Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f7d4d6cb-7176-3bcb-b47a-bbb615ab1d46.roa
File:                     f7d4d6cb-7176-3bcb-b47a-bbb615ab1d46.roa (raw, json)
Hash identifier:          JyhfugzDzZ0rbCbmdm5jQNHHUizAwZzA6tYHRXUxhxk=
Subject key identifier:   8E:33:C3:2B:AB:C7:66:F3:47:F5:9E:03:BC:C9:DC:5F:C7:E2:46:87
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A94D0EBAD71E78D963217B680
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f7d4d6cb-7176-3bcb-b47a-bbb615ab1d46.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     212238
IP address blocks:        45.38.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:eb:ad:71:e7:8d:96:32:17:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=cf40ac9e-d603-408e-92ac-4f094ddbeefb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d6:7e:41:6e:3e:1c:92:a5:93:1b:95:f7:57:
                    85:ff:d2:e9:cb:f8:c8:a8:7a:aa:98:6a:0a:91:b1:
                    ad:4c:15:7a:e2:78:dc:05:7f:10:2a:56:20:bc:56:
                    f4:46:90:10:eb:7b:6e:b4:02:76:14:cf:58:ac:c7:
                    d5:e3:f7:f0:0d:b1:5f:e7:a0:01:50:d1:36:92:25:
                    fb:db:7d:a8:62:48:29:b9:c2:a5:5b:08:ba:52:99:
                    85:2c:37:3e:8d:cf:99:34:5b:4f:3b:62:de:73:85:
                    d2:d0:ee:39:e7:0a:1c:ac:9c:d9:00:43:1f:a9:f5:
                    04:65:bb:09:eb:1d:ce:c5:f9:5c:e1:8b:3d:d7:7a:
                    58:ec:e0:90:27:c0:64:73:7b:fb:e1:87:45:ca:bf:
                    f8:4b:99:f4:f3:20:52:51:4c:68:fe:41:88:db:8e:
                    e9:b8:ae:d4:10:a3:2f:f4:6e:2b:ba:b3:fc:b8:e6:
                    55:7e:31:34:ee:bd:78:7c:34:da:99:fe:c2:23:df:
                    bd:0f:eb:98:3f:f4:de:1c:60:47:76:69:0d:1e:bb:
                    94:17:84:97:1b:e0:bc:ea:b4:1d:ba:f2:9e:5c:20:
                    06:0a:06:52:ca:48:d8:29:8d:d0:27:c3:41:41:91:
                    0a:90:f1:d5:0b:35:ed:97:b1:66:41:4a:e4:4c:20:
                    08:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:33:C3:2B:AB:C7:66:F3:47:F5:9E:03:BC:C9:DC:5F:C7:E2:46:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f7d4d6cb-7176-3bcb-b47a-bbb615ab1d46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:7d:6f:0f:85:78:6e:1a:2f:fc:3b:cc:7e:13:41:85:a5:53:
         b3:a9:26:76:73:ca:93:0c:db:47:71:7f:0b:90:7a:17:73:26:
         b5:8f:6c:e5:da:ef:2b:96:cc:70:b1:bb:14:d7:02:7b:bf:59:
         af:54:a6:04:88:ad:37:ba:03:e0:dd:dc:27:05:8f:10:49:62:
         77:53:b9:31:2e:02:86:52:17:d9:c1:17:08:a7:81:7a:50:f0:
         08:cf:ac:61:46:c2:36:cd:87:4f:e3:58:f6:ec:0a:08:14:9f:
         d9:e8:fb:64:63:03:a1:e8:b1:91:29:15:2e:8c:04:14:c2:45:
         5b:22:18:99:01:10:a3:1d:c2:8d:f5:df:a6:73:a0:32:89:0f:
         3d:9d:d6:9e:b7:82:41:85:b8:8a:d6:21:cc:f5:63:fe:c2:0f:
         3f:f8:1c:f6:91:b6:73:39:62:53:66:39:0c:d7:8d:96:46:62:
         b2:44:7f:13:cd:63:40:e9:21:fe:f3:fa:15:bb:60:d9:a5:01:
         a3:06:4f:cf:0f:20:27:6c:17:7c:85:8e:57:29:53:58:0b:13:
         94:f4:f3:47:3f:e0:21:18:62:c2:ae:54:a7:b4:25:73:8a:ee:
         19:c4:48:bb:6d:a6:aa:26:35:38:57:d6:1e:e8:17:d9:30:b7:
         6c:5c:96:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:20:55 2025 by rpki-client