Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fcbca4f0-1a06-3191-9fe7-5007ec03d054.roa
File:                     fcbca4f0-1a06-3191-9fe7-5007ec03d054.roa (raw, json)
Hash identifier:          oI0PA6FTA/psWsREq/Q0OSyg2hbRqDAZueMW1yqxGlE=
Subject key identifier:   2A:DE:08:AF:50:96:15:A0:23:A7:EA:90:9C:D3:74:E0:D0:C4:5F:21
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849CFFF7132EF1562A9A91EF600
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fcbca4f0-1a06-3191-9fe7-5007ec03d054.roa
Signing time:             Sun 11 May 2025 01:00:47 +0000
ROA not before:           Sun 11 May 2025 01:00:47 +0000
ROA not after:            Sat 09 Aug 2025 01:00:47 +0000
asID:                     18779
IP address blocks:        45.39.36.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cf:ff:71:32:ef:15:62:a9:a9:1e:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 11 01:00:47 2025 GMT
            Not After : Aug  9 01:00:47 2025 GMT
        Subject: CN=39eb673f-403e-46d5-9b02-7228da2d0e45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:06:ee:6b:02:54:75:f7:4e:fc:99:54:ce:83:
                    2d:81:ec:74:d4:ec:8b:79:95:7e:94:75:46:ec:99:
                    be:53:63:80:38:73:a2:11:c0:03:bf:24:35:26:14:
                    79:8e:99:fe:2e:ab:48:e6:e5:a2:b1:3c:6a:85:8b:
                    e2:24:25:e8:41:35:60:d2:5a:06:c6:52:cb:7e:f1:
                    07:97:0b:77:74:3b:21:ac:ab:49:c4:4a:aa:6b:14:
                    70:c7:55:64:16:5d:cc:fc:48:b5:ef:d0:fa:68:67:
                    05:6f:1b:97:14:86:2c:e3:c3:ae:b1:5a:b0:be:bd:
                    ef:3f:d9:da:03:f5:5e:e9:14:1f:af:e8:94:9e:e5:
                    91:0e:73:d9:be:75:c0:5a:2c:c0:a3:cf:1f:ed:6d:
                    10:4a:ad:36:c1:31:52:84:b1:20:f3:1e:0d:be:13:
                    58:76:4e:0b:3e:e8:93:71:2b:3e:9b:a9:b1:cf:da:
                    83:84:8d:29:37:32:d0:86:ad:95:f6:e9:89:07:ce:
                    a3:0a:3d:4c:57:93:74:41:a7:c7:19:57:e7:70:c7:
                    a1:65:56:ea:88:0b:be:28:f5:aa:9c:48:63:1a:24:
                    3e:66:d3:11:89:87:02:15:80:e2:62:0e:05:4d:9c:
                    af:82:27:fe:c1:52:5e:95:6b:93:93:40:7d:4e:63:
                    80:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:DE:08:AF:50:96:15:A0:23:A7:EA:90:9C:D3:74:E0:D0:C4:5F:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fcbca4f0-1a06-3191-9fe7-5007ec03d054.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:f9:d6:10:b5:b9:0b:26:6c:e6:71:dd:6d:1b:17:94:d1:35:
         7f:d2:ee:9a:01:0d:41:92:10:df:d5:eb:d9:ec:9c:33:74:95:
         05:5a:b6:7c:ab:08:53:ba:9d:02:80:db:94:10:72:09:75:37:
         c6:ab:02:77:91:83:cc:c8:70:4c:bb:8a:4a:40:a6:95:2a:84:
         5c:92:79:c4:1b:17:71:12:58:71:ab:01:f2:bb:d6:a1:75:90:
         3e:60:15:d8:8f:3c:c8:ba:7a:0f:d3:b2:26:e2:0a:ae:2e:78:
         53:a6:c5:1c:6d:1e:0d:8b:c4:1d:1c:46:04:d2:8a:5f:c9:23:
         58:8b:e4:ed:85:92:aa:7e:d7:16:98:3f:7d:aa:c5:a6:2a:08:
         3a:81:89:6f:43:69:e6:ba:e3:31:83:96:da:c0:8a:f5:55:ed:
         4d:bc:27:3d:81:65:74:bf:98:a9:c2:8f:ec:42:ed:ea:80:84:
         d5:1f:76:c2:8b:80:21:26:b7:6c:1b:71:e4:0e:32:ec:cd:3f:
         bb:35:e8:02:8a:d2:d0:f9:f3:eb:d7:30:f5:07:3b:7e:dc:b4:
         ee:57:87:fd:e8:fd:a2:2d:a7:ad:4e:a4:27:16:95:7a:45:5c:
         e1:b6:04:ac:5c:5e:df:b8:91:e6:5b:bb:77:d8:7b:0d:6d:dd:
         ca:a1:1c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:47:38 2025 by rpki-client