Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f9e1f688-105f-3038-b77a-d5efd81636b6.roa
File:                     f9e1f688-105f-3038-b77a-d5efd81636b6.roa (raw, json)
Hash identifier:          WYHulm4I7JsT7+/ylChjF9LKc/FV8uuqMGgwjTmk+3k=
Subject key identifier:   97:C9:ED:41:D9:33:E4:7D:B9:15:77:DC:52:EB:51:0A:4A:0A:D8:1F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AD23C3C6A8D45FD33CAA96EF0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f9e1f688-105f-3038-b77a-d5efd81636b6.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     44477
IP address blocks:        45.39.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:3c:6a:8d:45:fd:33:ca:a9:6e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=0fe472d3-72f4-4bb7-acf2-86cffd786890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:19:1c:2e:38:77:a8:83:1c:07:7d:a0:c6:01:
                    1d:00:43:02:ae:10:af:77:30:ab:cf:9c:83:41:86:
                    67:d2:9f:3e:fd:73:87:0f:58:aa:29:a2:6e:9c:7f:
                    1f:b6:1a:79:b7:21:90:0f:1a:0c:e1:63:fa:03:7c:
                    f8:b8:a2:89:44:c7:fc:96:9c:df:80:10:54:07:31:
                    13:d8:fc:a4:54:15:d0:32:a7:80:65:2b:1a:66:ae:
                    ca:5e:63:91:ab:39:fc:54:65:57:cb:e6:f7:5a:fa:
                    ef:d8:ac:da:40:3b:5c:dd:eb:58:6b:8c:34:4b:e4:
                    b3:4e:a4:bd:c4:23:2e:36:06:2f:bd:86:b0:8c:05:
                    40:5c:65:cc:c9:97:9d:b1:83:83:db:1b:8c:e2:ee:
                    2f:06:75:d2:26:67:18:a2:4d:bc:e2:08:c4:e5:65:
                    f3:d3:22:5d:b3:64:80:f5:30:cf:6f:50:39:ab:60:
                    58:f8:e1:ac:31:6c:9e:4d:50:d3:b0:68:91:10:1a:
                    d5:ba:e6:13:67:05:90:73:8b:90:86:d5:5e:d2:a4:
                    41:fd:e6:27:88:8d:62:4a:9d:e7:3d:5c:8e:22:a6:
                    d6:51:c9:94:b6:b2:75:80:ef:31:53:f4:00:1e:6c:
                    e4:80:5c:72:98:5e:2a:e9:62:18:b4:57:c2:2a:93:
                    8e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C9:ED:41:D9:33:E4:7D:B9:15:77:DC:52:EB:51:0A:4A:0A:D8:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f9e1f688-105f-3038-b77a-d5efd81636b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:c4:28:41:c7:e7:bd:7e:33:cd:d4:c2:03:09:ef:2e:5f:29:
         21:35:8e:d6:b1:ae:ea:b5:e3:b5:c1:6a:90:69:6c:31:14:8e:
         d2:cd:97:ab:a0:ce:29:99:71:56:44:fa:10:83:7c:c8:eb:fb:
         ae:4c:67:30:d2:21:f4:ed:e7:d9:0d:71:f8:af:8c:4e:4c:7e:
         36:7f:ba:69:50:90:87:80:5b:82:57:4e:be:45:f7:84:5e:b9:
         45:57:39:b4:14:01:c3:c2:9a:d9:f6:4d:20:31:38:73:38:2a:
         31:bb:c1:cc:a0:18:ec:1b:06:c4:2f:5b:02:ef:9d:21:e8:1f:
         aa:ee:06:b1:6e:d4:3f:ca:a4:1e:e9:90:43:49:fc:84:0d:91:
         c5:b1:7a:3f:90:85:6f:e5:52:1d:00:ed:32:d4:bf:6f:10:49:
         1f:18:f0:6d:c6:74:57:3c:2a:d1:f1:8a:46:fe:62:da:cd:f8:
         89:a3:fe:55:ed:6c:b5:b4:88:fa:2a:47:f7:02:7e:3d:86:7e:
         69:86:dd:d4:f4:b8:ef:20:2f:4e:1d:ea:0a:d9:b2:d7:55:d9:
         0d:a2:2c:fc:bd:a3:3b:10:77:21:3f:b2:bd:25:0f:23:26:1d:
         00:7c:7a:b1:88:65:17:6f:74:d3:ab:53:87:bd:fa:74:50:4d:
         d6:85:df:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:19:06 2025 by rpki-client