Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3e4fc830-424f-343c-9245-a4e623403dc6.roa
File:                     3e4fc830-424f-343c-9245-a4e623403dc6.roa (raw, json)
Hash identifier:          CshwUsAcI+nOCjSuczCo2Ew4+S2DRBn8eIfIdTbHYT4=
Subject key identifier:   F2:68:FB:7D:3C:72:50:49:06:06:E7:CF:9D:A6:00:AF:72:BD:8B:CC
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A7E7BA14EDEF459B534C72EA0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3e4fc830-424f-343c-9245-a4e623403dc6.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     5650
IP address blocks:        45.39.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:a1:4e:de:f4:59:b5:34:c7:2e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=a6d607e9-8f6c-4b13-9ed3-30c6dae30795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1e:86:bb:93:07:1b:6c:57:53:6e:fc:4d:a8:
                    e3:ca:a8:56:a6:6a:69:20:d6:0c:37:f7:8e:49:f0:
                    cf:e8:b3:42:5e:64:4a:fb:89:98:7d:2a:9a:ed:ca:
                    29:49:3e:eb:52:ad:8a:14:8c:ff:9c:2e:04:b3:f8:
                    62:71:29:0d:ce:fc:9d:92:5d:a6:49:6d:0a:d8:5e:
                    e7:2d:36:1a:c3:53:1e:2b:76:40:80:61:c8:b8:76:
                    6b:c2:0e:35:4b:f9:7b:6e:a1:1b:9a:1a:43:dc:36:
                    cf:c0:f1:f4:94:ce:ea:a6:5c:c8:e7:96:fd:f3:92:
                    d4:78:ad:af:f3:25:ca:cb:86:b2:1f:73:2c:da:3c:
                    a1:c7:1e:e8:7c:a6:f2:7c:f8:bf:73:bc:a0:bc:84:
                    37:15:1b:46:f3:e0:56:eb:2d:cc:b5:4b:ee:15:87:
                    e2:e1:f4:8e:bb:c0:40:19:57:ee:73:04:74:b0:30:
                    8a:02:3d:77:c7:36:1f:c5:9e:59:01:a8:11:69:29:
                    d7:34:68:9f:4a:39:8f:36:71:62:7f:12:85:ab:b1:
                    80:8a:b1:4d:04:94:7a:29:ae:d0:db:0c:ad:1e:0f:
                    c0:9a:fe:55:e0:85:5d:5e:97:39:14:06:b6:6d:05:
                    a4:d9:74:88:27:d2:bd:1c:d2:1e:04:5a:e9:54:83:
                    b4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:68:FB:7D:3C:72:50:49:06:06:E7:CF:9D:A6:00:AF:72:BD:8B:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3e4fc830-424f-343c-9245-a4e623403dc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:a0:5d:30:b0:71:19:22:c5:26:8c:be:c9:b8:16:54:ec:cc:
         4a:71:91:8d:82:f9:32:61:bd:07:1c:fb:02:69:dc:3e:12:f5:
         45:5d:1f:ae:77:45:f3:a1:3c:53:4b:61:9e:87:da:a7:bc:9a:
         7d:29:64:a5:a7:cb:7e:ad:f7:a2:a2:8e:ae:6f:0c:40:ad:71:
         30:83:e6:28:a9:d7:b1:94:76:42:53:35:01:df:68:3d:c9:d8:
         9f:fa:09:1f:7f:cc:c8:ed:dd:5d:e8:36:b5:23:16:51:da:67:
         61:b5:68:1e:42:7c:a8:9d:d9:30:90:08:c6:9b:03:08:08:e6:
         65:ba:e3:76:5c:72:48:90:4b:53:4b:8b:cf:56:f7:b2:d0:7c:
         e3:66:1a:21:05:00:44:12:70:41:28:39:5a:fd:ce:4f:c0:33:
         5b:87:c6:0d:86:80:35:b8:1c:15:c6:42:03:95:24:16:4c:46:
         87:c5:35:ba:4e:94:7e:37:70:9f:07:83:e2:68:c6:85:20:62:
         f9:e5:de:fe:51:cb:94:03:c0:31:ff:ec:ba:0a:c6:17:a4:ed:
         5c:a9:7f:a1:e0:ac:1a:c0:fd:01:73:92:a5:d1:a7:21:cf:a6:
         3c:05:5f:fe:dd:ff:ef:6e:6e:5f:d2:16:42:73:34:d6:fd:e6:
         eb:30:18:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e6FO3vRZtTTHLqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk
YTZkNjA3ZTktOGY2Yy00YjEzLTllZDMtMzBjNmRhZTMwNzk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjh6Gu5MHG2xXU278TajjyqhWpmppINYMN/eO
SfDP6LNCXmRK+4mYfSqa7copST7rUq2KFIz/nC4Es/hicSkNzvydkl2mSW0K2F7n
LTYaw1MeK3ZAgGHIuHZrwg41S/l7bqEbmhpD3DbPwPH0lM7qplzI55b985LUeK2v
8yXKy4ayH3Ms2jyhxx7ofKbyfPi/c7ygvIQ3FRtG8+BW6y3MtUvuFYfi4fSOu8BA
GVfucwR0sDCKAj13xzYfxZ5ZAagRaSnXNGifSjmPNnFifxKFq7GAirFNBJR6Ka7Q
2wytHg/Amv5V4IVdXpc5FAa2bQWk2XSIJ9K9HNIeBFrpVIO0mwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPJo+308clBJBgbnz52mAK9yvYvMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvM2U0ZmM4MzAtNDI0Zi0z
NDNjLTkyNDUtYTRlNjIzNDAzZGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSc0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFKgXTCwcRkixSaMvsm4FlTszEpxkY2C+TJhvQcc+wJp3D4S9UVdH653
RfOhPFNLYZ6H2qe8mn0pZKWny36t96Kijq5vDECtcTCD5iip17GUdkJTNQHfaD3J
2J/6CR9/zMjt3V3oNrUjFlHaZ2G1aB5CfKid2TCQCMabAwgI5mW643ZcckiQS1NL
i89W97LQfONmGiEFAEQScEEoOVr9zk/AM1uHxg2GgDW4HBXGQgOVJBZMRofFNbpO
lH43cJ8Hg+JoxoUgYvnl3v5Ry5QDwDH/7LoKxhek7Vypf6HgrBrA/QFzkqXRpyHP
pjwFX/7d/+9ubl/SFkJzNNb95uswGDs=
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:11:16 2025 by rpki-client