Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/2d087ac6-f21e-3fca-93af-ab70d424593a.roa
File:                     2d087ac6-f21e-3fca-93af-ab70d424593a.roa (raw, json)
Hash identifier:          zsuxeA0O48L5HMdoQ/SuZ1F0VTSUMGo3rHZWMO0hVcY=
Subject key identifier:   BB:54:9E:22:88:30:BD:8E:E8:75:F7:F2:6B:F4:E8:1C:2A:00:BB:B6
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F43285844E93A99C4A3D5B8C4A00AA300
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/2d087ac6-f21e-3fca-93af-ab70d424593a.roa
Signing time:             Fri 16 Feb 2024 14:00:29 +0000
ROA not before:           Fri 16 Feb 2024 14:00:29 +0000
ROA not after:            Thu 16 May 2024 13:00:29 +0000
asID:                     206444
IP address blocks:        45.61.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e9:3a:99:c4:a3:d5:b8:c4:a0:0a:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Feb 16 14:00:29 2024 GMT
            Not After : May 16 13:00:29 2024 GMT
        Subject: CN=cf1c7fda-a0b5-426a-8639-610b9cb28393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0f:8f:18:e9:c6:d8:ca:5d:19:ee:14:a3:8a:
                    36:24:39:87:f7:2e:4b:de:c5:9c:e2:de:59:57:d4:
                    77:b1:d4:38:25:02:9e:70:a3:98:ea:3d:6f:a9:4c:
                    3f:6e:e3:41:9e:1f:34:12:ec:88:fc:e5:54:99:72:
                    e8:b2:5a:a6:ba:1f:22:3e:25:3f:77:c2:6e:bb:4e:
                    05:2c:c7:11:5c:75:01:8d:4f:e5:a9:21:fb:b5:45:
                    de:3f:f0:02:db:57:5c:39:d2:33:7b:5c:10:d0:82:
                    a0:d0:6f:00:91:c2:1b:31:de:64:20:0c:d5:28:c8:
                    c2:1a:ef:b7:a9:d5:47:e8:99:6d:ae:e3:04:0e:f4:
                    55:f6:93:21:49:73:3d:3a:fe:0a:de:de:e3:36:ac:
                    f2:d6:c2:b4:de:e8:75:77:fa:98:79:21:7e:de:72:
                    13:57:bd:4d:9a:15:4b:ce:89:a0:ec:4d:df:19:8f:
                    e4:1d:0a:1b:17:41:37:72:9d:b6:e9:11:d0:b3:8f:
                    fb:07:96:1a:c7:73:f5:8f:09:ec:ab:68:15:37:1b:
                    e9:c4:f6:5e:ac:6e:c2:95:f4:9d:ac:74:e5:f4:7a:
                    ae:47:4f:ae:b4:28:a7:9a:62:b1:14:5c:1d:3b:4d:
                    d2:c7:b7:d7:5d:5c:35:89:ff:c2:ce:96:f0:d4:71:
                    55:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:54:9E:22:88:30:BD:8E:E8:75:F7:F2:6B:F4:E8:1C:2A:00:BB:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/2d087ac6-f21e-3fca-93af-ab70d424593a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:4a:a1:df:3b:ff:6b:29:07:84:b0:27:67:bb:4e:36:f7:e9:
         3a:92:60:6a:f2:fc:c4:80:59:5f:16:b5:09:82:01:d9:be:6d:
         09:82:28:70:01:95:0c:d7:ca:87:e7:01:07:34:85:cf:8f:35:
         f3:f2:50:a2:0b:a7:69:46:a0:ee:fa:a7:5f:57:03:47:6f:50:
         4f:d7:15:1b:91:0a:98:c9:18:fe:c2:d7:7b:ce:38:78:ff:57:
         bd:9b:d0:01:99:3c:e9:ec:16:2c:b0:8b:1f:fb:c3:dd:da:1a:
         a6:19:69:0e:82:29:fb:5f:70:09:56:5a:f7:b8:f8:a8:1e:d9:
         dc:81:f1:c7:43:af:25:73:e5:a2:4a:a9:be:83:a3:fd:b7:99:
         94:f6:87:de:87:fa:c4:5a:a5:21:43:66:24:f9:d0:fb:c9:8b:
         4d:ab:65:d0:0f:40:e0:56:73:5d:81:c3:5e:7a:d7:85:ca:ad:
         4b:84:1b:69:53:10:fb:cf:44:51:bd:eb:e6:79:b7:ab:b8:91:
         75:74:34:e2:a4:b0:7a:f0:17:96:0c:6e:a1:0d:c7:49:c7:f9:
         66:8f:76:63:94:8f:04:ea:46:4a:14:4d:19:27:a7:6a:98:74:
         be:0a:93:9b:0b:33:81:e5:08:ac:5e:7d:00:10:fc:9c:60:72:
         23:95:f3:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETpOpnEo9W4xKAKowAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOThjYjUwNTgtMDFhZC00NWJmLTljMTUtNDUzZjQxMGJi
OWQ3MB4XDTI0MDIxNjE0MDAyOVoXDTI0MDUxNjEzMDAyOVowLzEtMCsGA1UEAxMk
Y2YxYzdmZGEtYTBiNS00MjZhLTg2MzktNjEwYjljYjI4MzkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlg+PGOnG2MpdGe4Uo4o2JDmH9y5L3sWc4t5Z
V9R3sdQ4JQKecKOY6j1vqUw/buNBnh80EuyI/OVUmXLoslqmuh8iPiU/d8Juu04F
LMcRXHUBjU/lqSH7tUXeP/AC21dcOdIze1wQ0IKg0G8AkcIbMd5kIAzVKMjCGu+3
qdVH6JltruMEDvRV9pMhSXM9Ov4K3t7jNqzy1sK03uh1d/qYeSF+3nITV71NmhVL
zomg7E3fGY/kHQobF0E3cp226RHQs4/7B5Yax3P1jwnsq2gVNxvpxPZerG7ClfSd
rHTl9HquR0+utCinmmKxFFwdO03Sx7fXXVw1if/Czpbw1HFVewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLtUniKIML2O6HX38mv06BwqALu2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OGNi
NTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNmNDEwYmI5ZDcvMmQwODdhYzYtZjIxZS0z
ZmNhLTkzYWYtYWI3MGQ0MjQ1OTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOThjYjUwNTgtMDFhZC00NWJmLTlj
MTUtNDUzZjQxMGJiOWQ3Lzk4Y2I1MDU4LTAxYWQtNDViZi05YzE1LTQ1M2Y0MTBi
YjlkNy5jcmwwHwYDVR0jBBgwFoAUgs6ENpgBbErCBlI/wMU9V+EIADkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85OGNiNTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNm
NDEwYmI5ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALT2tMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABlKod87/2spB4SwJ2e7Tjb36TqSYGry/MSAWV8WtQmCAdm+bQmCKHAB
lQzXyofnAQc0hc+PNfPyUKILp2lGoO76p19XA0dvUE/XFRuRCpjJGP7C13vOOHj/
V72b0AGZPOnsFiywix/7w93aGqYZaQ6CKftfcAlWWve4+Kge2dyB8cdDryVz5aJK
qb6Do/23mZT2h96H+sRapSFDZiT50PvJi02rZdAPQOBWc12Bw15614XKrUuEG2lT
EPvPRFG96+Z5t6u4kXV0NOKksHrwF5YMbqENx0nH+WaPdmOUjwTqRkoUTRknp2qY
dL4Kk5sLM4HlCKxefQAQ/JxgciOV840=
-----END CERTIFICATE-----
Generated at Fri May 3 05:09:25 2024 by rpki-client on console-fra.rpki-client.org