Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/281c04f9-d7ac-314a-9719-717619673c9a.roa
File:                     281c04f9-d7ac-314a-9719-717619673c9a.roa (raw, json)
Hash identifier:          nRfYIDd8FK3vUnXpDh8L8tRYkiI+fsCu7vNFBaBZWn4=
Subject key identifier:   E7:FD:DA:C3:D8:77:7A:57:A4:4D:33:DA:90:8D:C0:38:A7:A2:60:1F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A2ABAE0B0F571DD0E1A220EC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/281c04f9-d7ac-314a-9719-717619673c9a.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     50304
IP address blocks:        45.38.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:e0:b0:f5:71:dd:0e:1a:22:0e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=0bd542a7-0048-4b5f-984a-0c67a9bd5622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1e:6a:36:c9:fe:f4:aa:0c:a7:38:6b:23:ac:
                    97:af:86:0e:2c:7c:fb:02:fe:50:f1:01:ff:85:66:
                    59:58:45:c2:65:ce:44:5a:2f:90:8d:79:c6:30:f5:
                    ec:87:d4:03:a7:6a:ba:e2:6c:a4:6a:6f:08:00:d3:
                    1f:51:b7:a9:e5:23:28:ae:60:c3:b6:93:37:8c:2e:
                    8d:f1:2e:75:8d:8e:0b:a8:d7:e3:83:85:b5:1c:6b:
                    19:48:0d:10:db:1c:1b:d5:ad:b2:5f:36:87:6f:ec:
                    1f:7d:d9:32:1d:9f:93:99:54:4a:5f:81:03:cf:74:
                    42:5d:51:35:90:f3:d6:79:65:2f:47:aa:ec:26:85:
                    45:f2:41:55:26:6a:be:b0:68:0c:73:cc:34:e3:37:
                    0d:11:1f:5b:f5:57:ab:ec:be:48:ba:5b:c7:95:26:
                    75:70:fa:4e:36:72:93:31:43:24:f4:95:ce:e1:07:
                    c6:a2:a5:dc:78:03:b3:e0:8a:78:e1:0b:c7:77:fd:
                    45:f7:42:a4:59:47:1b:ed:05:c4:f6:d7:e9:e6:55:
                    86:4b:ee:31:86:2e:1e:bf:76:9e:c5:35:e4:1e:bb:
                    d4:77:7f:56:68:5b:d8:d9:94:48:42:e0:ff:82:b1:
                    99:7a:47:a4:48:8b:7a:4d:6b:3f:3c:ea:df:ad:42:
                    49:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FD:DA:C3:D8:77:7A:57:A4:4D:33:DA:90:8D:C0:38:A7:A2:60:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/281c04f9-d7ac-314a-9719-717619673c9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:86:a0:da:b5:3f:80:e5:56:8e:2c:53:2c:d6:97:e1:f9:23:
         2f:73:72:ff:1e:8f:d8:ee:a6:ca:42:3a:27:7d:bb:19:5d:83:
         40:f1:2d:3c:d6:28:75:20:9c:9b:84:88:0e:f7:d7:a0:2a:a5:
         d7:4b:ac:ac:25:85:ed:cd:c8:46:48:46:16:f5:76:fd:b6:ee:
         6d:14:0d:f3:bc:2d:26:af:81:37:83:2d:70:55:66:83:0c:08:
         55:f9:e5:79:f8:c7:48:dd:5d:01:f4:1f:b0:f8:82:d5:89:b2:
         f4:eb:79:d3:dc:37:38:11:12:45:98:29:b0:ed:e7:84:25:f6:
         3d:96:b2:ff:a6:ad:78:0c:f3:01:28:ec:06:0c:22:f2:5f:01:
         13:0e:f4:92:00:13:80:c1:6a:0b:18:f6:11:0d:08:4b:a9:58:
         90:6e:9f:db:a7:3f:61:ba:10:f6:5a:9b:1d:df:a6:16:16:90:
         22:37:19:bd:48:8c:1a:11:7c:b5:26:7e:de:e5:b4:6d:f4:82:
         d8:b4:26:62:97:35:86:53:f0:e3:0c:74:17:f4:47:df:93:11:
         54:9f:e9:84:c9:55:fc:f9:22:30:f0:ec:36:f2:81:cd:9b:e8:
         35:5f:ee:37:f2:c4:d4:a0:a4:48:1d:eb:0d:ac:e3:dd:1d:8d:
         11:64:3b:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquuCw9XHdDhoiDsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk
MGJkNTQyYTctMDA0OC00YjVmLTk4NGEtMGM2N2E5YmQ1NjIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3h5qNsn+9KoMpzhrI6yXr4YOLHz7Av5Q8QH/
hWZZWEXCZc5EWi+QjXnGMPXsh9QDp2q64mykam8IANMfUbep5SMormDDtpM3jC6N
8S51jY4LqNfjg4W1HGsZSA0Q2xwb1a2yXzaHb+wffdkyHZ+TmVRKX4EDz3RCXVE1
kPPWeWUvR6rsJoVF8kFVJmq+sGgMc8w04zcNER9b9Ver7L5IulvHlSZ1cPpONnKT
MUMk9JXO4QfGoqXceAOz4Ip44QvHd/1F90KkWUcb7QXE9tfp5lWGS+4xhi4ev3ae
xTXkHrvUd39WaFvY2ZRIQuD/grGZekekSIt6TWs/POrfrUJJkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOf92sPYd3pXpE0z2pCNwDinomAfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMjgxYzA0ZjktZDdhYy0z
MTRhLTk3MTktNzE3NjE5NjczYzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSZcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG6GoNq1P4DlVo4sUyzWl+H5Iy9zcv8ej9jupspCOid9uxldg0DxLTzW
KHUgnJuEiA7316AqpddLrKwlhe3NyEZIRhb1dv227m0UDfO8LSavgTeDLXBVZoMM
CFX55Xn4x0jdXQH0H7D4gtWJsvTredPcNzgREkWYKbDt54Ql9j2Wsv+mrXgM8wEo
7AYMIvJfARMO9JIAE4DBagsY9hENCEupWJBun9unP2G6EPZamx3fphYWkCI3Gb1I
jBoRfLUmft7ltG30gti0JmKXNYZT8OMMdBf0R9+TEVSf6YTJVfz5IjDw7Dbygc2b
6DVf7jfyxNSgpEgd6w2s490djRFkOxo=
-----END CERTIFICATE-----
Generated at Tue Jun 17 07:56:12 2025 by rpki-client