Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d9738ce9-7d79-358d-a7f8-f501ddd43576.roa
File:                     d9738ce9-7d79-358d-a7f8-f501ddd43576.roa (raw, json)
Hash identifier:          vHlifU3OZOXQY/m8Lj/oNqstwPRE0cNrRS/wbpONqYg=
Subject key identifier:   3C:F1:11:7A:BB:22:4D:AC:55:84:1A:D7:F4:B1:F5:EC:DC:85:68:0F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A94D0EC1580C22E4A322E90A0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d9738ce9-7d79-358d-a7f8-f501ddd43576.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     212238
IP address blocks:        45.38.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:ec:15:80:c2:2e:4a:32:2e:90:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=50222097-9ad2-47b0-9745-5f055081bf4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d7:66:1a:ca:7a:f5:9b:53:85:34:12:fa:a5:
                    97:bd:fd:75:a0:ad:67:0e:9e:28:9f:4e:0b:4a:5c:
                    9e:50:6c:5b:77:18:dd:f6:ed:2d:c1:db:f8:96:9c:
                    11:1f:f5:11:a2:62:cb:7c:0e:43:2e:f8:43:21:65:
                    0f:45:db:1d:b2:11:f5:94:db:42:98:fd:9b:cf:87:
                    83:e4:b5:2a:3f:0b:cb:5a:75:be:05:b3:17:3e:f8:
                    4a:50:2b:81:ce:41:16:f8:e9:81:3b:43:50:7c:2d:
                    5a:b3:b8:f3:d8:9b:9f:f0:c8:9a:4b:9e:a0:1f:89:
                    ca:1b:d0:a8:0e:bc:75:71:97:57:ea:6f:53:0b:a0:
                    7e:07:88:b9:13:20:bc:d4:68:e3:f6:40:a2:6b:03:
                    a6:3c:df:08:6d:31:f5:cf:0d:36:85:0c:65:ce:15:
                    10:90:ba:c2:c6:eb:18:24:09:96:fe:3d:9d:05:dc:
                    4b:1e:66:a1:7c:4c:d4:e7:31:f5:ac:9e:fc:75:f4:
                    0e:fd:00:13:94:08:fc:8b:38:de:e2:ac:1c:4b:80:
                    4f:13:a6:fe:c1:37:84:bc:cf:79:d9:84:21:eb:ae:
                    70:36:06:64:53:0a:81:61:b1:93:fe:b0:b9:5b:37:
                    84:a0:ac:c5:7f:44:9f:5b:14:94:76:ba:33:2e:03:
                    40:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F1:11:7A:BB:22:4D:AC:55:84:1A:D7:F4:B1:F5:EC:DC:85:68:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d9738ce9-7d79-358d-a7f8-f501ddd43576.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:ca:39:f8:96:0e:f2:98:3b:ef:22:8d:39:e3:a1:4d:73:66:
         02:30:b4:19:f6:92:96:5d:7b:d2:05:21:39:29:bc:6c:06:24:
         1a:ea:76:bf:45:ca:7f:aa:7d:04:d7:27:47:ea:66:c3:5f:30:
         30:99:3b:27:ee:a9:de:6f:c7:52:0b:a4:91:83:c2:d0:9f:3f:
         bc:b1:6f:ad:fb:02:58:cf:3b:a4:1e:e5:3d:33:e9:f3:53:76:
         39:3a:90:10:8b:75:7b:5c:71:46:8a:1d:a7:d0:80:30:6c:27:
         b2:af:ff:14:8f:3c:14:e3:dd:26:43:5d:bc:58:1c:0e:3f:e9:
         b2:1e:ed:0f:da:33:11:d1:32:8a:5a:d2:da:2b:d7:31:8f:79:
         dc:90:df:d6:51:d5:b1:e0:b7:26:66:42:a4:53:f5:dd:be:64:
         e5:27:15:e6:e2:73:e0:31:e5:5f:a1:0b:ab:3b:9a:5c:e8:d7:
         b3:17:1e:09:ef:f7:13:a9:bf:f4:80:ed:6b:c8:5e:da:82:10:
         94:a4:c9:22:4e:82:8c:2e:85:00:56:df:32:10:eb:d8:73:e0:
         93:ed:20:c3:de:13:5c:f8:65:61:1e:72:c1:30:47:49:cb:f0:
         b8:93:cf:45:a0:4a:82:5c:69:b9:e8:f6:c1:55:e8:ef:f4:cb:
         e0:2a:51:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:21:21 2025 by rpki-client