Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/df798109-dd7f-3686-abe9-d6aa5238bc67.roa
File:                     df798109-dd7f-3686-abe9-d6aa5238bc67.roa (raw, json)
Hash identifier:          ljzvAXG7btKPE6fVA7hExjX0klglp6IMPX7vsFCY45g=
Subject key identifier:   70:37:BB:A9:25:63:08:23:BB:4E:E5:77:07:5B:CD:F9:0A:5E:A5:CB
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A0D6A934B2B86015E35A5CECC
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/df798109-dd7f-3686-abe9-d6aa5238bc67.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     212238
IP address blocks:        45.39.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:93:4b:2b:86:01:5e:35:a5:ce:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=589449fb-1dca-46c9-a156-6c0ea811a5ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:55:a8:8b:e8:0e:76:bc:2f:7e:8e:b1:2c:53:
                    8a:d3:41:a0:4f:f9:87:47:0c:24:84:ae:ae:3f:73:
                    f8:43:38:d8:7a:68:f8:f7:f3:db:a1:25:07:b7:92:
                    34:f3:c7:c5:82:8c:94:82:02:75:61:3f:79:6e:94:
                    7a:df:1a:c7:99:00:b3:d3:ca:48:96:c6:62:a1:32:
                    f2:b5:22:18:b0:0c:9f:3e:73:6a:44:4e:c0:54:96:
                    13:88:fd:aa:d2:5b:45:c7:32:5c:35:b1:da:95:00:
                    32:1d:ef:fd:4b:00:f9:12:15:cb:ad:c6:c8:61:e0:
                    09:68:8b:13:ae:e5:40:e3:ef:71:58:92:72:5a:a7:
                    3d:a6:18:3b:4a:4e:6d:0d:b9:2e:b0:6f:d3:33:96:
                    e0:c2:98:4f:b3:ad:bf:c5:fd:f3:51:75:5f:95:b8:
                    6b:37:c7:f2:26:5d:53:b4:21:60:b9:35:10:5c:df:
                    fa:2a:15:07:b1:e0:32:1f:ee:7a:a9:92:ca:b2:6b:
                    79:84:a1:27:55:bb:f3:80:61:51:b8:39:91:54:57:
                    94:99:ab:f9:2d:a8:36:74:ef:85:d7:1e:a5:57:ff:
                    30:d2:01:3b:dd:6b:35:1c:16:02:11:c1:e3:5a:00:
                    3e:93:49:23:29:e5:47:75:a7:a2:b6:4e:25:61:d0:
                    89:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:37:BB:A9:25:63:08:23:BB:4E:E5:77:07:5B:CD:F9:0A:5E:A5:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/df798109-dd7f-3686-abe9-d6aa5238bc67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:30:b9:46:21:63:26:07:9a:9c:b2:78:50:dc:6a:9c:b2:b2:
         38:6b:c8:67:e0:9d:b1:1b:51:11:a9:a6:59:87:29:b0:7b:f9:
         c2:ce:fe:ba:66:c1:32:13:cb:23:8e:be:dc:12:5b:4c:c4:12:
         8b:be:e0:b7:6a:5a:c4:c7:e0:13:9c:83:36:ee:47:b3:27:05:
         03:54:de:00:15:3b:e0:e2:a1:8a:41:ef:05:69:cf:bd:30:2f:
         73:3c:e3:74:9e:31:da:15:20:fc:8b:c5:69:53:72:6b:83:53:
         12:cd:0a:8a:8a:f4:20:c0:41:50:44:0d:72:43:f7:5d:48:34:
         2a:fa:6f:d5:e1:da:ea:c6:77:3e:75:c0:e5:93:6c:71:c3:07:
         b4:98:0e:01:10:6b:e9:0b:57:85:e3:94:db:e8:15:18:00:9b:
         1a:1b:fe:71:67:e1:f2:4b:b6:30:77:e0:cc:7a:dd:d9:49:4a:
         f2:af:6e:ff:96:48:81:74:76:5a:9e:4b:94:2b:f1:f5:68:ee:
         7c:ea:7a:14:84:4b:44:26:0e:07:0d:6d:71:83:33:67:75:e5:
         f5:84:2a:70:1b:ed:a3:2a:91:b6:55:e7:fb:8c:19:71:fe:93:
         d4:f1:cf:3b:08:f4:56:25:a9:d9:c2:bf:39:95:44:f0:f7:0a:
         03:0e:07:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:59:11 2025 by rpki-client