Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/1a16519a-70f1-3b3a-80f6-9acc41d6a79c.roa
File:                     1a16519a-70f1-3b3a-80f6-9acc41d6a79c.roa (raw, json)
Hash identifier:          Vu1Iscc6tawBtjuM5Ss0zA+fIhujY5ipuIBVVjaSS98=
Subject key identifier:   E7:B9:E3:13:49:78:9F:7C:1C:6B:C0:AE:68:53:66:87:E5:33:4D:6E
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F43285848424ACF1375DF5F057328EAD0
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/1a16519a-70f1-3b3a-80f6-9acc41d6a79c.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     213122
IP address blocks:        45.61.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:cf:13:75:df:5f:05:73:28:ea:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=9bf24f8a-c81b-4cea-8c78-7f78a4823ab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5f:76:4d:78:49:ed:da:ad:46:49:d7:f6:fa:
                    80:7e:35:3a:a0:97:4e:15:85:de:4d:30:ea:89:6f:
                    7c:97:4c:2b:6b:7f:18:fa:86:75:ad:86:a1:cb:cb:
                    fd:23:94:52:f0:1c:3f:c6:08:36:d8:bd:4b:72:c5:
                    42:d5:b2:4e:ed:46:a8:19:60:23:d6:1e:4d:13:b5:
                    5f:8d:06:fc:ce:80:39:eb:b4:90:4f:5b:22:6a:51:
                    32:2b:a3:00:dc:a5:df:d8:24:09:1f:cd:21:15:c5:
                    f6:31:0c:78:d9:eb:f4:7a:0a:c3:32:c5:51:6a:07:
                    8d:a0:2a:79:9e:e8:96:a4:03:e2:b3:3e:5e:8d:f7:
                    9a:8d:1c:a6:a3:44:dc:c1:39:f8:4a:45:a2:93:9c:
                    27:a1:98:24:be:dd:e9:40:f9:06:ab:95:ed:a1:a4:
                    26:b4:03:6b:48:27:d0:3c:65:4d:1a:14:a5:18:b0:
                    7d:f4:5b:cb:d2:c7:bd:f9:8d:9a:df:44:f3:5f:3a:
                    ce:aa:c4:53:46:be:6b:01:c0:6f:9a:29:34:f6:b2:
                    70:a4:cc:80:29:9f:5f:5d:8f:14:7e:f1:fb:d1:c5:
                    d5:9b:98:d6:c8:c6:72:0e:20:1b:90:92:52:71:d5:
                    40:62:b3:d3:16:06:30:90:6d:72:97:f1:d7:d1:73:
                    2b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B9:E3:13:49:78:9F:7C:1C:6B:C0:AE:68:53:66:87:E5:33:4D:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/1a16519a-70f1-3b3a-80f6-9acc41d6a79c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:9f:0b:40:fb:47:18:8d:9b:5f:cc:b5:2a:40:30:e1:44:18:
         5c:0c:04:1a:02:0d:f6:bd:2a:a0:dc:9e:54:58:36:13:bf:3b:
         23:ef:8c:6c:ef:92:ab:7a:35:5f:80:0f:ca:40:44:93:e6:34:
         29:60:bf:78:e4:37:25:35:b9:1c:0c:3d:c0:a3:47:7a:26:74:
         70:5d:bf:2c:27:48:e6:d5:f7:1f:ed:8a:63:ec:8e:dd:72:ff:
         bd:90:d8:90:2a:c8:65:b2:09:86:7f:52:46:63:e0:d0:73:3c:
         14:c9:cd:d0:c8:42:05:e2:69:e2:bc:25:f3:0d:54:df:98:7a:
         90:0b:35:84:73:bb:a8:3f:fa:d1:46:3a:e2:ea:c3:8b:f6:6f:
         df:49:b1:fb:41:ad:22:e1:3c:42:ef:5a:8b:87:d1:e2:a7:43:
         3f:a5:e8:a6:bc:00:d9:19:b7:03:03:d8:89:0d:8a:47:e6:40:
         1a:cd:77:5a:bc:ac:8c:10:19:8c:da:3e:c7:e3:d5:83:43:cb:
         74:57:9b:89:64:e1:af:a2:fc:20:36:a0:87:dd:ef:7f:c3:7f:
         d5:94:2f:52:79:ae:73:e3:ae:44:cb:38:da:90:8b:f2:24:a7:
         5a:66:b0:cf:ec:bf:17:fc:24:fc:31:7f:8a:77:2e:3f:94:7c:
         96:44:7c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:52 2025 by rpki-client