Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/df798109-dd7f-3686-abe9-d6aa5238bc67.roa
File:                     df798109-dd7f-3686-abe9-d6aa5238bc67.roa (raw, json)
Hash identifier:          7aJceJBA56qyQg2JfzGItqi33p+vyeG+o5Ng2gWhK8k=
Subject key identifier:   FC:D3:2E:D9:D1:37:B0:6C:4E:65:2F:56:FA:FD:56:0F:ED:65:85:A0
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AEE2692E6219988F8FF900520
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/df798109-dd7f-3686-abe9-d6aa5238bc67.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     212238
IP address blocks:        45.39.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:92:e6:21:99:88:f8:ff:90:05:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=2beb3822-2472-494b-bd15-699b65d793b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:39:7b:5d:72:38:cc:9b:de:26:57:9f:38:a1:
                    0d:fa:27:35:c1:75:4b:b5:60:a0:71:9a:0e:93:67:
                    ea:c4:22:e0:a8:10:81:e8:fa:37:c4:50:a9:0e:3c:
                    52:ef:06:0e:32:88:b4:b6:dd:59:7c:50:07:10:b4:
                    f3:b6:11:15:4d:4a:1d:2d:5b:26:71:bf:07:c5:b4:
                    40:cd:5a:54:69:e9:c1:c8:e0:ab:24:ab:ba:8a:6f:
                    3a:55:27:3d:a7:27:a9:2f:fd:d4:1f:97:75:a2:5f:
                    22:bc:66:85:54:de:17:e3:b6:8b:f7:5a:50:4e:df:
                    e8:5e:af:00:2c:38:0a:86:04:1f:61:a8:b6:b5:8f:
                    a2:c1:8b:e0:1f:0d:98:f8:34:f7:cb:58:63:8b:1c:
                    dc:91:44:25:96:af:5b:8f:73:ba:fb:0a:56:de:d6:
                    76:59:db:08:58:49:c6:71:f6:ab:11:92:42:60:5f:
                    58:f0:17:bb:96:a4:bb:a5:7c:b6:35:f5:23:03:0a:
                    d2:ed:5d:26:b9:fb:04:3a:97:44:5c:18:27:94:b2:
                    f4:95:90:78:bd:97:8f:54:89:46:e9:e6:a3:39:c8:
                    6e:68:41:fa:90:00:63:3b:e6:79:10:35:c4:39:59:
                    1e:c5:96:cb:98:43:a2:2b:dc:cb:6d:66:22:66:4c:
                    0d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D3:2E:D9:D1:37:B0:6C:4E:65:2F:56:FA:FD:56:0F:ED:65:85:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/df798109-dd7f-3686-abe9-d6aa5238bc67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:15:d3:8e:35:1f:ff:05:65:9a:69:6c:50:04:36:3a:29:f0:
         c0:41:05:b7:5a:04:10:52:cc:52:11:14:49:42:e8:0b:f9:10:
         b1:42:42:ca:3e:04:13:03:40:b3:63:95:fc:7d:38:45:aa:d9:
         32:09:1c:61:ad:e6:2b:f4:11:a8:36:e3:5f:c4:60:f0:d8:69:
         9c:80:c2:15:7b:59:c4:87:f8:67:24:f3:c8:33:4a:ea:b9:c0:
         42:58:68:a4:bb:ea:a0:5c:93:bd:42:66:db:e2:e1:2c:8d:c2:
         61:a3:d5:d6:42:09:b9:0e:c4:3e:e3:31:aa:9f:c1:ae:d3:7f:
         91:48:ba:f0:2e:bb:e3:49:a4:54:e4:2c:43:be:27:5b:6c:64:
         48:00:ec:9f:8d:ff:77:b3:d1:58:7b:6c:62:e8:4b:e7:f0:4e:
         86:00:58:bb:be:4f:de:99:e8:8c:c1:88:a7:f5:ca:09:1d:f1:
         7b:6a:0a:c4:84:58:0d:cf:bd:39:99:4a:6e:e9:61:3e:23:50:
         41:f6:3a:d3:9f:d8:46:06:9a:e4:be:26:c2:1f:dd:b2:f4:c5:
         74:e0:ec:17:fe:0b:17:7f:66:d4:67:0c:c7:28:64:f3:e9:70:
         e9:4c:70:a8:ca:88:e5:71:40:52:a7:e4:df:ca:69:44:ec:2c:
         15:36:5e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:42:16 2025 by rpki-client