Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/da994d0d-fa5f-3937-9ad9-8c850e708d2a.roa
File:                     da994d0d-fa5f-3937-9ad9-8c850e708d2a.roa (raw, json)
Hash identifier:          JAn9zmN6ONRAjwwo3x4o3EVyOcYTu1vYwboKwboQUe8=
Subject key identifier:   8C:52:35:81:9D:DB:D3:54:43:FA:86:85:F4:BF:A1:55:04:FE:A7:4A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A84123F3488492BB5D8592F00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/da994d0d-fa5f-3937-9ad9-8c850e708d2a.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     10557
IP address blocks:        45.38.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:3f:34:88:49:2b:b5:d8:59:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=61f55d54-d329-4b7d-9fac-87b20f85e5bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a3:c8:83:36:61:c6:4c:76:a7:9d:06:d8:41:
                    f6:f0:13:da:fc:ff:c6:75:d8:20:38:33:e4:2b:54:
                    00:9c:53:5a:e7:ce:26:96:7c:c8:06:4f:f6:aa:8a:
                    80:b7:6d:43:bf:34:db:64:00:0f:61:fd:6f:78:82:
                    8c:61:ac:09:08:9a:b2:28:a9:b9:0d:71:96:8a:ed:
                    25:d3:76:4c:2c:7e:d8:66:0a:a1:d7:60:b2:4e:7c:
                    f5:58:38:ea:ea:8d:bb:d9:c8:0a:82:11:0a:30:b7:
                    0d:b1:b1:b6:d6:14:e1:f0:c9:7b:78:99:dc:4e:f3:
                    56:e7:52:1d:92:9d:34:18:9a:a1:c8:a2:2c:6e:9b:
                    9f:be:7f:01:cd:d7:e6:a6:c8:76:df:77:37:41:4f:
                    c8:f3:9a:fa:7a:97:c1:31:54:03:56:3b:0f:e4:c4:
                    40:b1:d5:e6:f0:2e:6a:0b:ac:0f:0f:fd:26:27:3a:
                    c4:2b:d4:fb:8c:f2:88:d0:8a:a6:02:ee:95:92:b2:
                    a9:1b:da:d6:65:02:1b:41:da:13:f1:e1:db:26:e7:
                    2d:93:c5:77:e5:54:9e:91:e6:e6:fc:90:41:6d:df:
                    de:ab:d2:f4:db:90:87:9c:61:33:50:89:70:e9:ca:
                    31:c5:17:6b:47:57:36:83:64:5f:2d:a0:61:26:1c:
                    25:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:52:35:81:9D:DB:D3:54:43:FA:86:85:F4:BF:A1:55:04:FE:A7:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/da994d0d-fa5f-3937-9ad9-8c850e708d2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:0e:34:69:89:a4:f9:61:e9:9e:e5:69:78:72:b5:7e:8b:f0:
         6f:54:e5:b3:82:bd:3f:99:32:44:bf:d3:ca:35:7e:44:c4:35:
         96:2a:c0:59:0b:59:62:f5:56:d5:4f:fd:90:3f:4d:dc:38:9f:
         6e:2a:08:01:70:b8:f2:10:03:4b:29:c8:14:93:fe:c5:9e:f3:
         40:fd:bc:21:aa:45:87:02:cf:7d:89:55:6e:82:52:bc:70:f0:
         52:04:39:8d:45:4d:51:43:8d:3c:29:d3:be:4b:46:ff:19:79:
         af:64:19:42:90:48:fe:2a:5e:14:c3:b0:e2:86:af:f1:6c:d5:
         58:5f:5b:28:ce:4e:49:98:be:67:cb:2a:6e:78:3c:ce:70:95:
         2c:f3:52:07:60:65:ba:cb:e4:a4:83:ef:09:1a:a8:8a:e6:38:
         12:28:e3:71:8a:af:e8:51:fc:d9:e2:da:3b:59:39:51:2a:a9:
         80:18:85:1d:b0:26:c8:a5:b3:f2:4b:96:22:9c:33:db:87:9a:
         38:35:9c:5a:df:f6:2b:bb:a8:83:5e:83:d0:30:d9:80:46:74:
         72:5a:8c:d4:52:4f:ec:28:1a:9b:84:fc:b9:2e:dc:bc:08:60:
         86:29:24:a9:1f:c4:90:73:8a:b6:90:49:f4:ec:45:5b:77:4c:
         0f:c3:8e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:23:20 2025 by rpki-client