Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a3648b55-1570-3912-9d19-3c2bbb65ea5c.roa
File:                     a3648b55-1570-3912-9d19-3c2bbb65ea5c.roa (raw, json)
Hash identifier:          epOrhPhK25gGNZkZ2sI2X5DRTlACFbRNK2f7wrC1LKk=
Subject key identifier:   AA:BE:BD:0B:21:74:B0:63:BE:5E:AA:8D:70:DE:B1:B0:E9:CA:1C:28
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858496E497D8F4134C260ABE15EE0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a3648b55-1570-3912-9d19-3c2bbb65ea5c.roa
Signing time:             Sun 06 Apr 2025 01:00:47 +0000
ROA not before:           Sun 06 Apr 2025 01:00:47 +0000
ROA not after:            Sat 05 Jul 2025 01:00:47 +0000
asID:                     202015
IP address blocks:        45.38.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6e:49:7d:8f:41:34:c2:60:ab:e1:5e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr  6 01:00:47 2025 GMT
            Not After : Jul  5 01:00:47 2025 GMT
        Subject: CN=a4a31f7b-12b9-4c4f-9d4d-0cd2b6146c7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:00:3d:35:1c:4e:5d:20:ed:c1:d8:e6:c3:28:
                    11:05:c6:dc:6a:76:af:a8:70:db:87:28:19:2c:ba:
                    f4:70:99:9f:4f:5e:aa:f2:70:dd:71:22:b1:96:29:
                    f2:e7:ac:2d:0f:24:f2:c1:99:74:9d:f5:16:ad:48:
                    b9:ea:11:62:43:d7:99:65:77:e2:16:9c:ef:84:7a:
                    41:a9:74:0a:69:7a:fd:50:23:de:27:7b:9d:70:55:
                    d4:1f:69:f1:7a:0f:42:88:d7:8a:06:c9:7e:e2:32:
                    b6:65:3a:5e:c7:72:92:95:79:e2:31:ed:a0:d9:d0:
                    ad:3b:5a:89:82:c1:c0:71:be:af:34:29:5a:8b:e3:
                    71:b9:b4:33:5c:8d:6d:b3:73:31:cd:e6:3a:90:ad:
                    7d:64:5f:fa:c2:a2:7b:d2:bf:0f:e8:10:d9:9c:7e:
                    6d:9a:a4:8c:99:90:17:99:01:b7:ba:87:dd:17:a3:
                    4a:f2:c0:e7:ef:d3:6d:18:04:74:54:7e:0e:e8:b1:
                    7e:02:36:9c:f7:4e:01:69:7c:32:01:04:0b:90:d0:
                    0b:b2:99:e3:3a:ff:d5:16:39:20:06:3d:4e:50:12:
                    18:ca:15:6c:8f:dc:a9:8e:7e:99:70:3f:68:0a:c0:
                    72:de:41:f2:d4:79:b2:3d:f5:1f:48:70:05:37:10:
                    d2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:BE:BD:0B:21:74:B0:63:BE:5E:AA:8D:70:DE:B1:B0:E9:CA:1C:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a3648b55-1570-3912-9d19-3c2bbb65ea5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:2b:64:0b:76:8e:27:2a:22:97:14:19:cc:1d:5c:d7:f9:6f:
         b9:fa:d7:dc:36:5b:5f:a3:71:b0:76:74:11:4d:9f:85:f8:48:
         75:5e:43:4c:be:53:77:15:63:1d:46:35:f7:1a:33:65:55:eb:
         a2:b2:22:7d:a3:26:e2:59:e9:ab:40:6f:7b:6c:30:17:4a:a7:
         40:f8:96:24:57:30:0d:5d:a7:0e:35:dc:79:b1:81:f7:c2:56:
         73:ea:6b:1e:99:00:bf:10:fe:34:ec:07:3c:1b:9e:4e:c0:21:
         1b:f8:20:3b:01:a4:3b:68:cf:55:bd:be:c2:96:6b:77:0b:29:
         6a:87:c2:e3:59:36:b6:9f:61:d7:b1:f8:fc:df:20:16:6a:df:
         6f:ac:e4:ef:59:f6:38:78:c4:b0:09:82:00:78:e8:fd:de:7e:
         a1:5c:e3:a8:a9:bd:fb:c5:95:0f:ce:ee:3a:41:89:7e:c8:2b:
         7d:f9:b7:35:61:bb:90:2c:60:0f:73:8d:2d:c6:1d:ee:78:f0:
         72:0a:72:73:49:77:cf:05:3d:94:7d:62:2d:6e:4f:2f:5f:c8:
         94:ae:e1:8d:36:1f:fc:10:43:ec:42:bd:67:c1:1e:b3:7f:db:
         70:2b:98:2e:7e:87:b1:0b:f9:f4:27:f0:e3:ab:35:62:7a:ef:
         5b:45:7a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:21:20 2025 by rpki-client