Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8ee7cb69-b5ef-3fa9-b610-a7f284055308.roa
File:                     8ee7cb69-b5ef-3fa9-b610-a7f284055308.roa (raw, json)
Hash identifier:          boeNL2yKbaXv7KCZTWV1jHqsjmreYc7t00oLWTLBG3I=
Subject key identifier:   E3:F0:0A:DA:B9:0A:F2:84:FF:2D:75:21:17:41:E5:EA:8B:8E:48:28
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849F0B55822FF524D6B2DF52880
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8ee7cb69-b5ef-3fa9-b610-a7f284055308.roa
Signing time:             Thu 22 May 2025 18:13:13 +0000
ROA not before:           Thu 22 May 2025 18:13:13 +0000
ROA not after:            Wed 20 Aug 2025 18:13:13 +0000
asID:                     25893
IP address blocks:        45.39.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f0:b5:58:22:ff:52:4d:6b:2d:f5:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 22 18:13:13 2025 GMT
            Not After : Aug 20 18:13:13 2025 GMT
        Subject: CN=2e861308-a617-44df-bc8c-f8a9cd0878b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:cc:78:cd:d8:35:88:d5:85:b6:56:88:42:1a:
                    c0:95:7e:20:17:fa:35:ac:1e:a5:e5:81:32:09:8f:
                    26:2a:e2:50:b9:f6:3b:76:ff:12:de:df:58:6c:a5:
                    24:d7:6d:0b:60:44:a1:a5:ad:b1:f9:b9:0d:9f:97:
                    61:d5:ba:1f:ba:2b:67:a1:7e:ce:5e:59:26:80:5d:
                    38:d5:40:dd:72:c4:e6:5b:19:91:b0:3e:f8:e8:e3:
                    ee:a8:8f:e1:cb:44:a4:b4:ff:f2:ac:10:e0:56:62:
                    92:12:c5:6d:f5:7c:63:13:96:08:46:cc:0e:64:06:
                    14:a1:8d:97:b9:76:9a:af:2b:9d:84:2c:71:59:31:
                    2b:4f:3e:cc:ed:b2:49:a3:90:ba:b9:30:38:22:2e:
                    16:d0:2a:7c:3c:23:87:f3:f0:3e:e7:8b:16:cb:38:
                    d4:c1:99:4c:a6:02:e2:3a:b9:3a:c6:97:75:5f:b3:
                    b5:82:53:8b:ef:3e:37:b0:bc:6a:73:08:ff:c7:70:
                    d6:c9:67:08:1e:fb:76:02:76:e7:4f:5f:ac:db:d7:
                    3c:bd:45:8c:e3:04:a2:e5:1c:d6:39:85:50:3a:7b:
                    36:81:8f:fe:bb:ae:ef:5e:77:32:6d:86:38:39:86:
                    7c:d7:3a:54:c5:02:3a:db:fe:24:17:cb:05:9f:fe:
                    09:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F0:0A:DA:B9:0A:F2:84:FF:2D:75:21:17:41:E5:EA:8B:8E:48:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8ee7cb69-b5ef-3fa9-b610-a7f284055308.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:1c:75:ec:8a:2e:bc:ce:35:6a:74:86:42:e0:e5:fa:32:a7:
         1f:b8:58:70:d0:7a:b0:e9:fc:ac:0f:6e:72:db:e1:9c:4b:d9:
         8b:6e:83:7c:b1:0d:35:5a:bb:07:43:b0:51:72:63:ae:41:f2:
         47:26:2a:0a:e3:c2:6d:f4:f4:fe:42:f1:c4:89:a7:57:9b:03:
         7c:01:8e:f0:05:55:c4:a2:57:e5:92:93:32:2f:ff:40:fd:0d:
         48:18:6f:5d:32:fe:fa:ab:46:cb:61:2c:51:02:9e:96:ba:5f:
         8d:d8:55:83:12:48:f0:4b:9e:ba:67:26:fb:4b:79:43:50:f0:
         0c:35:63:18:51:67:9d:a3:a0:75:84:5e:89:3c:a2:6a:02:0f:
         49:72:14:32:6f:88:a3:0e:ae:2d:6d:d2:fd:ea:68:c1:8a:19:
         52:fd:d4:72:f0:bc:e6:35:a9:ba:66:26:14:d1:b1:4e:70:44:
         56:34:61:95:b6:bd:de:b5:c6:28:d2:bb:0c:d6:4b:39:ce:32:
         ee:cf:b8:29:7e:17:18:69:1f:41:b3:a1:82:25:63:76:03:cb:
         c8:70:e8:fb:78:97:52:9b:79:f0:54:e1:81:1f:dd:bf:61:7d:
         d7:70:63:9f:cc:88:3b:36:82:02:19:75:b3:5a:cc:a0:2d:5a:
         72:3b:c1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:57:18 2025 by rpki-client