Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ca794202-fb43-3e4f-8448-779f532c1979.roa
File:                     ca794202-fb43-3e4f-8448-779f532c1979.roa (raw, json)
Hash identifier:          pYO0NGs9i/sWIZna8TOnaHHmzLhMN4rjrKn3gTKpOeM=
Subject key identifier:   02:24:05:1C:D1:BE:45:62:5F:A2:5F:51:D9:10:0A:B2:73:D9:03:72
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B9177720818E5A2E0B3983E00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ca794202-fb43-3e4f-8448-779f532c1979.roa
Signing time:             Sun 19 Oct 2025 01:00:30 +0000
ROA not before:           Sun 19 Oct 2025 01:00:30 +0000
ROA not after:            Sat 17 Jan 2026 02:00:30 +0000
asID:                     18779
IP address blocks:        45.39.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:91:77:72:08:18:e5:a2:e0:b3:98:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 19 01:00:30 2025 GMT
            Not After : Jan 17 02:00:30 2026 GMT
        Subject: CN=8d515b5e-3fd9-45cf-954b-e157b96781a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:84:78:1b:65:bd:dd:99:2d:91:72:0e:d1:04:
                    31:81:a5:cd:7a:28:0b:f5:fa:7c:6d:c3:4f:64:19:
                    60:60:ec:ba:bc:19:a0:2d:48:e3:e5:11:e1:05:d7:
                    33:a3:47:79:d3:30:f3:ff:d2:d9:68:c5:f4:29:06:
                    10:06:20:db:35:16:d5:13:d6:ee:6e:30:fa:71:04:
                    a1:62:6f:c9:e3:09:b9:3d:da:09:ec:48:a0:1c:a5:
                    b9:ea:19:0d:83:70:3c:a5:c8:41:f0:10:5a:51:92:
                    8b:cd:fe:6c:79:02:bc:17:3d:a4:e1:36:2a:3c:8c:
                    85:76:eb:f2:50:12:fa:8d:17:05:cd:77:f2:d0:79:
                    49:bf:3e:d2:6a:e0:84:f1:05:16:20:f4:ab:fe:9c:
                    3f:47:45:8d:07:63:bd:2a:55:a3:a9:f3:2a:50:37:
                    8e:04:ed:b6:ba:84:cd:59:a8:b4:80:e2:14:58:ad:
                    5f:0c:11:9d:9c:f7:4c:95:1b:f8:dc:0e:86:2c:fa:
                    a6:5e:0c:cb:07:c6:9c:28:cd:c6:89:de:5f:50:c2:
                    bd:bc:49:76:6a:5f:10:b7:26:09:d1:eb:b2:c5:da:
                    68:52:4a:fc:f6:bb:da:1e:41:76:5a:85:57:56:8b:
                    28:dc:74:bb:50:9e:9f:cc:a1:6a:b8:4e:44:18:fb:
                    fb:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:24:05:1C:D1:BE:45:62:5F:A2:5F:51:D9:10:0A:B2:73:D9:03:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ca794202-fb43-3e4f-8448-779f532c1979.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:c0:8b:dd:dc:9a:d7:fe:60:f0:92:6b:79:4f:4f:2e:00:7f:
         f4:1c:87:1c:65:e3:05:d2:a5:99:6e:94:03:66:68:87:23:59:
         67:ba:7b:d3:05:3a:40:29:16:28:9e:5f:07:b5:69:e6:18:9b:
         5c:08:aa:b3:8d:a9:93:b9:c3:b3:ec:8a:9e:94:b0:cf:0e:dd:
         bf:9d:b8:f9:c7:36:7a:23:4e:3a:ef:1e:c1:37:d8:49:26:42:
         5a:46:51:76:26:1e:c5:4b:41:ad:57:65:24:da:f2:d8:d7:7f:
         78:5f:c5:33:b6:87:c5:1e:16:8e:66:23:50:cb:e3:54:01:7b:
         4e:2d:d1:36:6d:cd:23:c0:20:4c:59:15:00:e7:e2:70:a6:7b:
         15:c6:5e:f4:0f:42:29:de:fd:33:d3:09:f2:ca:0a:ca:a7:7c:
         a7:00:3e:a3:8c:dc:cd:2d:db:c6:5c:3e:6a:99:56:f0:a8:04:
         53:a0:ea:03:65:d7:bc:11:23:1f:26:eb:bc:00:13:e1:b8:98:
         b4:aa:5b:c2:37:c0:2a:3a:24:73:7e:df:3a:6e:1d:59:64:1d:
         f5:02:fb:03:c9:d8:20:da:c9:01:ad:cd:41:0f:6d:04:36:f6:
         af:71:2c:43:78:3f:1f:c6:a3:e1:bb:b1:90:85:fa:dd:f5:0f:
         84:68:72:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:56:27 2025 by rpki-client