Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/3611f798-9a1f-36bf-90a3-e2b14476974e.roa
File:                     3611f798-9a1f-36bf-90a3-e2b14476974e.roa (raw, json)
Hash identifier:          NAOIFyQlGaG+kJVBSR26HZMabvXHYlPpzXiMSLH2l5g=
Subject key identifier:   52:D7:4C:58:91:F4:62:99:DC:8F:5D:BA:B2:B2:2E:62:22:90:FD:71
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F43285849ED4FC2090C99B54F0E185850
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/3611f798-9a1f-36bf-90a3-e2b14476974e.roa
Signing time:             Wed 21 May 2025 13:01:04 +0000
ROA not before:           Wed 21 May 2025 13:01:04 +0000
ROA not after:            Tue 19 Aug 2025 13:01:04 +0000
asID:                     399820
IP address blocks:        45.61.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:4f:c2:09:0c:99:b5:4f:0e:18:58:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: May 21 13:01:04 2025 GMT
            Not After : Aug 19 13:01:04 2025 GMT
        Subject: CN=ce032868-12ce-4cd4-9974-d15887e5f859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0f:2a:6c:64:05:da:39:5b:f7:f5:8b:3b:ba:
                    d7:c9:00:e8:52:a8:91:7c:9f:31:8f:0b:c6:97:41:
                    59:46:49:e8:45:77:9b:de:21:29:47:ab:84:c2:3b:
                    6c:aa:34:55:47:47:aa:be:da:65:e6:3c:cb:a9:6d:
                    ee:43:fd:b4:02:f1:3a:02:ab:a9:d2:8f:83:9b:22:
                    df:26:ae:f7:f6:bb:6f:c6:49:b0:2f:ff:7c:45:ad:
                    55:b0:16:a9:dd:f4:ad:40:52:3c:b1:20:72:2c:94:
                    e0:99:91:db:e8:49:21:93:27:ff:da:0d:9f:9c:35:
                    73:fe:43:6c:a3:e3:55:30:68:93:2c:78:e3:fc:84:
                    1c:ee:4a:bd:11:07:ef:1c:bd:ce:aa:2c:7b:a2:d6:
                    ec:74:ee:0e:3a:eb:59:ee:88:2a:4d:87:3d:89:3a:
                    52:c4:8f:c9:12:40:6a:b8:5b:c0:17:67:6c:79:9b:
                    e9:8a:f1:e3:18:32:b2:05:90:29:fe:bc:bb:e7:70:
                    ca:a1:01:96:aa:f1:bc:08:fa:4b:54:27:d3:cc:e9:
                    bf:4d:be:94:8a:e5:f6:a5:19:c8:5c:da:b0:3b:91:
                    dc:51:2c:54:59:42:d0:63:66:5b:d8:3b:c3:b0:3e:
                    de:e3:3c:39:83:63:d8:b8:8d:1b:5f:9c:c9:b3:eb:
                    49:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D7:4C:58:91:F4:62:99:DC:8F:5D:BA:B2:B2:2E:62:22:90:FD:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/3611f798-9a1f-36bf-90a3-e2b14476974e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:3d:19:72:c6:ed:18:8e:fd:c6:82:4b:bb:08:57:bc:17:5f:
         49:bd:b1:72:b6:41:99:a1:94:e7:ba:94:3c:ed:15:45:37:10:
         49:7f:e9:b2:af:a8:46:c9:dd:07:c2:3c:e9:ff:b3:0d:24:06:
         84:18:4d:59:54:b3:62:0b:d9:94:f9:f1:08:fb:20:92:0e:66:
         42:64:3a:e7:a5:36:15:03:59:31:29:e2:30:37:a2:1f:0c:bd:
         c1:90:2f:10:34:86:f2:70:f7:cd:2a:f6:a4:a9:af:a2:34:58:
         5c:9e:61:b6:0c:93:e7:a1:31:28:bd:42:75:26:ea:5a:f8:ad:
         12:02:9e:38:09:7b:76:19:03:7b:11:8f:4a:74:cc:2e:bc:80:
         e0:fc:5c:fd:59:8b:d4:44:55:cf:9b:39:fb:db:f0:f6:f6:ea:
         80:32:69:57:31:3a:94:34:4f:c4:af:42:32:41:f4:66:da:ed:
         a9:f7:a6:bf:a8:a3:8b:3f:6e:96:cd:d0:4f:db:a4:9e:f6:1a:
         a9:89:ed:4c:fb:04:ba:88:37:66:6c:be:cf:0b:8d:d4:74:39:
         af:e7:72:d4:82:8c:49:3b:21:83:25:4c:2d:8a:bb:c9:b9:62:
         95:aa:00:89:90:6d:d0:56:6c:6e:3f:1b:f0:1f:9b:b7:19:3c:
         2f:ad:60:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 00:41:26 2025 by rpki-client