Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f650a332-db74-3ec5-83b0-eda73420064e.roa
File:                     f650a332-db74-3ec5-83b0-eda73420064e.roa (raw, json)
Hash identifier:          rDQ1B5f/veEA1pAcfyadyIaND70tIXdRBxmFp45vkJI=
Subject key identifier:   4E:74:1E:E1:A4:B3:E3:58:66:C4:09:AC:79:46:C7:86:28:5E:D5:86
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AB0BB74195BDDB4150B310480
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f650a332-db74-3ec5-83b0-eda73420064e.roa
Signing time:             Wed 30 Jul 2025 13:00:40 +0000
ROA not before:           Wed 30 Jul 2025 13:00:40 +0000
ROA not after:            Tue 28 Oct 2025 13:00:40 +0000
asID:                     18779
IP address blocks:        45.38.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b0:bb:74:19:5b:dd:b4:15:0b:31:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 30 13:00:40 2025 GMT
            Not After : Oct 28 13:00:40 2025 GMT
        Subject: CN=63966d29-15d9-4c97-a882-c3ba4d0a35ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a2:af:53:21:ff:00:59:e3:e6:dd:e6:f9:e5:
                    12:3a:89:cd:b6:4a:d4:f0:28:69:c8:a7:c4:c0:50:
                    bf:54:8c:1c:8b:34:52:ac:77:0c:64:3c:e0:8f:65:
                    92:74:86:d4:35:cf:1a:55:d1:79:39:b3:ec:60:f4:
                    ba:58:77:e6:5d:39:d4:8d:32:12:84:52:89:60:e9:
                    34:24:f9:f1:f1:10:64:90:94:25:14:86:4d:9a:38:
                    ad:a8:27:fb:2f:6a:18:4f:04:a1:fc:0f:a9:e5:8f:
                    86:85:73:74:00:48:24:80:1d:aa:8b:a0:4e:3f:de:
                    8e:3c:f5:84:7f:57:7d:1a:c5:f0:e3:e6:6b:d0:17:
                    8a:8b:d6:e8:aa:74:53:71:1e:25:83:70:1d:42:0d:
                    6c:96:1f:ca:f6:11:92:80:79:12:b9:d1:ec:f4:d3:
                    f7:e3:05:19:62:86:d8:71:7c:04:10:0f:8b:c1:d3:
                    02:91:54:29:02:77:39:1c:51:3e:7a:a4:35:fb:79:
                    6d:5e:a4:3d:68:ac:20:29:86:95:e3:c2:64:19:e0:
                    1e:f8:3e:63:e6:03:40:dc:14:a6:39:50:67:4a:2e:
                    b7:d6:8c:08:35:fb:bb:48:d8:52:e0:14:38:84:97:
                    e7:f1:77:ad:10:58:dd:a3:4d:d0:06:3d:1f:4a:d2:
                    f2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:74:1E:E1:A4:B3:E3:58:66:C4:09:AC:79:46:C7:86:28:5E:D5:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f650a332-db74-3ec5-83b0-eda73420064e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:15:0f:a2:86:d9:ea:7d:18:56:c2:d2:53:d7:ec:42:eb:dc:
         22:58:8b:9e:b2:ab:20:b4:72:32:29:09:be:3c:7f:a5:73:09:
         28:4d:06:eb:b1:11:57:ed:8c:aa:d1:76:ae:69:33:2d:17:79:
         d6:ca:f1:ce:8f:5f:77:f1:59:e5:5b:c0:d5:11:e3:a4:aa:e5:
         56:19:29:34:0a:21:1c:1e:64:32:23:92:37:ab:6f:1e:dc:7d:
         63:b6:0c:3e:36:60:e1:30:6b:60:10:cf:d5:d6:0a:00:30:a6:
         11:1b:f0:65:52:01:7c:d5:95:41:be:88:93:fd:a4:04:21:43:
         81:24:d8:f9:fb:f5:53:aa:2d:d1:f3:51:35:93:74:c7:0b:8a:
         a4:63:6c:7e:b2:fe:63:94:0d:35:a2:fb:5a:36:b9:4c:ca:54:
         67:c9:48:24:1a:05:49:17:07:6a:fe:95:6e:e6:b8:b2:f2:dc:
         ff:d8:6f:e5:71:9a:6a:2e:45:bc:99:dd:e7:10:05:bf:f0:50:
         93:b3:eb:73:04:58:62:58:28:0c:45:9c:bd:2e:d5:e7:7d:db:
         d6:b0:71:5e:af:f4:0f:e8:03:28:71:18:23:aa:bc:37:14:74:
         83:0d:cd:40:9b:27:1d:a3:11:17:57:08:2e:e4:5e:ee:56:48:
         a4:d7:56:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:54:59 2025 by rpki-client