Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dad4b2f2-8771-38b0-be0b-5302a5cb1dde.roa
File:                     dad4b2f2-8771-38b0-be0b-5302a5cb1dde.roa (raw, json)
Hash identifier:          30cc117ai7JXNUM3I+HVAPwTAwOpUGKY2WFej+1xJBY=
Subject key identifier:   58:EC:CF:0E:FF:6D:26:0A:43:A1:2E:4D:42:19:9E:91:85:3C:A3:9A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849B57A31585A7258ECB6F91D20
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dad4b2f2-8771-38b0-be0b-5302a5cb1dde.roa
Signing time:             Thu 01 May 2025 13:00:58 +0000
ROA not before:           Thu 01 May 2025 13:00:58 +0000
ROA not after:            Wed 30 Jul 2025 13:00:58 +0000
asID:                     50131
IP address blocks:        45.39.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:7a:31:58:5a:72:58:ec:b6:f9:1d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May  1 13:00:58 2025 GMT
            Not After : Jul 30 13:00:58 2025 GMT
        Subject: CN=858154c3-1f1e-496f-b94c-bb012c9059a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e6:42:ce:15:79:b1:20:d0:17:f5:f4:bf:66:
                    4d:1e:be:25:3a:e0:18:64:a4:e5:64:47:c7:15:2b:
                    41:b9:ef:4b:7b:0f:54:1f:fd:1c:d8:b5:e3:9d:7a:
                    dc:cc:b8:1c:2c:53:dc:71:64:cd:21:bb:57:b7:90:
                    ba:f5:c9:0c:86:46:1c:69:1d:4a:2d:a0:06:e8:23:
                    83:47:87:05:4c:8e:d6:b8:c9:dd:90:3a:03:16:71:
                    4b:d1:26:35:a1:64:75:40:02:fb:12:7b:36:ae:ed:
                    7b:bb:7e:2c:17:3e:11:f4:60:03:43:e8:59:0c:33:
                    ca:7d:a5:fb:7b:87:37:ad:68:70:78:2c:86:d4:b8:
                    d4:15:96:4b:bb:9b:9e:a4:6c:ec:a3:dc:f7:36:28:
                    ac:88:06:e7:45:4e:21:2f:f0:6f:48:9a:83:65:b9:
                    ca:c5:73:93:1f:2d:78:7b:87:ae:f5:f8:cc:35:ab:
                    dc:e6:b9:e0:ca:6e:ef:8c:95:d8:2a:a3:b3:d5:ab:
                    18:b2:d8:72:a9:fc:f8:f7:5e:b2:4d:c6:ff:11:25:
                    0b:9c:3e:4f:49:ba:10:c9:80:98:05:32:9d:3b:0e:
                    e5:9d:b7:70:ad:d7:cc:20:b1:42:a7:35:54:bb:49:
                    cf:48:d0:42:2e:b6:e5:21:df:5e:b1:7c:cd:ba:db:
                    b3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:EC:CF:0E:FF:6D:26:0A:43:A1:2E:4D:42:19:9E:91:85:3C:A3:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dad4b2f2-8771-38b0-be0b-5302a5cb1dde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:e4:a5:f1:2a:3b:f4:2d:ed:1b:9f:07:32:8f:12:94:d1:3d:
         79:8a:1f:64:8f:34:12:95:85:0c:02:13:ee:b3:0d:fb:53:6c:
         3b:14:74:e1:ac:5a:43:c7:d8:1d:25:8d:42:34:6c:8a:45:a9:
         a7:72:5d:d5:ea:4b:17:ce:f0:1a:11:68:96:0c:35:20:a7:ea:
         70:90:95:22:63:78:26:82:6b:cc:aa:b9:ba:e5:1a:61:7c:f6:
         63:cc:05:83:68:50:66:a2:e5:04:4a:7d:42:51:20:46:16:60:
         d7:7b:c0:63:10:b3:83:5f:a1:96:39:91:28:da:95:b1:32:44:
         d6:f9:8b:32:65:52:94:0d:e9:ce:17:97:b3:75:13:11:a2:2d:
         8b:3c:83:d8:59:9f:af:bf:6a:a4:b8:82:e4:04:3c:86:dc:db:
         0e:c2:31:4b:2a:9f:68:4a:aa:a2:48:03:db:57:6b:a1:18:00:
         01:15:60:a0:bc:bd:1f:83:1f:29:70:5e:a4:19:ea:ec:df:0d:
         8d:eb:d3:ab:89:f6:51:16:26:d8:6c:90:81:6d:86:a2:a2:62:
         0b:5c:e3:aa:17:42:8e:35:56:d0:47:42:18:00:29:f4:2d:56:
         70:04:0d:6b:0b:11:dd:5e:a4:4a:f9:3e:bc:f6:bc:b7:fb:e2:
         e8:c9:e9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:45:59 2025 by rpki-client