Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0daa2172-5778-357c-a7ca-297148d01e2f.roa
File:                     0daa2172-5778-357c-a7ca-297148d01e2f.roa (raw, json)
Hash identifier:          ToHoRmX3baVcIop9HzVzlrghWtBimAJqF7Wk3pS/rJk=
Subject key identifier:   30:49:D0:64:FB:F0:6C:30:D7:71:BC:CF:46:F9:5A:5E:E4:CA:1A:0E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584BBE403AD84A51FBF497F30F80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0daa2172-5778-357c-a7ca-297148d01e2f.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     3356
IP address blocks:        45.39.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:3a:d8:4a:51:fb:f4:97:f3:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=8bb7dd39-858e-408c-bc0a-078a84f2d182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:08:49:3c:3c:d2:27:01:a3:77:c6:0c:5c:56:
                    22:ab:34:e5:79:3f:c6:7f:de:7d:3c:4d:37:c0:be:
                    fa:68:84:1a:84:73:67:83:f9:ce:39:75:07:54:2e:
                    2f:51:45:71:89:d2:e7:30:33:01:a6:2c:93:9f:f5:
                    b1:cf:f8:81:9f:ae:c6:fe:30:cd:ef:6a:5f:c2:38:
                    be:fd:c0:4e:74:ed:ca:7b:66:e0:cc:4b:bf:0c:fd:
                    c5:7e:21:9b:90:0f:2f:97:0a:8a:39:70:63:e3:9d:
                    e7:c6:a3:29:c8:73:bf:90:b4:17:8a:51:98:96:96:
                    2c:ff:92:f4:aa:68:55:4a:75:49:48:9a:f7:b2:4d:
                    c3:f1:43:78:0a:6a:46:c4:06:a3:b6:f6:14:cd:18:
                    41:99:d6:ca:07:11:59:e9:50:a3:41:b4:d1:13:cc:
                    74:2b:cd:8e:a1:55:16:2a:d7:00:12:e9:27:08:89:
                    1c:66:0d:58:46:11:5b:92:54:8f:03:44:6e:ef:87:
                    11:99:ec:3d:f7:7a:66:d5:c0:15:30:9f:2d:83:5e:
                    e7:7b:c5:11:a4:1a:63:94:d7:39:34:5e:92:ea:3e:
                    7f:b7:2a:4c:3f:f5:1e:08:b6:27:89:eb:8f:c5:ff:
                    5a:cc:31:7a:b2:58:d7:d9:e7:10:55:19:35:20:73:
                    6a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:49:D0:64:FB:F0:6C:30:D7:71:BC:CF:46:F9:5A:5E:E4:CA:1A:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0daa2172-5778-357c-a7ca-297148d01e2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:c8:db:01:d4:71:08:3b:a7:47:03:de:7a:15:c2:e0:a0:50:
         9d:c8:a4:41:22:5f:df:1d:4c:13:d3:35:de:0f:cc:e5:03:33:
         57:0b:4b:a4:03:10:ba:90:0f:51:dc:df:5d:1a:ae:c5:90:f4:
         e4:2e:d6:0b:60:6c:ef:20:79:e5:8b:97:fe:95:16:7c:b1:1d:
         91:ed:15:2a:33:27:c0:b9:df:01:74:22:69:9f:ae:1b:f7:2f:
         f4:85:f3:36:b1:cf:8e:40:de:0d:c2:8d:1b:3a:d3:15:45:13:
         1c:04:bb:0e:25:1f:6d:56:61:0f:bd:c9:35:22:24:4c:c5:1b:
         29:1c:50:f8:70:85:6d:97:b2:bb:92:6a:c9:47:34:62:dd:04:
         b1:78:48:c3:ed:26:9c:08:3c:01:c4:10:9a:28:d1:b4:be:bc:
         00:ed:45:7d:c7:7c:97:a0:1d:86:7e:8f:70:90:e1:52:eb:6b:
         c6:1b:b4:3b:49:66:37:66:11:76:71:e8:54:9d:e3:d8:3f:71:
         48:15:a4:c7:b4:d3:f9:88:08:48:92:4a:69:40:8a:c4:c8:b0:
         6b:6b:bb:b5:02:6e:ca:0a:eb:e9:11:de:52:f7:c2:9f:c8:77:
         7c:ed:f6:c1:d7:93:27:5f:98:9f:a5:0f:1c:bd:ea:3b:7a:5f:
         b2:af:17:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:01:57 2025 by rpki-client