Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4b7b8959-aa5f-3ffc-a896-b32466649b82.roa
File:                     4b7b8959-aa5f-3ffc-a896-b32466649b82.roa (raw, json)
Hash identifier:          UgZz5I6UShzG9wZWJfMWFqLM/9huwkqlXpJqoi4PPTc=
Subject key identifier:   C6:D9:66:E6:6B:C0:84:33:17:91:EF:46:F3:06:35:16:72:B6:47:AD
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849DF1107A7637A6F8398ABE740
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4b7b8959-aa5f-3ffc-a896-b32466649b82.roa
Signing time:             Fri 16 May 2025 10:33:24 +0000
ROA not before:           Fri 16 May 2025 10:33:24 +0000
ROA not after:            Thu 14 Aug 2025 10:33:24 +0000
asID:                     9009
IP address blocks:        45.38.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:11:07:a7:63:7a:6f:83:98:ab:e7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 16 10:33:24 2025 GMT
            Not After : Aug 14 10:33:24 2025 GMT
        Subject: CN=2a70c6ef-7caf-4ed8-bea6-95e2df7cefa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:95:11:55:56:fc:a6:1b:61:d7:b7:66:64:aa:
                    87:a9:8e:54:72:32:e9:be:30:dc:14:c5:83:90:94:
                    00:1c:ec:db:d0:58:2b:c2:f1:58:29:05:07:3a:29:
                    f7:91:e6:79:c6:90:c1:1c:f9:e2:46:6d:90:b5:cd:
                    e0:6e:b0:b2:60:be:c0:38:ba:2a:4f:99:b4:c7:39:
                    fe:1d:c0:2b:7a:1c:ad:3d:29:79:a7:d1:fe:81:d8:
                    a5:b3:da:ad:15:d5:3c:c7:8e:9d:ba:a9:a9:b9:ab:
                    0e:34:a0:82:70:61:2e:e7:8a:cc:f0:36:f3:a7:84:
                    d4:bb:06:23:a2:82:8c:6f:dc:64:98:6f:da:05:67:
                    b9:c6:98:a0:c1:3e:3d:06:be:ab:e9:5d:8b:c1:30:
                    cd:94:0c:82:41:b5:5b:02:5a:7c:9d:4e:4a:39:34:
                    fb:5c:8e:c3:cf:95:96:66:b2:f8:3e:2e:6f:aa:b2:
                    49:92:2b:4e:0f:09:2d:5a:f8:83:ec:42:3a:0a:0d:
                    03:39:20:c7:03:07:83:32:8e:de:bc:c6:b7:4b:02:
                    b3:4b:e9:41:5d:bb:05:e2:c1:d6:56:1e:7c:24:7d:
                    c1:a2:14:c1:29:8b:bb:ea:ab:a0:55:7e:bf:b7:d1:
                    b0:dc:e4:5a:1c:1f:71:61:d0:16:42:bb:0d:d6:90:
                    97:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D9:66:E6:6B:C0:84:33:17:91:EF:46:F3:06:35:16:72:B6:47:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4b7b8959-aa5f-3ffc-a896-b32466649b82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:6c:b1:4a:e5:6c:f1:21:21:e6:f7:1a:80:49:bb:5b:bf:4a:
         4e:2f:be:50:41:70:89:d1:35:fd:b6:6b:65:db:6e:85:4a:bd:
         20:5a:f8:8e:e7:00:32:2a:0a:06:be:05:c8:38:2f:51:bb:24:
         81:3a:92:f0:10:fc:01:ef:68:8f:fd:fd:f1:e7:4a:1a:63:fc:
         da:78:07:50:8c:39:00:18:15:92:3f:fe:fa:88:8b:0b:b9:6a:
         6f:0d:10:6e:21:a7:8f:62:d1:a8:3c:54:43:be:ee:da:9c:ee:
         68:76:c1:fe:cb:55:85:2d:13:f9:fc:71:d3:89:06:89:65:14:
         0a:6a:45:bb:ec:e8:2d:e6:2f:32:9f:4d:c7:8c:d1:08:57:0a:
         a2:fc:df:9e:94:17:ec:cc:11:d8:4f:d8:8b:dc:96:ae:d2:a8:
         1e:30:9a:62:63:ff:a9:78:5c:97:db:d2:e3:30:c7:6a:20:8a:
         7d:6c:4a:83:2e:73:70:58:4e:b6:ef:0b:f0:05:b4:62:6c:a3:
         8c:e5:b3:3b:2e:62:20:35:5f:f7:24:66:a7:e5:18:5b:4b:c0:
         17:ee:b4:6f:4c:14:dd:e0:3d:b1:a9:a9:59:f2:71:c6:24:ef:
         2f:75:99:db:f8:7f:36:ad:9f:a0:dd:be:3d:0d:7a:b5:aa:73:
         a0:59:ab:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfEQenY3pvg5ir50AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDUxNjEwMzMyNFoXDTI1MDgxNDEwMzMyNFowLzEtMCsGA1UEAxMk
MmE3MGM2ZWYtN2NhZi00ZWQ4LWJlYTYtOTVlMmRmN2NlZmE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZURVVb8phth17dmZKqHqY5UcjLpvjDcFMWD
kJQAHOzb0FgrwvFYKQUHOin3keZ5xpDBHPniRm2Qtc3gbrCyYL7AOLoqT5m0xzn+
HcArehytPSl5p9H+gdils9qtFdU8x46duqmpuasONKCCcGEu54rM8Dbzp4TUuwYj
ooKMb9xkmG/aBWe5xpigwT49Br6r6V2LwTDNlAyCQbVbAlp8nU5KOTT7XI7Dz5WW
ZrL4Pi5vqrJJkitODwktWviD7EI6Cg0DOSDHAweDMo7evMa3SwKzS+lBXbsF4sHW
Vh58JH3BohTBKYu76qugVX6/t9Gw3ORaHB9xYdAWQrsN1pCXLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMbZZuZrwIQzF5HvRvMGNRZytketMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNGI3Yjg5NTktYWE1Zi0z
ZmZjLWE4OTYtYjMyNDY2NjQ5YjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSaIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA5ssUrlbPEhIeb3GoBJu1u/Sk4vvlBBcInRNf22a2XbboVKvSBa+I7n
ADIqCga+Bcg4L1G7JIE6kvAQ/AHvaI/9/fHnShpj/Np4B1CMOQAYFZI//vqIiwu5
am8NEG4hp49i0ag8VEO+7tqc7mh2wf7LVYUtE/n8cdOJBollFApqRbvs6C3mLzKf
TceM0QhXCqL8356UF+zMEdhP2Ivclq7SqB4wmmJj/6l4XJfb0uMwx2ogin1sSoMu
c3BYTrbvC/AFtGJso4zlszsuYiA1X/ckZqflGFtLwBfutG9MFN3gPbGpqVnyccYk
7y91mdv4fzatn6Ddvj0NerWqc6BZq2c=
-----END CERTIFICATE-----
Generated at Sun Jun 15 18:08:01 2025 by rpki-client