Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/82920ca0-7add-3356-98b5-0a774267b8a4.roa
File:                     82920ca0-7add-3356-98b5-0a774267b8a4.roa (raw, json)
Hash identifier:          mE8/fC+vr8jVnRj/i2hGH6c7F+1Tz2L1ubKJIu2ni8o=
Subject key identifier:   8E:41:2D:C4:EE:E6:F7:70:CC:FD:F1:E6:D5:0F:D6:D3:0C:A4:AB:BC
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A7FE0AA19D21AC0C3371F1100
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/82920ca0-7add-3356-98b5-0a774267b8a4.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     5650
IP address blocks:        45.39.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:aa:19:d2:1a:c0:c3:37:1f:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=a408007e-ee47-45ad-96ec-caa0107c804c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:24:41:28:18:2e:51:8f:bb:0e:6d:ae:8c:8d:
                    0f:36:c7:e6:ac:76:26:92:67:d8:d2:7a:67:a1:fb:
                    53:31:59:a4:a7:fc:e1:8d:81:b5:9e:35:cc:ba:5b:
                    2e:90:3e:9c:81:c4:cf:e1:8a:3e:6c:82:06:40:a1:
                    e7:13:56:2e:25:7c:87:e2:f9:87:f7:4e:31:e3:4a:
                    68:8e:f9:b4:98:a0:77:9c:31:94:4b:5f:e4:31:36:
                    42:90:40:b6:59:2d:60:a6:4e:ee:6f:93:cf:c3:39:
                    d6:8a:c8:91:f8:14:ef:99:be:b5:91:28:52:71:a9:
                    4f:c9:e3:db:d9:20:46:e7:07:73:09:b7:c7:ab:4f:
                    47:14:b5:fb:1c:b4:39:ba:82:93:89:a3:57:71:0f:
                    f3:26:c8:b3:dc:7d:bb:85:ec:f5:32:94:91:3f:e6:
                    62:a9:7f:4b:76:d2:c3:4d:da:52:fe:f2:e9:90:6f:
                    3a:fc:c0:e9:1a:29:39:26:7f:59:fd:5a:32:ee:31:
                    e9:2a:37:2a:d8:7d:e5:c7:2d:32:fb:0c:a2:a0:de:
                    82:5c:93:9d:96:0f:15:bd:fe:6e:7d:a8:50:0a:b6:
                    69:e8:3e:fe:1b:7b:24:0c:6a:69:79:e2:a0:9b:f8:
                    59:10:6a:62:57:18:f1:11:2a:b8:c1:ad:d8:45:15:
                    54:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:41:2D:C4:EE:E6:F7:70:CC:FD:F1:E6:D5:0F:D6:D3:0C:A4:AB:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/82920ca0-7add-3356-98b5-0a774267b8a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:85:7b:ae:15:40:f2:66:36:57:7c:d0:5b:60:ac:d8:87:79:
         c1:0c:3e:1f:04:c7:59:6b:44:ea:9a:1f:09:68:f3:88:dc:f3:
         fc:9e:fe:30:d6:f2:73:70:c6:9f:0d:39:52:52:36:35:86:ec:
         10:6a:6e:86:e2:1c:a8:6d:59:02:82:66:bd:ad:9b:f0:14:6f:
         8e:28:69:04:1f:7d:1a:27:49:69:5a:1b:be:8c:43:cc:a5:24:
         ca:7d:0d:91:08:40:2d:db:8d:49:e2:d4:b8:d2:a4:62:8b:60:
         27:51:3b:f4:a2:40:28:65:f4:14:22:fa:df:61:73:47:78:e1:
         e4:2e:da:4f:46:21:57:38:dd:ad:20:51:81:74:90:a8:22:9a:
         2f:70:cc:e5:34:2c:63:00:84:3c:e5:96:81:d2:f7:a5:e4:e0:
         a7:f1:93:ca:ac:3f:65:6d:24:a7:1f:9b:47:41:d6:58:f3:a2:
         08:7b:73:10:46:5a:07:7a:93:c6:5e:5a:c2:cf:46:de:e7:7f:
         e8:ba:88:3a:25:ec:61:46:7a:6c:18:87:65:a0:15:8d:d6:01:
         d7:45:4f:96:bb:49:82:57:45:81:4f:54:ab:19:3d:99:71:80:
         9a:76:bb:86:b2:92:10:03:e0:df:05:c3:30:df:11:e5:6d:de:
         ed:b5:a7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:29:22 2025 by rpki-client