Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3488373f-b710-320e-8525-5aadba6082fe.roa
File:                     3488373f-b710-320e-8525-5aadba6082fe.roa (raw, json)
Hash identifier:          ifNArxYNLLcr5QaCbI1B43QDYicuD0HaRGQBmHoCwBg=
Subject key identifier:   92:65:7B:1A:1B:10:7D:EE:8A:58:23:30:E2:BA:A7:97:96:F4:CB:6C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A0D6A940156C3B108BBEEA940
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3488373f-b710-320e-8525-5aadba6082fe.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     212238
IP address blocks:        45.39.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:94:01:56:c3:b1:08:bb:ee:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=0d57610d-2c4b-4a31-ae7a-2f1915ecf301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:15:ba:ad:33:6c:0c:a8:56:c1:eb:88:45:b8:
                    64:38:ee:c8:d2:00:3b:e5:3c:22:56:bf:7d:70:1f:
                    df:c3:fb:e4:f6:92:4b:8c:00:67:63:56:99:31:41:
                    62:24:47:69:03:1f:ea:b7:99:5f:45:f6:3d:5f:1c:
                    05:70:82:53:70:5f:da:b5:ec:2b:33:7c:7a:26:7d:
                    fd:0b:8f:6b:1e:ae:9a:c2:73:f7:68:3e:fb:dd:b3:
                    c3:3a:fe:ca:db:82:69:5e:7b:c0:0c:a8:6e:6c:ed:
                    e1:16:b8:b2:af:46:77:d4:d2:aa:15:b3:e6:67:e7:
                    fb:5a:6a:ce:45:a2:b2:80:51:4a:19:c4:1f:83:b1:
                    5a:f8:1b:f7:cb:18:13:eb:7c:7c:aa:d4:6e:70:3d:
                    a1:75:8b:34:e2:96:7a:d1:7a:45:0b:12:9f:70:71:
                    8d:8b:50:3f:06:0a:93:41:37:18:b1:19:ec:9b:d2:
                    9a:3c:53:fb:da:2c:58:0d:71:c6:b8:41:6f:dd:96:
                    49:d4:cb:ef:47:2a:60:e4:fa:d7:9a:b1:d9:1e:12:
                    03:8c:35:01:35:9f:d0:e8:58:ca:e6:47:bf:39:0e:
                    63:00:ea:2d:b9:13:e1:ef:0d:7d:8e:8f:55:81:26:
                    b8:ed:46:fc:8b:23:ca:88:82:be:21:0f:d2:2a:4c:
                    bb:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:65:7B:1A:1B:10:7D:EE:8A:58:23:30:E2:BA:A7:97:96:F4:CB:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3488373f-b710-320e-8525-5aadba6082fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:3e:cd:db:70:41:1e:b4:9d:a8:a7:0d:25:ab:16:2c:a5:f6:
         a2:ad:d6:9e:92:fc:a4:37:9e:1b:9c:a0:40:b6:05:69:0b:cf:
         41:d5:ae:a8:49:37:aa:3d:af:84:07:36:eb:9d:20:5f:62:a3:
         20:ec:e7:8f:2f:32:88:40:4f:bd:f3:61:7a:0a:01:20:92:85:
         f7:51:02:d0:2f:c1:b3:cd:9b:6c:9d:5f:7f:c2:5e:0e:41:fb:
         1e:d1:a9:0f:56:7b:99:0d:64:cc:62:c7:27:1b:ed:0d:91:ce:
         c8:7e:57:11:4a:57:95:ab:bb:41:c2:67:ba:e3:fd:1f:64:4c:
         cc:ee:e6:dc:b2:15:fb:c7:74:3e:66:79:b4:a5:e0:64:44:a6:
         2e:96:70:e0:aa:45:cf:de:7b:ae:ea:f8:20:26:f8:b9:19:12:
         37:24:e9:db:c0:7d:2b:fd:0c:19:5d:a0:5a:b4:53:df:e2:df:
         a0:e8:ea:fe:1b:a0:e8:0d:f2:0c:2f:f8:07:26:d6:2b:7e:35:
         de:65:d6:50:0e:a5:97:8d:ba:7f:46:c0:35:33:ce:10:43:12:
         4e:5d:ad:25:40:46:78:9c:9d:3e:03:57:3d:fe:9f:79:fb:fd:
         0e:e6:19:12:4b:21:53:ad:1e:d3:38:cc:66:91:a0:f5:45:ea:
         58:3e:97:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:00:46 2025 by rpki-client