Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/3fb414dd-1c0d-35f5-85d2-f198fe94f1b1.roa
File:                     3fb414dd-1c0d-35f5-85d2-f198fe94f1b1.roa (raw, json)
Hash identifier:          ycyL1JbjtZT+vMlqpYubknzM1AUPYUc290WOeg+G4Pg=
Subject key identifier:   CE:A1:07:F6:D8:F9:51:44:94:2B:6E:CF:A7:EC:1C:D5:6A:21:27:48
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584AA160DEAD2CE610F526628980
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/3fb414dd-1c0d-35f5-85d2-f198fe94f1b1.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     14956
IP address blocks:        45.61.142.0/24 maxlen: 24
                          45.61.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:de:ad:2c:e6:10:f5:26:62:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=7f38aab1-c4aa-4d6d-b26d-903f82a5dc0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:54:b2:e8:e6:e0:ea:d1:b0:6c:3d:24:d1:0c:
                    28:e3:39:cf:7e:1e:aa:ea:c5:1d:36:e3:ba:c6:54:
                    94:b2:1f:67:7f:bc:97:59:a0:7a:40:cf:ab:47:d0:
                    8d:61:98:92:f7:da:79:a3:ca:5a:4a:1a:e8:c6:86:
                    b0:a0:00:3c:2e:e8:5f:a0:3b:4b:80:33:f0:dd:2b:
                    78:05:5c:97:32:56:0f:11:d6:ef:87:c3:3c:34:86:
                    11:7f:1d:5f:f6:82:58:29:3b:33:ac:6c:74:65:27:
                    98:2d:1e:38:57:45:df:2b:f9:ed:3f:01:52:e3:66:
                    c2:76:a5:4e:f4:04:de:a8:8a:ed:72:a6:ac:c0:b5:
                    f2:98:54:af:d2:9a:56:bc:d7:21:b1:03:5c:d8:19:
                    8d:de:b9:e1:68:bd:51:08:19:ed:9d:4e:82:92:18:
                    74:30:a4:ca:6c:06:aa:d3:93:c1:1f:c5:0e:e1:f2:
                    10:8b:d4:2b:c3:f0:4f:ac:52:f6:bf:ef:7f:08:e0:
                    d2:f3:c3:e3:cb:a2:1a:67:27:8e:40:41:32:75:3a:
                    b3:a7:c4:ff:56:88:90:35:fc:57:c9:0e:c6:d6:fd:
                    7a:43:c0:60:49:b4:1f:f5:01:ee:c9:ca:d5:ee:69:
                    bf:ff:a5:ba:09:eb:f7:5c:c6:20:65:4a:ca:5e:3a:
                    35:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A1:07:F6:D8:F9:51:44:94:2B:6E:CF:A7:EC:1C:D5:6A:21:27:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/3fb414dd-1c0d-35f5-85d2-f198fe94f1b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.142.0/24
                  45.61.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:44:10:99:7c:8e:0c:18:19:6c:52:5a:90:7a:98:c5:b4:f8:
         47:c3:da:e7:c5:57:8e:8a:f4:48:40:52:c2:81:56:b1:b2:33:
         b6:a8:39:db:c1:fd:1f:1c:7b:8b:31:67:b3:5e:c6:9d:c7:24:
         e7:3c:c5:da:6d:e1:9d:b9:69:02:40:24:b3:3e:35:e0:9d:2e:
         51:94:12:e1:30:7c:03:9f:82:d0:b9:7a:db:5d:81:4e:d1:39:
         e4:33:84:a3:cc:c2:45:a8:11:a9:a7:de:17:c6:ed:05:71:43:
         60:21:dc:69:d9:7b:62:27:1b:25:22:de:a1:f3:52:14:7b:40:
         95:c3:8e:c0:e7:b0:9b:4a:37:4d:9d:98:7b:28:21:d9:44:86:
         ab:5f:3a:88:17:ba:0b:d9:53:de:81:4a:d2:ed:a3:48:26:7c:
         08:a4:35:5e:e6:90:ce:e7:36:62:0c:c0:d9:a3:63:b5:d1:3f:
         f9:39:cf:e2:34:90:55:9b:b5:6d:e0:a5:eb:31:24:26:1d:94:
         17:09:30:88:9e:10:6a:ec:40:8d:7b:cd:68:40:c5:9f:6f:dd:
         70:bb:17:d6:df:6f:7d:e0:bd:7b:fb:40:a5:9c:43:52:f8:13:
         f3:a0:42:d0:53:eb:54:95:bf:7b:3f:2b:37:f9:a5:9c:d2:a1:
         b8:df:fe:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 22:22:00 2025 by rpki-client