Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/3a17731c-16b5-3532-8d57-3e478805589f.roa
File:                     3a17731c-16b5-3532-8d57-3e478805589f.roa (raw, json)
Hash identifier:          W4FH2opK50BhBh19m6oIaZ0sNwLZi8FxQRLDniavV2E=
Subject key identifier:   C3:4A:C5:0D:63:4C:AE:95:62:98:BD:D8:31:41:A4:C8:65:25:D6:57
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584A78E5F3E00EE01CC8D43F6700
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/3a17731c-16b5-3532-8d57-3e478805589f.roa
Signing time:             Thu 10 Jul 2025 13:01:02 +0000
ROA not before:           Thu 10 Jul 2025 13:01:02 +0000
ROA not after:            Wed 08 Oct 2025 13:01:02 +0000
asID:                     63018
IP address blocks:        45.61.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:78:e5:f3:e0:0e:e0:1c:c8:d4:3f:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Jul 10 13:01:02 2025 GMT
            Not After : Oct  8 13:01:02 2025 GMT
        Subject: CN=0e41ea79-0055-4745-99d5-76debb5e2c08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:00:40:8d:83:70:5b:9b:8e:fc:4f:cc:79:2c:
                    78:12:14:bd:03:af:9e:d2:99:20:6b:cd:e3:67:26:
                    68:7f:3d:f2:31:65:93:b7:59:c8:09:7e:2a:1d:8a:
                    b4:4f:01:9a:22:31:cb:ba:55:d1:31:7c:01:b0:62:
                    96:3a:4c:04:62:5f:8e:bf:1a:cc:c6:ec:12:6f:e0:
                    2b:b3:b4:b4:fd:9a:08:b5:00:5f:61:46:61:f0:47:
                    d9:e5:cb:7a:b2:08:85:39:c9:7e:6e:d3:34:fb:71:
                    2b:77:58:01:ad:c8:69:94:8e:cf:60:f2:5e:9b:92:
                    3f:63:74:c1:f6:9d:23:e5:bb:ba:a4:a7:97:77:50:
                    0c:7e:42:ce:d8:f2:6b:ff:81:d1:b2:59:7a:d1:4e:
                    12:f4:4f:74:74:47:d2:98:25:b3:cd:8e:13:87:0f:
                    98:1c:15:2f:4a:f0:8c:ff:60:44:20:24:34:b0:ff:
                    27:3b:f1:90:28:bd:04:ac:dc:4c:cc:6a:bb:b5:31:
                    7a:2e:00:c5:07:d3:29:95:45:ec:c4:30:11:40:3a:
                    34:82:67:7d:b3:5a:a3:92:91:fe:4f:85:a1:45:2f:
                    87:87:b3:ca:c3:f6:e6:be:55:0d:52:b1:c3:db:c8:
                    64:30:d7:8e:33:86:7b:5c:9a:67:67:3c:cb:dd:fc:
                    cf:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:4A:C5:0D:63:4C:AE:95:62:98:BD:D8:31:41:A4:C8:65:25:D6:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/3a17731c-16b5-3532-8d57-3e478805589f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:ad:1c:6b:f3:03:b1:06:9c:1e:f3:19:a1:e6:4d:2f:0e:a4:
         06:03:e3:3c:ca:29:ea:ca:f3:40:29:11:53:bb:db:bb:f6:2a:
         a4:22:a6:70:13:cd:75:61:7c:f1:2c:34:ab:40:9e:d4:f0:61:
         21:77:b6:2f:c9:f1:82:a7:eb:77:b6:86:45:56:2a:df:70:fb:
         a4:f6:c4:73:ca:f7:ab:93:fe:ac:e3:d6:97:1a:05:90:df:a0:
         9c:17:44:62:ce:de:b5:bc:65:2c:21:6a:57:9a:3f:3c:fb:5e:
         60:72:ad:4e:bf:3b:fd:46:d7:02:b2:cb:17:9a:ae:8b:29:40:
         57:a3:58:ac:49:72:d8:6d:dd:35:e5:cc:fd:7a:32:4f:97:bd:
         2c:6a:86:8a:0d:b0:1a:b3:83:5c:cb:9e:6b:10:69:f1:46:2b:
         a8:2a:dc:47:40:b6:4a:24:92:3f:24:50:9f:c7:10:c5:92:42:
         0a:e2:e2:c3:ac:0d:3d:f9:08:90:2e:9b:c9:78:cd:ab:ad:39:
         fa:bc:ee:ee:a6:fe:68:93:16:07:c2:c8:f6:bb:5c:80:3b:ad:
         f0:5d:61:a0:34:11:40:a5:c2:8f:8b:f2:4a:e2:29:52:c1:17:
         92:00:4d:1e:eb:dc:2c:a0:ba:59:35:1e:25:53:b2:08:79:25:
         d9:23:7d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:26:34 2025 by rpki-client