Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/95810605-21cb-3089-add0-425a42e1087b.roa
File:                     95810605-21cb-3089-add0-425a42e1087b.roa (raw, json)
Hash identifier:          ztuQaUqaRI9/KfdSbmrI9RMERpty7sePVVpmH0ALwSk=
Subject key identifier:   FC:F1:A1:34:69:7A:B9:63:07:A1:12:55:51:62:4E:49:8A:0E:15:E2
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849B14A374F6C9E1D9CEE64BF00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/95810605-21cb-3089-add0-425a42e1087b.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     48031
IP address blocks:        45.39.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:37:4f:6c:9e:1d:9c:ee:64:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=6b41fcad-2ca2-4193-85b5-a6c97cfc9531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:87:82:cc:9c:7a:00:12:1f:8c:b7:5f:41:1e:
                    cc:de:ab:43:56:54:1f:68:87:38:27:e7:2e:7e:8a:
                    90:ec:52:c9:fd:6d:9d:ed:e6:9e:3b:bf:0d:6d:5c:
                    42:c0:80:c7:2d:77:dd:1c:6f:d6:e0:14:fc:38:86:
                    c6:da:2c:50:35:ea:f5:e5:6a:bd:3b:3d:70:e1:c8:
                    64:20:55:44:3f:55:81:f9:d9:bf:57:44:bb:5b:86:
                    e0:73:45:06:96:ed:a9:a5:a7:f8:1e:9a:2b:9b:33:
                    28:49:57:0b:f9:24:a4:b2:91:a1:e0:57:72:d7:45:
                    4a:2a:53:d7:f9:63:9d:79:cf:a4:38:c5:23:e2:67:
                    c5:ca:b3:fa:b5:a9:b4:68:23:fd:ac:07:ff:d8:ad:
                    1e:bc:30:4b:12:d1:06:72:b7:ab:15:37:b4:b8:7c:
                    20:07:67:b1:1d:2f:5d:04:2d:5f:76:25:26:40:a8:
                    10:58:94:b5:c7:b3:c1:58:ca:a4:30:1e:e2:2c:b3:
                    f0:ba:6d:33:71:52:b6:14:e3:96:2e:fa:3a:af:46:
                    54:b7:0b:c3:8f:9e:b1:2e:e3:4c:3d:d8:06:00:01:
                    15:72:3a:d8:5e:b1:7f:e3:16:4c:b5:e8:dc:37:be:
                    09:ad:5f:ae:10:5a:e7:a7:28:c3:d5:d2:bc:47:d1:
                    6d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F1:A1:34:69:7A:B9:63:07:A1:12:55:51:62:4E:49:8A:0E:15:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/95810605-21cb-3089-add0-425a42e1087b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:eb:c0:1a:ca:1e:2f:4f:1c:4d:c8:31:ca:3b:ae:26:7b:82:
         3d:e6:e1:f2:6d:8d:d9:a1:b5:5e:5d:4a:45:62:2c:f7:d8:ad:
         71:c2:78:ad:fa:ec:9e:e9:00:22:85:01:24:cb:20:3a:03:92:
         40:17:5d:f9:2e:69:d9:9c:a1:a6:05:f9:e1:2a:b6:1f:75:d4:
         f7:42:11:b6:62:c2:fc:1d:1e:c5:6b:2d:58:73:6c:41:e2:12:
         7c:7c:0e:b9:6e:f5:f1:63:80:ed:b3:79:16:88:e9:95:fa:cf:
         29:70:0a:63:ef:29:c7:b4:f3:48:aa:50:d3:c9:4f:38:0a:3d:
         e1:36:dc:a4:e4:3a:c1:26:88:39:0c:5f:19:68:18:93:d1:83:
         9e:89:d0:0e:f1:b1:ad:25:81:ba:0e:dc:15:6e:b3:a3:d2:ec:
         f5:2a:da:26:6b:df:21:8b:f5:f2:2e:25:13:0b:4d:41:e8:68:
         2c:97:d4:07:0d:60:0c:02:3b:a3:d8:bd:45:f3:1e:aa:04:c7:
         54:26:cd:7d:ee:1e:19:c4:ce:5d:c0:7c:cd:5f:27:75:9c:1d:
         95:80:26:52:f3:9e:bb:3e:2c:a3:69:21:00:77:3a:97:df:67:
         f7:6c:3c:64:29:f9:92:3c:d1:af:4d:ca:64:0e:0b:cc:b5:3d:
         e1:62:82:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:53:22 2025 by rpki-client