Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/4d559f62-c096-3204-b1e7-1bd19be16de1.roa
File:                     4d559f62-c096-3204-b1e7-1bd19be16de1.roa (raw, json)
Hash identifier:          gsxBN82n3a/qn1tYI+c8Yg9pqWz3svtB7YaASGvVBEg=
Subject key identifier:   B1:F5:3F:79:15:84:29:2D:14:2F:F0:14:07:EA:FB:18:FD:32:F3:F3
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F432858485E35AF8C84C6352A62BFF2C0
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/4d559f62-c096-3204-b1e7-1bd19be16de1.roa
Signing time:             Sun 29 Dec 2024 14:00:53 +0000
ROA not before:           Sun 29 Dec 2024 14:00:53 +0000
ROA not after:            Sat 29 Mar 2025 13:00:53 +0000
asID:                     400332
IP address blocks:        45.61.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5e:35:af:8c:84:c6:35:2a:62:bf:f2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Dec 29 14:00:53 2024 GMT
            Not After : Mar 29 13:00:53 2025 GMT
        Subject: CN=6471bd21-9b89-4974-ba4c-d201a6a09d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:27:7c:3c:a3:a2:11:7d:ca:7e:61:05:b1:5d:
                    9e:75:da:91:95:b3:ec:f9:40:a6:ce:3c:50:5f:b6:
                    93:c6:32:35:cf:be:e6:9e:2a:d7:65:17:8a:c5:4f:
                    7b:59:37:f4:2b:7e:41:98:da:da:6c:b6:68:b3:57:
                    63:1e:51:d2:b0:82:d4:57:a5:70:6b:82:19:29:f0:
                    6d:55:56:e9:17:21:a3:c3:d4:1a:ac:63:a8:8b:8a:
                    74:e2:02:47:ec:77:80:70:57:07:c9:af:a4:57:27:
                    88:27:37:be:17:51:c8:a0:5d:da:81:6e:81:17:ca:
                    6e:e1:4f:bf:ba:6a:d5:9f:8a:e1:e3:7d:38:e0:25:
                    48:66:b9:81:30:f5:ab:ee:28:82:01:c1:8b:3a:20:
                    84:d8:bd:e6:d8:79:6b:5d:80:2b:8b:4d:a9:61:ac:
                    29:22:06:8c:86:e7:8c:24:4c:34:cc:5f:59:3c:54:
                    a9:60:3a:5a:46:c1:5a:ca:c4:69:33:1d:6d:98:ae:
                    9e:d1:14:eb:e0:40:dd:bd:1e:75:68:d4:c3:8a:26:
                    77:f4:bf:6f:8a:40:c6:59:a4:28:b4:85:a5:6c:fe:
                    dc:c2:8a:21:01:65:f9:97:c5:6a:f0:dd:d8:b5:07:
                    f8:ed:44:bc:4d:82:14:ed:33:49:40:4b:85:cb:6d:
                    28:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F5:3F:79:15:84:29:2D:14:2F:F0:14:07:EA:FB:18:FD:32:F3:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/4d559f62-c096-3204-b1e7-1bd19be16de1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:cf:ef:8f:4e:14:72:ef:f5:c8:fd:67:6f:6c:c0:c3:87:05:
         02:f2:7e:ff:16:b0:f6:6f:8a:ab:89:a7:f6:33:fb:fc:08:23:
         85:eb:0f:ff:06:ac:0f:15:fa:0f:11:2e:95:b3:2f:51:79:72:
         f1:3c:0c:52:2b:6b:ea:49:c8:e7:75:58:66:ef:cb:f8:8f:e0:
         2f:36:63:b2:b7:a6:ba:af:a7:e2:1c:34:25:38:1e:df:68:6e:
         ee:ec:b0:05:02:58:92:55:f6:7d:e8:cb:4c:e5:72:b9:33:97:
         6e:58:10:ea:05:55:9a:4e:38:28:e1:e5:bf:b7:62:d2:17:d0:
         bf:bd:48:01:f5:73:8f:14:b9:ba:2d:1f:04:1d:af:ba:bb:bf:
         97:3e:e7:ba:06:a6:1c:cd:e2:cb:8a:c6:4b:4c:45:41:d4:50:
         fe:6f:c3:a7:6a:ff:95:88:cb:28:ba:9e:cb:ab:eb:62:26:d7:
         40:99:57:77:54:02:9b:1c:58:d6:b4:51:0a:4b:07:6c:19:df:
         a6:e1:ef:8c:c4:ba:4c:c5:af:6e:88:13:ee:ba:cf:d3:00:b8:
         0f:e1:d4:8b:c0:97:80:2e:8d:eb:ec:b5:f9:b5:38:5f:a8:79:
         01:e8:32:e2:a9:71:ce:b0:98:dc:df:8f:6e:9b:63:c2:40:2b:
         d8:8c:b6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:26 2025 by rpki-client