Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2d1ca74f-1ae7-3089-9308-60efc6bddfd9.roa
File:                     2d1ca74f-1ae7-3089-9308-60efc6bddfd9.roa (raw, json)
Hash identifier:          OOB7BFcOkzyWel/NEY919UTCGRhW7J0YAPuaK6/99bM=
Subject key identifier:   55:EB:00:43:DD:41:C9:8B:8B:A0:52:93:F5:0A:5D:99:72:B1:FF:3F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A94D0E404AA1A7AD1D5D7DF00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2d1ca74f-1ae7-3089-9308-60efc6bddfd9.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     3257
IP address blocks:        45.38.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:e4:04:aa:1a:7a:d1:d5:d7:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=ba477537-62ac-4001-b1ae-afa6f25d23fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:16:1c:cb:e7:54:90:e4:72:1b:c9:2c:57:e5:
                    5d:fb:95:76:6e:f6:91:86:be:04:9f:0e:e8:3e:e6:
                    e0:b7:7f:e1:63:9c:6f:40:1a:15:ca:5e:d7:14:5d:
                    a3:25:44:4b:dd:f5:bc:fd:9c:72:55:c7:71:c0:bb:
                    45:b3:2c:c9:a0:78:1b:62:0b:48:c7:e0:64:f2:92:
                    cc:13:ef:a9:35:1c:5f:48:01:6b:68:18:5d:af:09:
                    2e:91:31:0f:a2:6d:3b:99:c2:c6:5e:6f:92:d6:fc:
                    87:9f:d0:d8:dc:3f:c4:7f:f2:91:08:e9:7e:e5:92:
                    0b:fe:f8:d3:11:3f:6f:e0:61:d0:81:4a:32:aa:68:
                    c6:d1:4d:13:32:7c:27:ea:84:05:08:2a:bc:97:31:
                    f9:32:0b:3f:e8:68:bb:9f:22:12:c8:2e:1c:39:65:
                    0d:ce:d4:9b:f5:65:3e:12:9c:0f:aa:54:8d:0e:66:
                    62:51:f2:64:3b:a9:74:1e:2d:73:21:d1:45:6e:1d:
                    c4:21:5f:50:cb:5d:40:23:7a:f6:5b:03:ee:73:fc:
                    6e:1f:07:b2:c8:7b:63:b9:9a:3a:4a:e1:ef:6a:cd:
                    62:8c:22:5c:6b:df:05:29:9d:c2:b6:71:6d:61:c2:
                    d7:dc:53:a0:67:ad:63:19:15:59:65:70:dc:a4:cd:
                    25:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:EB:00:43:DD:41:C9:8B:8B:A0:52:93:F5:0A:5D:99:72:B1:FF:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2d1ca74f-1ae7-3089-9308-60efc6bddfd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:e8:c8:47:ff:da:28:3f:8a:13:1a:99:05:4b:b4:42:57:45:
         ee:3c:7e:f0:59:5f:69:d8:dc:a9:9b:09:fa:4d:ea:b2:31:e9:
         f3:c7:db:7e:79:dc:b3:b7:95:e2:8e:cd:45:d4:f5:03:ec:2b:
         9d:36:c8:6c:bd:44:f4:8f:cc:9d:e3:45:96:a4:78:02:49:68:
         45:78:33:df:17:45:b9:d9:0b:a6:84:df:9e:54:f9:b4:61:6d:
         38:3a:82:d3:02:9a:e2:ae:17:84:fd:d0:d3:ad:4d:2c:1e:14:
         4c:b0:57:bc:86:98:65:b4:d6:2a:87:c7:c5:ec:a3:ca:90:bc:
         a0:cc:2d:55:48:bc:79:81:b1:c4:6f:45:f6:ac:75:62:12:9b:
         99:e3:77:da:07:c9:80:4e:8b:bc:1c:23:39:bc:67:c2:84:6f:
         da:94:dd:ff:cb:b2:43:79:c9:36:b3:a2:3c:86:8e:9b:09:48:
         83:26:65:2b:ba:6d:ab:3c:0a:b7:ec:73:30:56:37:d6:ec:6b:
         c3:b4:94:36:5a:5f:14:53:f0:2e:2c:08:87:8a:80:66:04:a2:
         26:fc:0a:2e:3c:1c:b8:21:5a:aa:7c:ea:47:86:12:33:2c:54:
         30:59:5a:e2:e6:d1:a0:65:84:59:74:0d:f5:9a:2d:fb:4a:d0:
         68:3e:14:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:18:05 2025 by rpki-client