Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d4ce7de3-1548-38b3-b8d3-7bab5a8b0a8e.roa
File:                     d4ce7de3-1548-38b3-b8d3-7bab5a8b0a8e.roa (raw, json)
Hash identifier:          8uOD4h1T0KUjJ0iBecU9PzZN38TDvYK9ue33HxSFxI4=
Subject key identifier:   E7:E0:4B:18:05:A1:8B:C8:E1:53:8A:E1:71:0A:24:46:AA:D9:2E:0B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A90A0F1E3E4FE178BE75AC180
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d4ce7de3-1548-38b3-b8d3-7bab5a8b0a8e.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     44477
IP address blocks:        45.39.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:f1:e3:e4:fe:17:8b:e7:5a:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=b0859bb2-82b0-432f-8a28-b0d1827385ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:66:29:3c:12:c3:6f:6b:39:f6:fe:ad:cb:e0:
                    2d:c1:c0:d3:51:ce:12:56:ea:93:ba:82:ac:06:26:
                    57:d0:92:c1:15:c7:0c:a0:8f:59:91:f5:1f:c8:74:
                    5b:de:a6:45:a8:b4:66:bf:c2:02:2c:83:31:2e:44:
                    20:f6:67:10:a9:52:33:6f:e4:9a:79:50:a0:62:9f:
                    4f:f7:93:8c:5f:e7:a0:c0:ac:40:c7:3b:e0:26:83:
                    e2:41:34:75:32:b6:2a:70:17:9c:b9:5c:d8:5f:68:
                    d8:d0:0c:5f:ac:eb:20:ce:1c:3e:ed:d2:4e:de:61:
                    6d:a1:33:75:62:91:49:d7:a4:ae:7e:c4:cc:2c:16:
                    49:fb:ca:7d:0b:78:4b:b2:1a:24:97:18:14:c8:42:
                    f3:ec:21:45:89:a1:5d:90:04:df:01:89:7c:62:ff:
                    99:e4:3a:ea:08:4d:93:99:ed:bf:ba:f6:eb:10:01:
                    1b:f0:99:14:a9:d1:d0:9e:1d:da:a3:1c:29:c1:bb:
                    b3:bf:66:11:2b:07:13:d2:2e:0c:7f:a9:c7:09:c7:
                    2f:21:46:d7:72:8a:8d:40:72:0d:f7:b2:76:59:41:
                    e6:4b:33:bb:75:af:f1:3a:e2:3f:17:82:18:69:d3:
                    13:23:57:ff:41:07:61:0f:dc:0c:69:24:52:a3:06:
                    3e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E0:4B:18:05:A1:8B:C8:E1:53:8A:E1:71:0A:24:46:AA:D9:2E:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d4ce7de3-1548-38b3-b8d3-7bab5a8b0a8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:02:81:12:7c:db:ab:18:7e:25:51:32:50:b7:7e:06:35:85:
         25:61:55:17:5e:a3:a6:db:81:af:43:37:da:a7:b7:8b:a7:16:
         20:3d:eb:d0:3a:d3:1c:74:cd:31:0b:c5:74:98:10:e0:f8:6f:
         b4:b3:ce:4c:8a:39:8f:4b:7a:ad:03:4f:29:e8:52:dd:5f:fe:
         21:6f:43:39:68:91:44:a0:0c:b2:b3:56:ff:b7:20:5a:59:98:
         31:ab:49:23:09:6c:70:b1:ec:ce:da:c0:4b:75:f8:b2:aa:f9:
         10:86:b3:78:97:09:71:d0:b9:6f:bd:10:3f:1f:6e:1f:0b:30:
         7f:ad:3f:74:32:41:74:d6:04:1a:07:51:8a:6c:a8:e8:25:0b:
         63:35:27:d9:76:18:24:ef:fd:cf:9e:04:ce:2c:57:95:34:64:
         6d:5c:4e:ba:6c:64:58:87:61:3e:00:fe:fa:b6:ee:58:26:05:
         46:88:07:98:a4:17:ba:1e:30:6c:04:8c:87:b0:6e:ef:79:f4:
         97:76:50:ac:7a:5b:49:12:69:2e:90:1d:92:40:2f:d8:3f:eb:
         63:06:0a:69:53:ee:d4:40:24:ac:93:69:eb:a3:fc:d4:9f:73:
         a4:29:94:06:5e:7e:78:3f:62:63:90:91:10:70:3d:59:8c:3e:
         5f:d9:c2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:18:26 2025 by rpki-client