Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d3de4e43-15d3-36e4-9a9b-5ba9950efb78.roa
File:                     d3de4e43-15d3-36e4-9a9b-5ba9950efb78.roa (raw, json)
Hash identifier:          59AeUr+BTxxe/ElMQdlJOyvqalRz34y0J9fD20/tWuM=
Subject key identifier:   2D:2A:D2:99:67:33:A5:D9:84:E9:57:80:72:BD:55:B1:EF:BB:4E:0F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A023FC675530D6E74314FCA90
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d3de4e43-15d3-36e4-9a9b-5ba9950efb78.roa
Signing time:             Thu 29 May 2025 01:00:50 +0000
ROA not before:           Thu 29 May 2025 01:00:50 +0000
ROA not after:            Wed 27 Aug 2025 01:00:50 +0000
asID:                     56971
IP address blocks:        45.38.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:02:3f:c6:75:53:0d:6e:74:31:4f:ca:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 29 01:00:50 2025 GMT
            Not After : Aug 27 01:00:50 2025 GMT
        Subject: CN=6ae375d9-f0f6-4f74-bdbc-0db146176dd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:33:01:a8:58:40:e4:00:22:da:37:8a:0c:44:
                    37:01:74:7a:35:fe:63:df:b5:cb:95:75:3c:84:0b:
                    a8:8b:8a:96:6a:d5:6d:0d:27:d3:aa:dc:42:8b:b0:
                    fb:27:80:48:b1:01:fb:08:c8:44:c7:b1:a7:d5:6c:
                    c9:b9:bd:21:61:b7:e5:1a:b8:08:54:85:3d:2a:69:
                    11:e6:09:ff:ab:0f:27:b8:10:a8:3e:4a:97:46:9e:
                    11:6d:24:37:94:90:8a:f1:53:0e:b8:b5:fb:cc:ab:
                    54:9c:89:be:8c:07:ab:36:f7:bb:cf:a8:2a:74:11:
                    50:f3:b6:44:32:c8:72:e2:51:e5:3a:94:e5:2e:96:
                    a8:3e:c7:96:a7:87:6a:96:2e:9c:71:b0:e8:87:cc:
                    98:c7:b1:bc:0d:7c:21:0c:1f:38:eb:75:1a:43:87:
                    93:33:0e:af:86:b0:7f:5a:46:22:4d:16:06:2d:f0:
                    90:fb:03:fc:10:d7:13:aa:2f:c3:ba:7a:de:95:19:
                    b2:d0:1e:8a:3b:5f:10:0d:24:bc:32:21:94:3c:fd:
                    67:fe:64:c7:1a:04:98:ea:ca:0f:16:b7:fd:73:41:
                    ee:92:c4:e0:9a:c0:7e:b6:43:8a:4e:f8:eb:3b:e6:
                    17:d2:62:76:8b:cd:cb:09:40:3a:c6:cd:94:cb:d0:
                    05:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:2A:D2:99:67:33:A5:D9:84:E9:57:80:72:BD:55:B1:EF:BB:4E:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d3de4e43-15d3-36e4-9a9b-5ba9950efb78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:97:4d:99:e8:6b:56:c8:c3:ce:91:70:03:3d:c1:cf:66:4c:
         c3:6d:cd:9c:e9:61:18:bf:e0:43:0a:b3:b8:fe:cc:a8:23:20:
         cd:ba:a0:1b:94:1b:7e:a9:fd:82:26:6c:1b:d7:71:9b:b7:6c:
         d2:45:87:ca:f8:ed:48:93:25:1c:d5:f6:18:0f:80:78:52:0b:
         ec:af:2d:47:cd:f6:d1:69:94:c9:f9:3d:82:9f:08:ee:0c:21:
         0d:e8:ed:1b:a3:55:a0:82:53:68:6a:5a:d3:1f:e3:5d:bf:58:
         c3:b5:f6:22:42:d2:8d:4f:43:ce:c1:8b:21:6c:e6:d9:53:df:
         f6:34:57:e1:d2:fe:65:1c:85:fc:c5:e4:ea:72:44:ba:08:25:
         97:8f:d2:1e:a7:b3:db:1c:39:f1:b2:ce:2a:cd:86:cd:01:70:
         5f:ac:7f:cf:c1:88:c1:51:fd:b3:4a:ac:82:fa:fd:1c:e1:28:
         a6:00:ce:14:4c:a7:61:ee:0f:28:4d:46:b8:0a:1f:70:8d:dc:
         e7:da:13:56:b8:c2:b7:7a:2c:7e:e8:bc:ea:04:86:9c:de:40:
         01:92:49:ea:3e:6e:14:b3:f5:75:54:e4:79:9c:34:e1:89:94:
         f1:04:c3:bb:a1:c5:0f:d8:a3:3b:57:e1:21:90:df:d7:6c:3a:
         25:4a:56:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:16:06 2025 by rpki-client