Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/da910c1f-0654-3580-98aa-e9ff706085cd.roa
File:                     da910c1f-0654-3580-98aa-e9ff706085cd.roa (raw, json)
Hash identifier:          moNgbT0w3GVR+dNKYCB8x+FBbIDlT16pDJbzUq8Xyrw=
Subject key identifier:   B6:9F:64:68:98:8B:C5:F9:C8:90:05:D4:43:BE:B3:90:27:8F:70:69
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AEF52D0ADA145B6E6DE9A0480
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/da910c1f-0654-3580-98aa-e9ff706085cd.roa
Signing time:             Thu 21 Aug 2025 23:05:49 +0000
ROA not before:           Thu 21 Aug 2025 23:05:49 +0000
ROA not after:            Thu 20 Nov 2025 00:05:49 +0000
asID:                     400536
IP address blocks:        45.38.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ef:52:d0:ad:a1:45:b6:e6:de:9a:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 21 23:05:49 2025 GMT
            Not After : Nov 20 00:05:49 2025 GMT
        Subject: CN=ae814d33-5fdd-42e1-a090-dcad19f98fce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:dc:0b:a5:d6:11:98:7e:f8:94:0b:2e:07:e3:
                    ee:e0:c8:60:84:fd:6d:38:2f:7d:7d:30:11:c9:f4:
                    df:d5:64:81:a3:f6:c7:5a:a1:64:7d:14:2f:5d:2f:
                    d6:5a:da:41:55:f6:f4:1e:a9:11:d4:3c:75:47:e2:
                    1c:48:bf:a1:2d:a6:90:02:43:8d:65:c5:7a:13:08:
                    6c:d5:3b:33:f3:af:a0:4c:27:d4:6e:1a:d2:9e:b3:
                    32:bd:71:8a:c7:27:8f:00:19:08:d2:a1:d6:bb:20:
                    6b:10:2c:f9:fe:42:4c:89:24:66:e6:f6:fe:b1:aa:
                    27:bb:f7:86:6a:0b:6f:b7:f3:f7:8d:13:ce:33:93:
                    1f:aa:91:63:c5:e1:bf:44:1b:0a:7e:0f:f8:9d:2c:
                    10:b3:1f:c0:fe:a5:ac:21:5f:7d:06:fe:da:17:69:
                    98:46:9a:97:23:9b:ba:29:74:52:46:81:23:24:e6:
                    aa:cd:1e:95:19:a7:0c:f8:a9:8b:31:1f:34:51:62:
                    58:dc:42:fc:33:c7:7f:f5:68:d6:8a:f9:1e:75:18:
                    fd:d7:b9:1e:03:ff:5d:2d:cf:0d:17:1c:6e:09:1c:
                    e1:0d:3e:19:8b:17:44:41:71:87:09:5f:65:ec:b3:
                    49:67:47:58:71:3f:54:bd:8f:14:07:ad:e4:cc:d2:
                    a9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:9F:64:68:98:8B:C5:F9:C8:90:05:D4:43:BE:B3:90:27:8F:70:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/da910c1f-0654-3580-98aa-e9ff706085cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:fd:96:f4:7c:f8:fb:e3:a6:bf:26:9f:58:fa:fb:dd:01:e9:
         03:c4:5e:83:30:2c:91:44:e7:de:1d:65:4d:b0:d5:6d:eb:38:
         c7:7e:59:b3:2a:be:fb:36:d8:70:07:b7:31:36:45:6f:c9:62:
         45:c9:79:8c:00:02:9f:6a:83:48:a0:4b:2a:16:d6:0e:98:df:
         de:ad:a9:df:67:8c:9c:87:4a:d7:69:f0:dc:82:47:c0:b8:75:
         45:5c:83:49:e8:af:49:70:04:7a:99:d6:a2:13:28:b0:50:98:
         38:9d:82:6e:3e:5c:92:b0:2f:67:6f:b8:a8:a5:d6:6d:1c:6f:
         30:e3:9d:de:c8:51:9b:fc:69:c5:87:c8:d1:a1:77:f3:70:b8:
         35:e7:f7:d1:9f:64:bc:ca:f3:16:cf:5c:da:5f:f7:f0:8e:02:
         ab:b7:95:28:7b:7a:a9:3d:10:29:46:3d:e6:d5:e4:5f:fa:9a:
         da:fb:2f:1c:1f:ed:10:5c:f3:ee:ee:5f:21:a4:2a:fa:09:d2:
         4d:27:d5:a5:16:2c:cb:33:c6:66:a5:89:a3:43:95:e9:be:21:
         7d:b3:d4:f6:1c:8e:79:0a:ea:96:08:dd:60:d8:ef:12:11:54:
         28:25:03:ae:d7:83:b1:a6:9d:14:d0:02:73:8d:2d:52:ac:a0:
         68:b9:e9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:18:50 2025 by rpki-client