Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/3fb414dd-1c0d-35f5-85d2-f198fe94f1b1.roa
File:                     3fb414dd-1c0d-35f5-85d2-f198fe94f1b1.roa (raw, json)
Hash identifier:          ymAJddqyk/m2/nCQJh/6qcsAgMi4Dt+8WJEV8v7XvRE=
Subject key identifier:   1F:0D:E6:24:93:8D:C1:2F:83:6D:23:E5:BC:47:CA:2C:C5:8E:94:65
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F43285845628D8F0A4A250DCDDEDF8480
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/3fb414dd-1c0d-35f5-85d2-f198fe94f1b1.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     14956
IP address blocks:        45.61.142.0/24 maxlen: 24
                          45.61.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:8f:0a:4a:25:0d:cd:de:df:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=6d1ba7bd-5afc-43bd-bf23-f751e5fcc981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:25:2b:56:2f:51:07:6e:31:8f:50:9f:c1:04:
                    f0:a7:37:d6:f3:48:e3:aa:84:2f:3e:e1:e7:47:61:
                    71:83:e4:d3:66:3f:fa:08:bd:5f:28:08:03:a9:ec:
                    68:24:8b:c2:92:fb:e2:ac:11:19:cd:d3:76:33:01:
                    4d:c3:4f:72:bd:ec:47:5e:7e:e8:26:59:c3:9b:b5:
                    b1:7f:61:6e:d1:5f:1a:86:b2:23:1f:9c:c7:69:81:
                    10:cd:a0:fb:3d:38:f3:d7:6a:93:df:2d:b4:e1:64:
                    b8:dd:f7:d9:a1:e1:7e:55:9b:6f:25:36:6a:6c:46:
                    e4:f3:76:34:e7:62:91:92:9b:98:fa:2c:da:23:92:
                    e2:a2:bd:bb:27:71:a3:4e:39:88:af:75:19:c5:e0:
                    b4:5e:66:69:d6:6e:79:83:c5:78:ae:ca:05:0d:76:
                    f3:f1:36:2e:01:9f:72:2e:2c:c8:f3:ee:4e:f9:dd:
                    79:75:b0:3c:00:d8:b8:e4:ba:23:f5:73:bd:ac:75:
                    d4:7d:80:58:ee:93:fd:61:8e:84:78:fe:f9:6d:63:
                    fa:81:1e:76:a7:ce:c5:df:e7:cd:bd:9e:cf:42:63:
                    71:f7:77:a4:80:74:c3:8d:39:f0:27:e7:23:01:eb:
                    8e:4d:9b:0c:d5:62:f8:59:f8:9d:66:54:fb:2a:b7:
                    ac:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0D:E6:24:93:8D:C1:2F:83:6D:23:E5:BC:47:CA:2C:C5:8E:94:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/3fb414dd-1c0d-35f5-85d2-f198fe94f1b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.142.0/24
                  45.61.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:c0:31:6c:f3:1c:76:fd:a6:d9:c0:d3:ac:72:d5:1f:3a:c2:
         c6:85:eb:ed:2b:9b:ea:01:bb:a1:38:ae:fe:ba:66:fc:ab:72:
         65:ac:5c:7a:48:ec:21:75:21:77:15:76:a6:29:f9:fa:7b:25:
         16:27:36:d2:df:35:54:ea:d9:6b:d5:de:49:cb:2a:6d:02:4c:
         bb:84:75:c7:cf:75:b9:4b:96:31:06:ec:35:bd:b2:d9:5e:ed:
         65:89:2a:9c:cc:15:f2:96:38:09:9f:f9:5c:24:ac:33:67:d0:
         65:a3:90:92:8c:b9:21:28:6c:75:00:17:3d:51:2e:00:52:ed:
         8e:04:55:75:b5:e9:98:b6:ef:02:3c:a6:34:eb:42:2b:59:cc:
         c3:11:b4:97:28:0b:0b:5f:72:e0:cb:29:43:8b:2e:bd:d4:af:
         08:8d:81:12:bd:b4:82:22:78:76:ae:dc:06:b1:02:e4:9b:7b:
         fe:07:29:aa:1a:91:81:97:9d:97:e3:eb:e8:a0:33:9f:ad:f1:
         46:09:cf:77:51:22:6f:dc:12:f2:3c:86:b4:c4:ef:20:36:6b:
         79:cf:23:1c:82:d2:be:47:55:52:74:3c:e9:25:10:91:f7:51:
         c0:01:72:3e:51:20:ea:91:92:01:6a:25:de:c6:95:91:e6:18:
         05:ed:38:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:27:46 2024 by rpki-client on console-ams.rpki-client.org