Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/5edf341d-2568-30d4-85da-1e51c6dcf02e.roa
File:                     5edf341d-2568-30d4-85da-1e51c6dcf02e.roa (raw, json)
Hash identifier:          JyAVrVU0LD9n5FByYERh5EjYHD2Atgk6+pMskxHu1Hw=
Subject key identifier:   58:BE:90:8F:C5:46:E4:17:ED:50:F5:E7:2E:64:3A:D8:FA:D9:3D:2D
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F43285845B21E2CD65371F1F5177753C0
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/5edf341d-2568-30d4-85da-1e51c6dcf02e.roa
Signing time:             Sun 28 Apr 2024 13:00:34 +0000
ROA not before:           Sun 28 Apr 2024 13:00:34 +0000
ROA not after:            Sat 27 Jul 2024 13:00:34 +0000
asID:                     211350
IP address blocks:        45.61.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b2:1e:2c:d6:53:71:f1:f5:17:77:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Apr 28 13:00:34 2024 GMT
            Not After : Jul 27 13:00:34 2024 GMT
        Subject: CN=b49953b7-484e-46f4-a2b5-172fdab28653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:45:f1:20:21:87:13:e9:2d:17:eb:87:90:e6:
                    59:59:9c:ae:97:70:a2:27:7f:7d:c2:bd:20:00:5d:
                    cc:24:0c:7b:9f:66:c9:a8:40:bb:11:f2:3c:d0:bc:
                    25:0f:26:0b:52:60:a6:2b:db:bf:d9:29:44:2d:20:
                    87:3b:a5:1e:73:2c:67:45:68:94:46:d8:b0:70:1a:
                    1c:29:14:13:8c:c6:43:a3:bb:d4:88:5a:f0:89:f8:
                    01:56:26:5c:c3:0d:02:10:2a:5d:f4:a2:a7:c5:eb:
                    46:b2:ec:80:7b:1f:ec:96:3d:02:81:71:3d:15:16:
                    b3:03:80:96:bc:48:0b:a9:4a:1f:70:47:5e:d3:28:
                    e9:73:d0:75:28:14:b7:52:eb:d5:72:9a:c5:95:54:
                    d8:e4:19:e1:c5:02:a6:ee:ca:e1:da:0d:2b:06:dc:
                    a1:e1:46:f3:87:d2:20:1a:f1:93:0d:b4:9a:ea:aa:
                    76:a2:fe:97:54:cd:79:d6:3f:40:fe:7d:d4:1e:51:
                    ac:15:f4:f5:7b:ac:fe:8b:59:8a:78:85:0d:3b:fe:
                    f1:98:87:74:18:5c:e8:d6:cd:d6:c2:5e:71:4b:a2:
                    14:6e:b2:88:c5:12:a3:6a:fd:16:4b:78:16:4f:95:
                    16:41:96:e0:49:be:c9:da:df:cd:43:49:10:cc:22:
                    03:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:BE:90:8F:C5:46:E4:17:ED:50:F5:E7:2E:64:3A:D8:FA:D9:3D:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/5edf341d-2568-30d4-85da-1e51c6dcf02e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:1b:8f:ca:b6:4d:53:d6:3f:3e:ae:44:8e:09:94:af:92:ad:
         a5:49:cd:44:85:10:b3:df:1d:63:ad:ed:92:00:91:ec:4c:9d:
         d5:6a:73:ea:39:94:b8:e5:18:fa:19:bd:50:64:4e:b0:cc:e4:
         78:3f:40:ca:c8:af:62:c7:ca:f7:aa:e0:f8:0d:fa:64:3d:f6:
         f7:e0:6a:c4:10:97:74:88:4c:e8:c8:a5:e4:80:43:7f:78:88:
         f8:2b:07:26:c1:05:18:b2:8a:8a:60:97:d6:d9:12:58:d9:e6:
         8c:11:7b:6f:2b:05:64:bf:c6:ef:82:e5:0d:45:8b:19:35:ec:
         20:ee:16:72:4f:24:6f:2d:91:df:62:f4:e2:f2:ad:80:6e:8c:
         3f:60:8b:af:68:bf:b7:da:a4:f5:b5:1b:f9:75:16:70:80:f8:
         14:ee:c3:54:73:08:bf:81:23:9e:6c:7f:35:81:7d:71:c5:aa:
         d5:27:93:68:51:73:3b:8f:1e:d0:0d:ed:31:bf:7f:c0:50:59:
         5e:84:4d:ba:0a:b9:ac:29:d1:ce:61:c2:c2:24:e6:e3:45:54:
         c9:9b:e8:2c:b7:4d:96:2c:da:f1:d4:c3:27:35:0b:32:de:8e:
         89:1c:9f:1d:e3:0c:fc:5f:e8:d7:8f:20:87:d9:0f:bb:27:e9:
         62:ab:2e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 03:05:05 2024 by rpki-client on console-fra.rpki-client.org