Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bf89a454-8b47-3f32-bb3e-22e0959c20e0.roa
File:                     bf89a454-8b47-3f32-bb3e-22e0959c20e0.roa (raw, json)
Hash identifier:          FupMiPjxL+rQWTj4zLzI2Be7XGzab/zdkiI9WFMW5e4=
Subject key identifier:   C5:1E:CA:E5:12:CB:B1:B6:F6:3A:62:04:38:99:13:90:3C:C6:16:2A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849B14A0088DDE62AA5F845C880
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bf89a454-8b47-3f32-bb3e-22e0959c20e0.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     44477
IP address blocks:        45.39.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:00:88:dd:e6:2a:a5:f8:45:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=ef8d8914-7342-47a0-97af-690306e53b8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ef:6d:c3:e7:55:1d:0d:eb:91:2f:b7:c6:d0:
                    da:3e:95:d5:13:e4:a7:23:d9:7e:e9:9a:0d:6a:55:
                    ba:26:1c:2c:5f:89:42:79:69:ce:d8:4a:9c:1f:86:
                    23:88:28:48:b6:23:e1:08:04:e6:75:a9:39:94:5d:
                    54:4f:48:8c:44:84:f3:1b:77:b6:1a:c8:0e:ad:ac:
                    08:f0:cf:76:3c:7b:af:72:a8:ad:aa:ea:a4:e7:6c:
                    56:0f:aa:4a:fa:6f:1b:8e:82:45:a4:a9:c2:58:5f:
                    3e:70:7a:91:c1:f2:84:f4:75:e1:37:2a:81:30:8e:
                    84:8a:59:15:db:e2:63:d8:91:c6:ce:ac:f7:bb:45:
                    c6:75:d6:ba:c0:1b:15:72:5a:a8:19:cd:bc:d9:10:
                    a1:4d:01:89:fc:c6:de:52:36:35:b9:25:e0:d8:b6:
                    b8:dd:66:12:19:9c:88:c5:b4:32:1d:c4:f9:a1:ef:
                    a8:57:ea:5e:57:a7:cf:b7:1a:a6:d4:86:08:5a:3f:
                    c4:c9:38:60:86:2f:b4:8a:08:e4:59:e7:09:32:72:
                    34:b7:14:75:d5:ff:67:61:d1:cd:d3:33:d2:1b:fe:
                    b4:f3:f7:e1:5f:76:b7:a8:d4:b7:7e:81:a0:6e:9b:
                    b7:06:0c:fe:59:1b:d2:f9:70:96:16:48:da:3e:18:
                    ee:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:1E:CA:E5:12:CB:B1:B6:F6:3A:62:04:38:99:13:90:3C:C6:16:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bf89a454-8b47-3f32-bb3e-22e0959c20e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:71:29:ff:b3:3a:cc:88:67:de:fe:5d:ee:45:2a:59:b4:49:
         20:02:36:ec:38:49:19:ea:34:51:9b:d0:47:aa:83:e3:33:cb:
         dc:9a:92:91:dd:06:4d:d9:38:bb:e2:9c:49:c7:4e:0d:d1:61:
         2f:38:55:50:03:6d:3c:ff:fc:43:32:ac:84:16:fa:c2:19:b8:
         3c:61:e1:41:a6:8f:6a:50:d8:9c:e6:a9:b7:74:24:dd:38:54:
         2e:c9:7a:c8:97:e3:cb:36:7a:92:f2:63:fd:60:f5:02:cf:13:
         74:99:6b:a2:29:d6:c8:28:1a:aa:0d:1e:7e:ea:57:08:e0:ae:
         d7:c7:34:ac:40:43:a8:58:cd:5d:89:50:48:b4:6c:0f:fd:07:
         e3:5b:a0:85:51:24:d6:c0:ea:cc:cb:4e:11:e2:01:b4:84:e7:
         cc:a2:7c:7a:f9:d7:d9:c9:56:fa:1f:a7:8f:a2:a3:4d:ef:6d:
         12:9e:08:0a:99:20:87:6c:44:cf:e8:54:24:42:f4:c6:d5:42:
         b8:7e:ab:48:5e:e4:03:d6:91:0c:89:16:98:59:eb:3e:cd:c9:
         fb:5b:0a:57:de:89:59:5e:f1:ce:28:7c:b6:36:60:63:d2:34:
         2f:31:ec:7f:f9:ae:2c:f3:b0:7a:90:45:b2:6a:e1:e8:85:e5:
         a8:eb:52:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 15:59:32 2025 by rpki-client