Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cdc7a941-d2d2-3dd2-90ba-125b9a1b3176.roa
File:                     cdc7a941-d2d2-3dd2-90ba-125b9a1b3176.roa (raw, json)
Hash identifier:          5IsHWu4vgyOml2X0aHx+QKnQgrph2o4r5r4JmeaI2L0=
Subject key identifier:   08:20:AF:C3:F3:7B:A7:33:E6:1E:6B:13:74:5B:CC:4E:CC:FB:90:ED
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AAB266EFD190C2ABB62E83200
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cdc7a941-d2d2-3dd2-90ba-125b9a1b3176.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     7029
IP address blocks:        45.39.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:6e:fd:19:0c:2a:bb:62:e8:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=aa059095-0adb-4374-9124-61aac7361dba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bf:a4:fb:b2:57:3d:12:0f:11:88:29:62:f2:
                    13:32:48:92:75:20:45:0b:61:81:04:bb:81:b7:10:
                    ef:f1:45:b9:4e:c6:5d:9c:91:e9:61:c9:ee:6c:37:
                    e8:72:b3:17:69:ac:c3:ca:3e:71:89:b1:77:bd:af:
                    48:3e:5d:00:9b:2c:43:0b:73:bc:2e:a3:79:0c:ac:
                    a0:8a:2b:d9:bc:81:7c:82:28:60:3d:3b:47:9a:fe:
                    e0:c2:ab:93:8a:e8:d5:35:bb:c9:16:2a:7c:84:8c:
                    c5:d9:04:fc:73:06:8e:3c:65:59:f7:e6:32:2d:22:
                    01:18:2b:11:d9:77:e6:86:2a:85:33:72:65:8c:64:
                    bf:fe:a0:db:fa:ba:6e:b8:a8:3b:04:9d:63:48:6a:
                    2d:51:d1:bb:35:ba:07:ef:b8:69:b0:38:8a:4b:29:
                    39:38:1e:d7:be:1f:78:93:40:68:0d:dd:5a:c0:f4:
                    9c:eb:f9:c0:30:16:b8:c4:71:d2:ea:38:75:13:4f:
                    95:39:00:f2:9b:d1:a9:45:77:fc:8a:12:03:d3:40:
                    cd:f1:2f:22:dc:3f:20:9a:3d:2d:c6:91:a3:e9:03:
                    30:03:22:e8:d3:43:cc:30:2b:df:f1:36:28:fa:41:
                    46:eb:d6:66:b7:15:36:1f:60:fa:fd:52:af:24:71:
                    53:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:20:AF:C3:F3:7B:A7:33:E6:1E:6B:13:74:5B:CC:4E:CC:FB:90:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cdc7a941-d2d2-3dd2-90ba-125b9a1b3176.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:18:70:39:f8:d4:5f:b7:e6:65:ca:4d:33:a0:26:23:2b:af:
         51:b1:c8:8c:51:f1:fa:db:f3:18:16:8f:cc:43:d0:3e:13:43:
         78:60:f0:cc:72:e4:87:6e:b6:d4:c9:fd:99:fa:28:a9:8c:b2:
         1a:0c:c9:75:1c:43:52:17:8e:4c:d1:b6:7a:27:37:93:cb:21:
         08:5c:40:5d:96:28:c0:f3:38:e1:a9:f9:d2:5b:c9:5c:7d:85:
         9f:c9:77:8d:17:f6:8c:f1:f0:fd:07:38:49:19:e0:f7:0f:5c:
         53:be:47:a2:82:88:f1:fb:06:4f:a4:f6:1a:ae:0e:03:29:86:
         de:06:52:3a:d6:98:7c:31:b8:72:8c:9f:38:43:f6:96:95:a4:
         cc:81:70:9f:4a:75:50:1c:50:af:dd:05:66:40:83:f5:4b:bc:
         7a:8e:6d:33:b1:2d:df:72:0d:4f:91:a2:cf:4c:2e:82:1f:f9:
         8c:c6:4e:c9:83:f7:22:7b:2a:09:7b:09:0f:6b:e8:85:83:54:
         73:78:dc:47:89:3d:20:43:a7:7c:68:a8:fd:41:70:32:ce:fe:
         b4:13:ba:65:5c:ed:ee:99:35:c8:54:cb:c7:6d:1b:55:68:c8:
         e0:c2:6b:4f:7e:b0:65:0d:0d:aa:6c:11:bc:46:93:41:24:db:
         41:af:04:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:14:20 2025 by rpki-client