Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/4de760ba-0b98-320f-bcf3-8d3e09ba0b97.roa
File:                     4de760ba-0b98-320f-bcf3-8d3e09ba0b97.roa (raw, json)
Hash identifier:          AEeVyZGfDFkYqt7I4IerVzeFcNvAN6HPznONEd1hPPo=
Subject key identifier:   FD:DA:44:02:F4:CC:D3:AE:4A:94:97:80:84:FC:4A:0B:17:E7:DC:86
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F432858490E16BF1A61714D04A9A82680
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/4de760ba-0b98-320f-bcf3-8d3e09ba0b97.roa
Signing time:             Sun 02 Mar 2025 14:00:52 +0000
ROA not before:           Sun 02 Mar 2025 14:00:52 +0000
ROA not after:            Sat 31 May 2025 13:00:52 +0000
asID:                     213349
IP address blocks:        45.61.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0e:16:bf:1a:61:71:4d:04:a9:a8:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Mar  2 14:00:52 2025 GMT
            Not After : May 31 13:00:52 2025 GMT
        Subject: CN=490d0707-7d55-43ef-b94c-a9c79fe5fbe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6d:f1:08:2e:41:3f:9c:f1:57:6d:c2:4d:b3:
                    92:7f:72:6f:4e:71:73:73:4c:08:ed:46:0e:70:8e:
                    b3:72:7f:a0:3f:a7:c2:1a:91:50:32:03:d3:23:6b:
                    0c:ac:0f:55:dd:5e:ec:bb:6a:c1:a6:49:46:97:6b:
                    10:cd:e0:50:a4:c7:ab:96:9f:18:af:e6:d7:5b:3c:
                    76:49:77:e7:4e:de:76:d9:0f:2a:55:95:9b:2b:e9:
                    e5:49:15:31:d1:b4:9c:ea:e6:2e:78:30:b3:c8:b5:
                    48:8a:10:35:ad:b9:e3:f3:44:4e:be:fb:a7:ef:0e:
                    53:31:93:d4:7d:1f:67:6e:f1:c9:db:8c:25:df:44:
                    b2:9a:07:bd:b9:f0:e8:91:2c:5f:f7:d2:e6:ac:2f:
                    78:86:3a:6e:89:cc:05:bf:4b:84:20:e1:95:6d:60:
                    7e:7e:5e:f3:fc:69:fd:0a:7d:59:39:5e:01:87:12:
                    33:13:0f:65:4a:a1:6a:37:ec:89:d1:93:6d:4b:08:
                    6c:bf:28:78:f4:66:01:01:23:a3:d9:56:7f:59:cc:
                    04:7d:0b:ed:82:c9:c0:60:02:5c:e0:80:52:97:a8:
                    f1:76:ff:aa:93:7e:b3:3c:94:b4:c9:9d:00:f1:04:
                    e0:2d:34:5f:c9:7b:c9:6a:65:a7:90:5d:a1:26:74:
                    88:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DA:44:02:F4:CC:D3:AE:4A:94:97:80:84:FC:4A:0B:17:E7:DC:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/4de760ba-0b98-320f-bcf3-8d3e09ba0b97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:27:7c:14:a5:a3:e9:8b:f6:74:cd:45:ef:7a:80:f3:2c:23:
         2c:74:3d:bd:bc:0c:a1:f2:ab:41:db:f2:42:b0:ce:60:b0:ba:
         f9:7e:2d:7c:2f:87:c2:69:4b:f4:0f:27:d4:0c:c3:92:ce:38:
         de:69:f4:c7:19:4b:dd:2c:5e:7c:5f:42:82:78:be:c3:08:41:
         33:8d:43:f6:9b:ab:c5:56:62:07:22:84:8a:3b:51:b8:da:6a:
         e7:75:8f:c3:2b:fa:48:8b:32:e5:4f:34:4a:23:07:28:9a:89:
         02:58:7f:8f:56:fc:76:5f:24:91:c1:c6:88:61:30:7d:f8:4f:
         87:f4:a4:e2:f9:fd:09:79:e8:f8:14:ae:95:8e:4b:f6:54:9c:
         9e:8e:03:e2:42:22:cf:ec:47:68:62:cf:c9:a0:c1:c5:54:5d:
         35:8c:de:37:d1:bc:ff:2f:e9:5b:8f:1e:0c:20:e1:58:e0:34:
         fc:9b:03:1f:46:c6:6e:b5:b1:fd:53:41:f1:f8:b1:3c:5f:0a:
         a9:92:f9:4a:2b:dc:06:35:d1:d8:31:e3:ba:e6:ab:84:11:24:
         69:60:9b:23:19:7f:ec:55:c8:d0:6f:6e:64:63:9e:f3:34:29:
         1f:d8:21:17:6b:42:51:d8:48:8e:70:c8:77:41:db:ca:be:3a:
         d0:9e:c0:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFr8aYXFNBKmoJoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOThjYjUwNTgtMDFhZC00NWJmLTljMTUtNDUzZjQxMGJi
OWQ3MB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk
NDkwZDA3MDctN2Q1NS00M2VmLWI5NGMtYTljNzlmZTVmYmU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1W3xCC5BP5zxV23CTbOSf3JvTnFzc0wI7UYO
cI6zcn+gP6fCGpFQMgPTI2sMrA9V3V7su2rBpklGl2sQzeBQpMerlp8Yr+bXWzx2
SXfnTt522Q8qVZWbK+nlSRUx0bSc6uYueDCzyLVIihA1rbnj80ROvvun7w5TMZPU
fR9nbvHJ24wl30Symge9ufDokSxf99LmrC94hjpuicwFv0uEIOGVbWB+fl7z/Gn9
Cn1ZOV4BhxIzEw9lSqFqN+yJ0ZNtSwhsvyh49GYBASOj2VZ/WcwEfQvtgsnAYAJc
4IBSl6jxdv+qk36zPJS0yZ0A8QTgLTRfyXvJamWnkF2hJnSIKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP3aRAL0zNOuSpSXgIT8SgsX59yGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OGNi
NTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNmNDEwYmI5ZDcvNGRlNzYwYmEtMGI5OC0z
MjBmLWJjZjMtOGQzZTA5YmEwYjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOThjYjUwNTgtMDFhZC00NWJmLTlj
MTUtNDUzZjQxMGJiOWQ3Lzk4Y2I1MDU4LTAxYWQtNDViZi05YzE1LTQ1M2Y0MTBi
YjlkNy5jcmwwHwYDVR0jBBgwFoAUgs6ENpgBbErCBlI/wMU9V+EIADkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85OGNiNTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNm
NDEwYmI5ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALT2nMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAwnfBSlo+mL9nTNRe96gPMsIyx0Pb28DKHyq0Hb8kKwzmCwuvl+LXwv
h8JpS/QPJ9QMw5LOON5p9McZS90sXnxfQoJ4vsMIQTONQ/abq8VWYgcihIo7Ubja
aud1j8Mr+kiLMuVPNEojByiaiQJYf49W/HZfJJHBxohhMH34T4f0pOL5/Ql56PgU
rpWOS/ZUnJ6OA+JCIs/sR2hiz8mgwcVUXTWM3jfRvP8v6VuPHgwg4VjgNPybAx9G
xm61sf1TQfH4sTxfCqmS+Uor3AY10dgx47rmq4QRJGlgmyMZf+xVyNBvbmRjnvM0
KR/YIRdrQlHYSI5wyHdB28q+OtCewJE=
-----END CERTIFICATE-----
Generated at Fri Mar 14 13:28:56 2025 by rpki-client