Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9dda1bbf-e463-3c39-844f-4a68d6385e87.roa
File:                     9dda1bbf-e463-3c39-844f-4a68d6385e87.roa (raw, json)
Hash identifier:          pSTDe5dfu91Xp3rSqCp22tHaz/tSRuLk0Lft7dQKXx0=
Subject key identifier:   36:08:99:4C:D9:F0:28:51:0B:6C:E8:12:19:B3:49:DF:23:6E:D8:BC
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849A089F30F2F7B393525257700
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9dda1bbf-e463-3c39-844f-4a68d6385e87.roa
Signing time:             Thu 24 Apr 2025 01:00:47 +0000
ROA not before:           Thu 24 Apr 2025 01:00:47 +0000
ROA not after:            Wed 23 Jul 2025 01:00:47 +0000
asID:                     5650
IP address blocks:        45.39.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:89:f3:0f:2f:7b:39:35:25:25:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 24 01:00:47 2025 GMT
            Not After : Jul 23 01:00:47 2025 GMT
        Subject: CN=ba67bfb1-55d3-4f0a-a95a-605f0024808c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:68:d1:3d:74:00:71:f7:c5:30:7a:85:b5:f5:
                    e4:fd:c9:31:a2:e3:c5:98:70:74:49:be:9b:06:fd:
                    67:f2:01:8e:14:c8:4b:99:f7:ea:8f:50:7d:06:3a:
                    df:c3:cd:c0:c0:ed:a6:ac:a5:7f:c0:5f:11:08:32:
                    18:ec:71:c5:d3:8f:91:f0:73:d2:9b:3c:e9:70:b1:
                    5d:b0:81:33:a3:cc:a1:39:22:c3:5c:11:e3:07:8d:
                    ec:22:9b:cb:72:33:ad:04:67:47:50:dd:95:3d:5b:
                    bc:3f:01:c7:2c:04:0f:33:31:39:67:e4:4d:e1:44:
                    c2:69:29:e9:6e:63:85:de:fa:0f:09:b8:6f:0d:0e:
                    17:9f:30:c8:05:2b:40:23:a8:ec:16:ed:5b:af:79:
                    af:45:fa:63:e8:cd:38:d8:e6:8d:d7:8e:9b:0a:18:
                    a0:67:b3:af:5e:5d:9d:23:bb:54:8b:0b:cb:ba:0a:
                    f9:db:e4:93:e8:08:29:0c:ce:05:d7:26:4d:db:3a:
                    69:cc:a3:3f:76:f5:72:8f:1d:77:c8:4c:97:a0:05:
                    5f:db:02:0d:bf:b1:b5:dd:75:a3:25:91:5b:2b:47:
                    47:ac:9a:2b:bf:e3:97:a4:52:18:27:05:e1:46:c7:
                    34:76:a6:0b:23:5d:11:f7:de:1f:44:bf:f6:ad:86:
                    b4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:08:99:4C:D9:F0:28:51:0B:6C:E8:12:19:B3:49:DF:23:6E:D8:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9dda1bbf-e463-3c39-844f-4a68d6385e87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:d3:93:a6:bd:33:bd:72:b4:49:ef:2b:8c:7b:c4:c5:45:59:
         8a:3e:68:c6:f1:21:5d:f1:a7:5d:19:91:3c:b0:8f:8c:0e:be:
         31:e1:6c:3b:49:68:0f:13:9a:fa:80:10:91:13:6f:87:86:7b:
         b8:17:38:b4:a4:7e:e3:cc:88:b0:b4:13:f9:db:33:c1:66:e1:
         79:40:01:d9:d5:06:72:91:7e:0c:f7:7f:64:f0:92:ed:58:a6:
         f4:d2:78:f3:22:ca:6a:e9:cf:7f:08:67:35:76:42:9e:76:7a:
         d9:a3:91:8d:b0:3f:bb:a0:c0:1d:a8:46:4c:cf:5c:fe:01:42:
         ac:f9:db:5a:4c:25:ea:e5:ce:2f:45:bd:ff:73:9d:92:2a:6c:
         78:0f:bd:16:95:01:49:bb:8c:95:33:7d:86:dd:29:60:c9:1e:
         0c:87:19:ae:dd:e0:99:08:ce:b6:8c:a4:9c:89:c1:52:f1:a4:
         aa:e4:ab:e4:36:37:59:af:6a:02:f0:9f:46:24:30:90:ae:0d:
         7a:17:4a:e4:42:5f:68:5f:c8:fd:ae:76:d0:ba:b4:3e:73:2c:
         c3:fd:6d:3c:7e:20:bc:79:75:da:89:89:9b:0c:b0:02:98:8f:
         7d:0c:66:7a:07:81:ef:8f:89:a7:cd:c5:db:eb:d5:0d:0e:b9:
         f8:ca:84:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgifMPL3s5NSUldwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk
YmE2N2JmYjEtNTVkMy00ZjBhLWE5NWEtNjA1ZjAwMjQ4MDhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGjRPXQAcffFMHqFtfXk/ckxouPFmHB0Sb6b
Bv1n8gGOFMhLmffqj1B9Bjrfw83AwO2mrKV/wF8RCDIY7HHF04+R8HPSmzzpcLFd
sIEzo8yhOSLDXBHjB43sIpvLcjOtBGdHUN2VPVu8PwHHLAQPMzE5Z+RN4UTCaSnp
bmOF3voPCbhvDQ4XnzDIBStAI6jsFu1br3mvRfpj6M042OaN146bChigZ7OvXl2d
I7tUiwvLugr52+ST6AgpDM4F1yZN2zppzKM/dvVyjx13yEyXoAVf2wINv7G13XWj
JZFbK0dHrJorv+OXpFIYJwXhRsc0dqYLI10R994fRL/2rYa0rwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDYImUzZ8ChRC2zoEhmzSd8jbti8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOWRkYTFiYmYtZTQ2My0z
YzM5LTg0NGYtNGE2OGQ2Mzg1ZTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSc9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGPTk6a9M71ytEnvK4x7xMVFWYo+aMbxIV3xp10ZkTywj4wOvjHhbDtJ
aA8TmvqAEJETb4eGe7gXOLSkfuPMiLC0E/nbM8Fm4XlAAdnVBnKRfgz3f2Twku1Y
pvTSePMiymrpz38IZzV2Qp52etmjkY2wP7ugwB2oRkzPXP4BQqz521pMJerlzi9F
vf9znZIqbHgPvRaVAUm7jJUzfYbdKWDJHgyHGa7d4JkIzraMpJyJwVLxpKrkq+Q2
N1mvagLwn0YkMJCuDXoXSuRCX2hfyP2udtC6tD5zLMP9bTx+ILx5ddqJiZsMsAKY
j30MZnoHge+PiafNxdvr1Q0OufjKhDk=
-----END CERTIFICATE-----
Generated at Sun Jun 15 05:10:06 2025 by rpki-client