Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5cec0844-3d40-38ca-8766-816d7872ba93.roa
File:                     5cec0844-3d40-38ca-8766-816d7872ba93.roa (raw, json)
Hash identifier:          wRoKymmVTuQKTqgzpSR9di/lG/2dpyni/gV2E/0DHew=
Subject key identifier:   CD:07:2F:A9:81:7C:A9:F8:84:38:5E:EF:01:C0:88:95:AF:D8:87:FE
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584BB1928337B2D1B88D6F400800
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5cec0844-3d40-38ca-8766-816d7872ba93.roa
Signing time:             Thu 30 Oct 2025 13:00:38 +0000
ROA not before:           Thu 30 Oct 2025 13:00:38 +0000
ROA not after:            Wed 28 Jan 2026 14:00:38 +0000
asID:                     25893
IP address blocks:        45.39.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b1:92:83:37:b2:d1:b8:8d:6f:40:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 30 13:00:38 2025 GMT
            Not After : Jan 28 14:00:38 2026 GMT
        Subject: CN=a18080fa-7316-46bc-8332-e0e44c9b1c80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:08:f4:36:69:f5:44:15:1b:1b:d4:87:b2:a3:
                    cd:d8:c7:9a:0f:4d:c6:5c:04:4d:c0:59:c4:82:10:
                    aa:2c:d7:39:ac:bb:6c:d7:3c:88:83:59:2e:81:6e:
                    bb:35:f6:6e:69:fa:c7:28:03:0d:72:b1:0b:f6:c7:
                    0b:5d:85:ad:fa:f2:51:59:80:1c:4b:16:13:ac:9c:
                    f2:84:7b:94:2b:14:71:2c:50:7f:76:e5:e8:07:e1:
                    c6:88:e0:8b:35:72:fd:6c:17:87:2f:54:bf:b7:35:
                    48:cc:72:bd:d9:34:5f:c4:25:87:4d:d5:b3:42:17:
                    ba:ef:ea:6d:8e:f6:6f:f5:b5:cc:bd:fa:b6:bd:ee:
                    95:45:99:37:4f:ee:7f:9d:95:66:82:51:26:f1:b9:
                    0c:43:cf:46:7d:82:5f:2e:07:fa:a5:9e:34:1c:00:
                    9b:54:38:ce:0d:f6:87:ed:3d:f1:7a:9f:90:7b:c1:
                    60:6a:d1:01:d8:63:f0:83:1c:eb:ee:e4:3f:cb:96:
                    f6:b7:9a:42:44:ef:d7:fb:a7:fe:4d:c5:86:6e:87:
                    59:3e:e9:01:39:03:65:82:4e:f4:3b:92:c2:bd:fb:
                    64:fd:24:f9:5e:b3:6e:d1:8f:e1:03:47:24:52:01:
                    43:d7:ab:c7:82:44:ef:53:9c:b9:57:ab:1f:e5:84:
                    dd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:07:2F:A9:81:7C:A9:F8:84:38:5E:EF:01:C0:88:95:AF:D8:87:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5cec0844-3d40-38ca-8766-816d7872ba93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:71:74:6d:b8:23:01:5a:a5:7a:df:96:ba:41:70:07:ac:55:
         35:97:42:6b:9b:17:32:05:77:48:02:cc:11:c1:7b:41:96:17:
         09:97:53:d0:bc:33:69:97:3a:3f:7c:55:9c:f7:a4:78:7a:92:
         17:d5:45:cb:b6:1f:b6:e6:9b:10:42:0a:31:bb:67:40:bd:67:
         02:8f:1c:be:96:9e:8e:76:74:83:2c:b9:09:da:83:20:b0:62:
         03:07:43:9c:a9:c7:ef:f2:29:6c:e9:d7:8d:81:2f:d0:ff:a2:
         76:d7:54:ba:ba:00:16:3d:50:23:a9:73:e4:c3:b0:b5:03:a1:
         6d:5e:32:71:3a:56:07:3d:51:fc:b2:b5:6d:8b:1e:f9:cc:1a:
         e0:ed:29:67:fe:86:51:fe:74:1d:66:80:b8:d5:61:20:a1:d0:
         ce:d8:1f:2d:e3:75:9e:b8:5a:63:74:30:7f:39:70:97:a3:2c:
         3c:78:46:71:2f:3b:67:a8:53:ed:36:b7:9b:c0:c3:f4:c0:da:
         2a:d2:31:24:1a:49:c9:c1:06:c2:37:9c:c6:00:f7:4f:78:95:
         31:4c:4b:08:0e:07:c9:40:57:1f:b5:fb:82:76:bf:95:c6:d1:
         5e:64:c7:51:c5:2a:67:85:c9:32:68:36:8a:9f:d4:51:f5:36:
         ed:98:ea:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkoM3stG4jW9ACAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk
YTE4MDgwZmEtNzMxNi00NmJjLTgzMzItZTBlNDRjOWIxYzgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAj0Nmn1RBUbG9SHsqPN2MeaD03GXARNwFnE
ghCqLNc5rLts1zyIg1kugW67NfZuafrHKAMNcrEL9scLXYWt+vJRWYAcSxYTrJzy
hHuUKxRxLFB/duXoB+HGiOCLNXL9bBeHL1S/tzVIzHK92TRfxCWHTdWzQhe67+pt
jvZv9bXMvfq2ve6VRZk3T+5/nZVmglEm8bkMQ89GfYJfLgf6pZ40HACbVDjODfaH
7T3xep+Qe8FgatEB2GPwgxzr7uQ/y5b2t5pCRO/X+6f+TcWGbodZPukBOQNlgk70
O5LCvftk/ST5XrNu0Y/hA0ckUgFD16vHgkTvU5y5V6sf5YTdCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM0HL6mBfKn4hDhe7wHAiJWv2If+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNWNlYzA4NDQtM2Q0MC0z
OGNhLTg3NjYtODE2ZDc4NzJiYTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSfzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHVxdG24IwFapXrflrpBcAesVTWXQmubFzIFd0gCzBHBe0GWFwmXU9C8
M2mXOj98VZz3pHh6khfVRcu2H7bmmxBCCjG7Z0C9ZwKPHL6Wno52dIMsuQnagyCw
YgMHQ5ypx+/yKWzp142BL9D/onbXVLq6ABY9UCOpc+TDsLUDoW1eMnE6Vgc9Ufyy
tW2LHvnMGuDtKWf+hlH+dB1mgLjVYSCh0M7YHy3jdZ64WmN0MH85cJejLDx4RnEv
O2eoU+02t5vAw/TA2irSMSQaScnBBsI3nMYA9094lTFMSwgOB8lAVx+1+4J2v5XG
0V5kx1HFKmeFyTJoNoqf1FH1Nu2Y6oE=
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:33:29 2025 by rpki-client