Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/56e0ea0e-150a-315f-927a-bd36ab463708.roa
File:                     56e0ea0e-150a-315f-927a-bd36ab463708.roa (raw, json)
Hash identifier:          J1mA7WS3McrSjdiz00xww4qwRqPa/3STeYV6GnGX1qc=
Subject key identifier:   05:84:4F:BF:15:25:A2:92:04:CA:7C:58:DF:77:0D:43:80:25:76:FA
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849E4EFC3B6C89D3104BF78FBB8
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/56e0ea0e-150a-315f-927a-bd36ab463708.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     212238
IP address blocks:        45.38.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:c3:b6:c8:9d:31:04:bf:78:fb:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=fa0b68b1-447c-46f6-8c44-9aadde118ad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:87:ff:e6:70:28:1f:d1:08:cb:9e:5d:6e:64:
                    49:e7:67:dc:2e:44:3f:86:ae:ef:cb:e5:bf:5a:79:
                    b1:d2:08:39:06:ba:a3:39:9c:ab:61:65:85:bd:2c:
                    c7:b4:2b:8e:f1:27:75:fc:c2:15:6a:19:6a:27:3a:
                    4c:84:9b:0e:4c:b5:96:8a:e4:c8:11:e3:a2:9b:1a:
                    43:86:75:6b:ae:2f:8a:52:67:c9:83:59:ca:fc:53:
                    a0:e4:19:3c:b7:90:69:5f:ac:33:67:50:ff:40:b7:
                    3a:bf:a3:d8:00:95:76:7c:83:32:4e:e5:41:09:a4:
                    05:df:76:fd:b0:ee:92:24:d9:38:92:a4:93:f7:03:
                    fa:48:4c:af:7c:14:d9:b4:8e:7c:6b:ae:2f:1b:fc:
                    f0:c1:3f:bc:6d:07:1f:41:d6:aa:dc:11:06:e1:23:
                    f6:11:95:a4:a0:79:ca:60:69:7d:36:56:82:95:db:
                    cd:39:c5:a3:9a:8c:2c:90:6c:21:9e:b0:c8:eb:48:
                    92:cb:e5:58:6f:6a:34:ec:6b:ca:f1:53:2e:21:ce:
                    cd:41:c5:12:dd:97:6a:a4:76:00:1b:f3:4a:0d:bd:
                    5f:bc:a6:1e:a1:03:1d:e4:1d:e9:1d:98:28:93:38:
                    c2:7f:8f:fd:0c:8c:b5:8f:88:8b:ad:c5:7d:0f:7f:
                    9b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:84:4F:BF:15:25:A2:92:04:CA:7C:58:DF:77:0D:43:80:25:76:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/56e0ea0e-150a-315f-927a-bd36ab463708.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:ff:68:ed:df:99:39:1f:50:1f:62:99:35:86:6e:8a:e8:1b:
         6e:c9:42:89:31:84:0c:33:71:ea:d8:9f:40:02:91:4b:25:a7:
         56:93:1c:59:d3:d5:1e:8d:da:22:5b:1d:5e:8b:2b:2c:66:6d:
         0c:f2:d0:fc:54:26:76:fc:98:5d:5e:0c:2b:1c:bd:40:82:3d:
         04:71:c5:cb:fb:b9:48:3e:b3:b5:98:73:ec:33:c1:e9:a2:45:
         1d:8b:5f:02:38:98:79:af:31:91:ce:df:2e:a0:b1:61:01:2e:
         e5:fc:da:47:e0:f6:4c:5a:c4:9f:2b:5c:9f:41:51:47:64:22:
         86:4c:28:ae:53:5c:a7:25:f4:16:a5:5b:65:88:c2:87:1c:53:
         82:dd:2f:80:15:c5:6e:c6:b0:53:3f:50:53:41:bc:bf:8d:2a:
         63:0b:d7:08:44:0e:f6:3d:d5:11:f4:c7:09:13:96:94:22:95:
         f0:e1:8e:df:be:80:bf:ec:d8:b6:5d:11:0d:41:f9:9c:57:88:
         58:aa:71:c0:36:af:57:20:6a:e9:4f:d5:4c:49:2f:ef:55:72:
         64:f7:ee:e2:ba:4a:bd:06:50:9b:a8:fd:5a:8f:12:1d:b2:d4:
         3d:eb:eb:af:37:2f:46:45:72:92:d8:37:a0:b5:cd:46:78:f5:
         bc:cb:d3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 04:53:05 2025 by rpki-client