Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3c4b998f-dfc0-3d65-95dd-7ed3e1743a9c.roa
File:                     3c4b998f-dfc0-3d65-95dd-7ed3e1743a9c.roa (raw, json)
Hash identifier:          uRZT7ruB1GPIYMyyC9dUZHBnUDtWE8VNNhnxH/eye7U=
Subject key identifier:   05:18:36:4D:32:F6:E1:D8:5D:3F:F8:12:CD:C2:86:63:EE:42:53:31
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A7D15E13F4325052D73EFB860
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3c4b998f-dfc0-3d65-95dd-7ed3e1743a9c.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     54252
IP address blocks:        45.38.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:15:e1:3f:43:25:05:2d:73:ef:b8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=ad8a17e3-82c0-4f0c-90a4-348237b4a0da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:91:c2:f5:cb:3f:72:a1:e5:b7:3a:12:b3:c8:
                    7e:f0:e1:f1:3a:40:b8:18:2f:db:bd:3a:22:e6:67:
                    03:8c:4a:86:c4:20:16:b8:c5:18:1d:af:dc:59:11:
                    bc:b1:64:e2:28:00:ae:19:41:75:e9:08:65:17:c5:
                    3c:21:af:66:51:0d:92:fa:c7:9d:36:ce:2c:ee:f0:
                    7f:77:5e:be:10:d8:33:a6:d2:95:68:8a:67:bf:34:
                    ff:86:bc:34:6e:96:d7:3a:21:1e:e7:79:c1:38:c0:
                    15:5b:89:cc:9a:da:b6:eb:f2:00:ba:39:2f:7b:2b:
                    71:77:05:dd:2c:4d:9f:97:20:38:c5:24:41:bc:26:
                    80:98:e8:5a:2f:72:bd:06:95:4b:88:82:15:d8:ff:
                    8e:5f:10:c9:df:67:7c:a3:af:a5:b8:ab:6f:d8:4c:
                    cf:2c:bc:c5:5d:69:b6:7b:b7:48:e7:7c:b6:0f:5e:
                    e0:21:dd:ac:16:fe:f0:70:3e:89:4e:42:ca:7f:8e:
                    dd:26:8d:e0:f7:58:c6:87:8b:36:ab:92:2f:fd:ee:
                    ae:0a:4b:6e:85:7e:9b:46:85:ed:f5:23:5a:fd:30:
                    50:38:7c:29:be:f5:56:ce:a7:dc:8e:8b:66:f7:c5:
                    22:c3:d1:9b:40:3a:a0:42:ad:75:13:b7:22:fc:87:
                    2d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:18:36:4D:32:F6:E1:D8:5D:3F:F8:12:CD:C2:86:63:EE:42:53:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3c4b998f-dfc0-3d65-95dd-7ed3e1743a9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:4d:39:0d:61:92:63:ac:d1:76:0a:6f:5a:b6:c7:58:d9:89:
         87:fa:03:fa:c8:1e:b1:7b:4d:47:cb:49:97:80:c3:30:cd:8b:
         0c:55:65:03:09:4c:97:be:4b:63:98:d5:6b:f9:a7:9e:40:fd:
         d0:25:b6:d6:7a:8f:31:22:e2:cc:47:48:de:bf:38:39:ad:fc:
         71:99:d7:b2:04:cd:e4:28:5a:8e:5d:5e:5b:a5:2c:ed:29:a9:
         67:51:3f:ae:f9:0c:d1:91:d3:86:d6:f5:26:3c:2b:8a:98:2f:
         eb:4e:0e:62:52:2a:6b:65:a2:68:dd:40:7c:95:93:14:a8:55:
         25:21:e6:29:ae:ab:d4:58:2e:af:7f:cd:7b:c9:f8:a5:86:b6:
         27:a6:c9:74:0d:b3:8b:64:c7:b6:0c:c3:7a:2d:74:4b:b8:3d:
         ed:70:a7:0a:5a:ef:a3:ee:5d:24:f4:ca:74:08:4c:73:bb:ea:
         b3:b0:9c:9b:c0:13:0f:d2:fa:2b:30:ca:79:c9:54:54:c9:b3:
         e2:27:89:3f:80:b4:a3:3c:cf:65:3b:b3:7f:af:2e:cc:78:a5:
         1d:85:63:bb:ed:89:43:46:9d:07:6a:0d:66:8b:48:c1:41:16:
         70:82:23:dc:c4:00:33:fc:af:a4:f0:f1:e3:ca:0f:d9:a0:d9:
         5f:b1:95:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:11:10 2025 by rpki-client