Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2a140ed6-1131-3b55-b04a-c701c5e0e2b1.roa
File:                     2a140ed6-1131-3b55-b04a-c701c5e0e2b1.roa (raw, json)
Hash identifier:          luRFlFI3UFGQjX863pxwVKjC7D4/0kjrWRRqYi89P0s=
Subject key identifier:   F3:A1:B5:9D:8D:D7:A6:CF:4A:E0:24:91:06:19:F1:96:A6:08:1F:C4
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858499F841634AB38CA80A117DF40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2a140ed6-1131-3b55-b04a-c701c5e0e2b1.roa
Signing time:             Wed 23 Apr 2025 16:13:29 +0000
ROA not before:           Wed 23 Apr 2025 16:13:29 +0000
ROA not after:            Tue 22 Jul 2025 16:13:29 +0000
asID:                     137409
IP address blocks:        45.38.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:84:16:34:ab:38:ca:80:a1:17:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 23 16:13:29 2025 GMT
            Not After : Jul 22 16:13:29 2025 GMT
        Subject: CN=79d24749-42e3-4912-b333-dcb64dfef866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ee:16:9b:64:d2:40:0a:6f:13:3b:51:d7:26:
                    e6:f0:bb:92:41:b5:21:77:57:47:45:49:9d:1c:e2:
                    45:ad:05:93:3a:7a:57:36:22:7c:78:17:55:dd:6e:
                    24:69:39:7a:1f:6a:71:4d:f9:97:52:51:7b:67:58:
                    28:5f:91:74:0d:e0:62:01:dc:12:9b:e6:07:01:59:
                    e4:23:4c:e9:cb:b3:93:a3:56:ca:53:07:64:c7:ab:
                    6d:dc:48:8e:3b:fb:33:ac:ca:e8:2e:97:83:78:4c:
                    c9:d7:7c:6e:3a:00:09:9a:5f:4f:f9:a9:ae:65:34:
                    5d:d4:34:e5:2a:0c:4c:df:b4:26:6c:47:2f:34:b2:
                    2b:1e:22:d8:ac:b8:ec:73:18:32:18:ac:e6:f9:76:
                    5d:3d:18:ec:6c:b7:f5:f9:8b:3b:c2:4a:a2:6a:7e:
                    76:9f:a7:0e:58:35:4d:e3:1b:94:51:13:16:13:7d:
                    92:09:b9:43:f9:ad:db:50:ab:35:32:3e:af:41:7b:
                    03:91:0d:ff:85:e4:65:c4:ca:40:c7:90:6f:37:84:
                    b1:9c:41:d2:f8:5c:50:b6:80:58:a4:2a:6b:dc:7d:
                    7a:a9:f3:17:0f:62:57:7a:43:54:67:39:9c:05:4d:
                    40:a5:d6:cb:f1:92:e4:8b:bf:cf:ad:30:02:03:e4:
                    ee:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A1:B5:9D:8D:D7:A6:CF:4A:E0:24:91:06:19:F1:96:A6:08:1F:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2a140ed6-1131-3b55-b04a-c701c5e0e2b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:b9:71:95:45:7c:7f:a2:af:aa:3c:1b:7a:9f:e6:4b:ee:03:
         f9:09:2b:cf:51:b9:7e:0f:b6:81:60:de:cb:27:06:d4:78:91:
         39:d9:ec:3f:2d:8a:4d:40:a4:0c:f6:bd:d1:17:78:06:a4:81:
         39:4b:4e:7e:a4:54:d3:f0:33:a8:36:ae:8d:d1:f1:1f:05:79:
         82:52:28:3b:b5:4e:b9:54:38:b6:29:7b:22:75:2b:63:22:6f:
         06:30:ef:bd:0a:c1:bd:1a:3e:90:f6:cc:c2:e3:50:b7:43:c8:
         1d:93:86:1a:fe:c8:c9:da:06:e4:47:84:7b:08:e8:61:85:34:
         57:7e:92:ae:bd:23:49:6e:79:f6:b2:58:c3:3b:fa:27:66:1c:
         bd:47:d9:54:bc:34:4d:5b:66:64:89:6f:54:b7:0b:99:45:f2:
         4b:d1:3a:ae:1a:0d:3b:b1:76:2b:5f:c7:87:24:4e:b6:4a:20:
         95:b4:3c:52:64:a1:48:84:45:60:cc:55:b2:08:69:33:df:3f:
         9b:9f:1a:22:04:fb:a1:c3:1c:ba:d8:cd:1b:80:35:87:e6:d7:
         d5:1a:3d:ec:72:c8:a0:ba:4b:b6:15:e4:1c:98:fb:f3:b0:ef:
         37:95:ee:90:1e:07:e6:05:3c:96:4a:92:c0:a3:87:f5:f9:da:
         24:95:6e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:25:52 2025 by rpki-client