Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/597fcbba-7577-39f7-ae42-50b4b923ab25.roa
File:                     597fcbba-7577-39f7-ae42-50b4b923ab25.roa (raw, json)
Hash identifier:          2FkobtYsqSLXBI/uKZqs2Dg5sYFpOr6AEiYIJ4x83lU=
Subject key identifier:   08:3D:BD:02:47:D9:EE:53:72:A0:21:39:99:B0:02:27:A3:61:CE:3C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A0D6A93779F41D82447A35634
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/597fcbba-7577-39f7-ae42-50b4b923ab25.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     212238
IP address blocks:        45.39.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:93:77:9f:41:d8:24:47:a3:56:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=1e75f842-da09-42ee-bb4c-b926d91f48df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c9:a8:a1:f9:31:8b:3d:75:b6:24:bc:3d:d3:
                    a5:da:f0:54:66:57:ff:1e:1e:29:a4:10:d1:84:59:
                    98:d2:64:2f:22:06:8e:2f:e5:58:46:73:f5:28:b4:
                    cf:ab:d8:2f:6e:2a:cb:e4:f2:ed:0a:a3:f7:28:af:
                    32:b3:89:25:23:b4:84:17:e5:d4:a3:dd:d8:2f:dd:
                    9a:b3:96:b1:f2:ba:d7:8d:20:f8:82:ab:cc:75:47:
                    a7:95:44:20:95:0b:cd:89:33:17:6a:86:42:8f:d1:
                    8d:98:ff:a5:62:3c:81:7f:90:7d:c8:6c:3a:b5:cd:
                    65:3e:ff:a2:4f:a9:e8:21:ec:17:dd:e9:a3:a9:d2:
                    7d:fa:38:5c:86:e3:d4:29:42:ee:4c:1e:cc:16:7a:
                    ee:f7:41:8b:d4:a4:b0:15:62:ad:81:c2:29:ae:bb:
                    df:1a:e6:4a:d8:32:18:fc:39:92:65:18:48:7e:1a:
                    45:47:27:e7:b4:f4:d1:2d:09:88:e3:8b:02:87:e8:
                    d1:01:76:ac:5c:3e:c6:56:60:ab:54:3e:70:8f:fb:
                    b0:93:95:f9:ab:11:a5:50:d7:a0:4c:a8:86:57:2a:
                    63:ea:96:2f:13:bc:c1:03:8b:d2:e3:11:8c:4b:4b:
                    74:40:f5:ae:aa:ad:99:e6:4c:43:9d:b9:be:af:80:
                    9d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:3D:BD:02:47:D9:EE:53:72:A0:21:39:99:B0:02:27:A3:61:CE:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/597fcbba-7577-39f7-ae42-50b4b923ab25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:4f:57:02:5e:0a:e0:36:e5:8f:a2:a4:95:7a:12:90:22:7a:
         28:e4:48:26:86:6b:b3:a5:61:54:d6:76:d5:08:c1:bb:91:38:
         cd:ba:ca:f9:c8:e5:66:c4:3a:0e:73:ce:03:4a:98:22:dc:bc:
         6d:d9:6b:f3:0e:ec:d2:02:7b:78:1f:3f:ab:b0:9f:7c:7a:11:
         f3:4d:06:00:f8:c3:6a:82:61:26:17:ca:8c:74:4c:f8:e6:cf:
         35:51:9b:ec:ce:50:7e:2e:06:41:a3:ed:af:0f:e3:cb:fc:a1:
         89:e0:df:af:b3:5c:7f:a1:45:76:c8:a4:3c:8e:b3:e8:0d:dd:
         bb:86:e5:54:0c:e3:fe:b9:27:05:fb:69:81:9c:93:1c:8d:ef:
         43:0a:db:37:55:58:b1:d9:a2:3b:7d:ec:4e:fc:38:3a:65:c8:
         73:4a:69:70:7d:6d:3d:c6:52:01:10:17:39:84:f1:02:57:8a:
         24:63:8d:d7:c7:65:12:96:14:3e:36:b7:a3:e6:fc:aa:1f:2e:
         bb:18:72:46:2c:e3:6f:d1:66:d1:7c:84:2a:f1:d2:01:66:a5:
         7a:05:f5:6c:5c:33:62:64:e3:af:25:33:40:75:67:08:bd:00:
         3b:4d:22:9e:12:ac:49:ce:f4:92:b6:1f:15:f9:e1:0c:cc:25:
         8e:08:56:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 04:48:00 2025 by rpki-client