Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/3a17731c-16b5-3532-8d57-3e478805589f.roa
File:                     3a17731c-16b5-3532-8d57-3e478805589f.roa (raw, json)
Hash identifier:          UT57jHW8qb3rPK9ZFf51+5t5guqMuK/JJJqhQobrzlg=
Subject key identifier:   D9:2A:EF:CF:80:F8:5C:AC:64:D8:D0:4C:E1:60:61:52:01:63:9B:AA
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F43285846FA25751E54FEAB485D4D1B80
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/3a17731c-16b5-3532-8d57-3e478805589f.roa
Signing time:             Sat 24 Aug 2024 01:00:31 +0000
ROA not before:           Sat 24 Aug 2024 01:00:31 +0000
ROA not after:            Fri 22 Nov 2024 02:00:31 +0000
asID:                     63018
IP address blocks:        45.61.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Sep 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:fa:25:75:1e:54:fe:ab:48:5d:4d:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Aug 24 01:00:31 2024 GMT
            Not After : Nov 22 02:00:31 2024 GMT
        Subject: CN=aa3d33ad-0a3a-422b-99c6-a0241d9f43e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d8:a6:df:cb:65:c8:4b:30:6e:30:fb:3b:1c:
                    24:98:1d:b3:9a:78:df:78:2d:ad:d5:55:4a:15:09:
                    b8:6a:07:57:d8:8e:f3:b8:b7:b0:c0:37:a4:5c:11:
                    83:73:27:49:23:07:d7:a8:e0:76:94:99:5c:9f:11:
                    17:29:f6:94:e5:11:e8:df:2e:29:9b:00:7e:b5:ef:
                    cf:20:08:00:e9:66:9a:49:df:37:19:d0:e4:a8:09:
                    a1:a8:d5:74:e8:f4:67:ca:ba:03:ab:e8:fb:fe:b2:
                    b9:d5:e6:72:73:74:e9:7f:ef:9a:a8:73:9f:d8:a5:
                    5c:14:e9:8c:74:9f:bf:dd:a4:2c:e5:ca:60:23:78:
                    59:eb:a3:5c:46:72:9a:a2:5f:2e:6f:b9:01:c6:4a:
                    e8:57:54:67:31:69:1b:fe:02:4a:13:ca:a9:22:a3:
                    a0:e2:45:c9:56:4b:ad:7c:42:7b:9d:39:f9:77:83:
                    f7:35:66:26:84:c9:fa:5e:10:bb:2b:69:d2:e0:63:
                    84:7d:fc:eb:47:b4:55:bf:8e:52:66:90:ea:ab:52:
                    28:9a:a7:1b:73:b7:77:66:85:31:9b:d8:17:f8:24:
                    b6:84:d3:30:fb:e8:a8:3a:38:15:b6:b1:99:c6:e8:
                    1c:2a:31:92:43:b2:d3:19:07:8f:a8:54:35:64:eb:
                    2f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:2A:EF:CF:80:F8:5C:AC:64:D8:D0:4C:E1:60:61:52:01:63:9B:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/3a17731c-16b5-3532-8d57-3e478805589f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:b1:d8:ba:e6:07:96:05:7e:75:4a:63:5c:92:9b:09:51:85:
         c2:1d:f5:62:b2:3b:77:4c:70:e7:b1:e6:12:25:68:7b:5d:e7:
         92:ba:64:d0:d1:a3:ec:e9:07:08:ef:72:01:45:2c:69:c8:73:
         33:b0:f8:25:c3:53:37:0c:2b:7d:92:ce:ce:65:73:00:8d:e0:
         02:e8:4a:7b:64:90:72:77:52:2b:e3:31:ab:8f:c6:fa:22:34:
         fd:82:ac:d0:70:25:1b:56:bf:62:0d:f5:4a:6d:ee:24:9b:b3:
         54:dd:85:e4:00:85:a1:90:42:b9:a6:d5:25:05:18:01:4e:00:
         c9:2c:70:d5:13:2f:a2:ad:98:b5:29:46:db:64:05:7a:3f:84:
         35:0f:a4:cd:e4:6f:60:f4:d7:f5:54:2b:e5:9b:d4:3c:68:52:
         84:f9:ca:4b:3e:77:cb:80:0c:7d:e0:d5:7f:5f:db:fa:0f:60:
         33:46:9a:f6:be:2f:98:fb:0a:9a:61:de:95:29:00:39:c4:ef:
         d9:0b:a5:f5:8d:39:e7:30:ab:5c:98:e4:09:49:35:8c:74:1b:
         05:53:a5:3b:a8:78:14:37:0f:2b:2d:b1:b4:a3:67:f9:12:20:
         91:63:4f:be:de:0d:3e:e5:75:44:17:1b:46:c4:a3:d2:6d:e8:
         2c:0c:18:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 23:18:59 2024 by rpki-client on console-fra.rpki-client.org