Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1a10747b-25d3-3ec7-ac6f-ccdc002fa6ad.roa
File:                     1a10747b-25d3-3ec7-ac6f-ccdc002fa6ad.roa (raw, json)
Hash identifier:          NZoD1WtRDrpxjbNiS4UrIUi7R61VLvoQeoDi1hsnaCw=
Subject key identifier:   34:6A:FB:85:3B:92:05:83:AF:7B:53:DB:26:59:08:92:27:59:F0:7A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584BBE404795936593B4749C6700
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1a10747b-25d3-3ec7-ac6f-ccdc002fa6ad.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     8881
IP address blocks:        45.39.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:47:95:93:65:93:b4:74:9c:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=bdddbc1c-e0ed-4bf8-8f58-77e3d843d42a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3a:72:1b:c4:9f:3d:9d:5e:91:b7:29:2b:d3:
                    84:c5:1d:e8:c9:3a:9f:df:7d:44:1d:fe:2c:70:c0:
                    73:a0:7b:89:48:08:3e:c9:3a:16:85:7a:29:4d:16:
                    72:bf:27:29:e3:70:23:5f:99:66:41:cc:40:90:32:
                    d9:5b:c4:e7:c4:4d:9f:9b:ec:53:0d:e6:ba:aa:a4:
                    77:ab:c6:6e:88:21:ee:28:59:ab:6a:52:35:ef:8d:
                    69:f0:34:bf:e1:23:f9:82:67:8e:28:aa:38:5b:86:
                    0d:21:22:3e:24:45:9f:81:28:81:5a:72:db:dd:03:
                    6e:6a:02:cb:72:80:8f:7b:e5:48:50:e3:6e:9b:fa:
                    33:98:5b:f5:e9:37:3d:46:84:a3:63:83:3f:0e:a4:
                    f2:15:71:be:bd:1c:d0:15:40:72:c9:04:7f:fc:8f:
                    c8:fb:bb:37:43:0d:9e:a5:fb:62:92:3e:93:7d:dd:
                    c8:1d:cc:49:d9:16:3d:5e:cc:ff:bf:67:39:d4:d1:
                    ff:9a:cf:90:d4:70:73:41:40:11:65:6f:00:51:66:
                    98:ee:ed:31:18:74:41:ed:86:94:7e:56:46:b0:be:
                    ab:02:1d:3f:b2:a8:1b:e8:3e:82:a8:bd:52:9c:56:
                    b6:d8:72:fb:59:e6:6e:6f:c3:d2:39:73:9a:a8:a7:
                    60:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6A:FB:85:3B:92:05:83:AF:7B:53:DB:26:59:08:92:27:59:F0:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1a10747b-25d3-3ec7-ac6f-ccdc002fa6ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:37:c7:69:d6:fe:d1:45:fe:83:43:5a:c7:37:c0:01:00:c2:
         78:04:61:a1:90:fe:b0:3a:ef:28:b2:f2:cf:36:d9:06:a6:c7:
         ca:f7:85:74:a8:cb:94:ee:33:8e:1e:6e:8f:7a:a5:e0:66:84:
         98:48:2b:c7:37:7d:04:a8:84:e7:45:e4:9e:59:06:6b:82:94:
         b2:21:7c:7f:16:1a:d0:e3:8e:53:08:c5:e1:0b:7b:39:f0:64:
         c9:57:f4:7d:bb:3d:46:ad:06:52:0e:12:72:60:7d:b3:08:f9:
         87:89:8a:32:ea:74:fc:c2:3d:09:32:cc:e8:6b:5e:ed:e7:6a:
         a1:23:4b:1d:d2:e9:87:58:2f:e4:f3:af:8e:c9:07:ab:7c:43:
         a8:d4:ec:53:6c:34:72:5e:1e:9a:dc:e1:ea:05:19:e6:5f:47:
         67:d3:b8:23:53:0a:11:41:e9:b6:c2:53:a6:67:97:d7:0e:b9:
         8a:12:8e:81:e4:ea:d5:c6:ea:11:1a:e8:a1:7b:32:07:34:c2:
         80:8c:e8:96:2b:ae:63:f7:c1:df:06:7c:97:81:af:bb:36:15:
         b9:6f:f8:7a:27:84:0d:98:3a:9f:5f:5b:2c:54:58:ec:74:c0:
         95:b6:33:1b:5f:78:a6:27:08:ba:95:4f:9f:4e:45:02:7e:72:
         9f:f1:59:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:59:30 2025 by rpki-client