91:9e:1d:e1:b8:14:d9:35:56:39:83:9f:ca:
                    ea:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:95:26:40:32:D9:D0:24:7C:79:74:8B:B0:EC:3F:4B:EC:FD:D1:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bda71ed2-9e31-3f4b-b50c-5771e494c276.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:4e:10:ce:73:f1:72:33:2f:26:85:54:c5:eb:29:79:43:41:
         50:c4:52:62:bf:c1:51:5b:31:eb:43:7d:f3:a2:e4:b1:a0:07:
         ad:55:4b:d7:27:0f:1f:2b:b5:b9:8c:ab:2a:dc:95:ff:90:f8:
         ca:69:8e:f6:1b:3f:2b:01:d7:51:cd:77:9c:78:a8:ec:9d:dd:
         51:0a:d7:bc:e9:2d:c2:68:ee:7f:d7:02:dd:3a:fb:95:8b:a7:
         93:e3:b8:69:7b:59:94:22:a3:8e:7f:10:c0:27:ac:3d:70:11:
         a7:7f:90:b5:e4:67:35:ad:12:02:c9:dc:ed:30:79:4c:c1:8b:
         3e:d8:51:de:43:e7:16:92:d0:a4:29:e2:21:4d:8d:db:cb:d8:
         38:3b:4a:af:45:72:c2:52:76:b3:3d:5d:dd:9d:34:b7:58:a6:
         e1:d7:30:89:49:f2:b7:07:f4:69:5e:d0:e4:2a:bd:36:7f:f2:
         91:16:ff:04:98:71:6e:21:ee:35:d4:8d:4d:70:38:b4:d8:ed:
         9b:36:68:d3:dd:2e:95:66:ac:52:f2:40:b0:99:7d:ba:db:f6:
         03:7d:02:6a:1f:e3:b1:a3:cb:b8:65:a4:6f:1f:6d:76:90:b9:
         34:56:17:60:9f:c1:67:e8:fc:19:ca:ef:8a:d6:a4:23:3c:c9:
         89:42:63:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 12:33:42 2025 by rpki-client