Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/8b62fd67-4bb4-3600-9bb0-807a7e4b8077.roa
File:                     8b62fd67-4bb4-3600-9bb0-807a7e4b8077.roa (raw, json)
Hash identifier:          acj13YxA7fEF44VQ+v0cNKkQvfe1XpS6MkEePfd9prk=
Subject key identifier:   22:D8:B9:EA:7B:82:B4:E0:51:39:FF:47:DF:E4:CF:58:D7:F7:0A:FA
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584742BB504D518EA73B1923DE80
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/8b62fd67-4bb4-3600-9bb0-807a7e4b8077.roa
Signing time:             Thu 19 Sep 2024 01:00:31 +0000
ROA not before:           Thu 19 Sep 2024 01:00:31 +0000
ROA not after:            Wed 18 Dec 2024 02:00:31 +0000
asID:                     14956
IP address blocks:        45.61.128.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:bb:50:4d:51:8e:a7:3b:19:23:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Sep 19 01:00:31 2024 GMT
            Not After : Dec 18 02:00:31 2024 GMT
        Subject: CN=dc8a5057-77d0-4e6f-aec1-2e0c869503ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5b:a6:2e:72:7a:1f:28:e9:19:a7:5a:3f:c8:
                    a3:63:62:ae:6b:28:1e:91:fb:57:c1:5a:ae:58:d8:
                    91:64:f7:63:ef:00:c0:5f:db:6b:7b:86:1a:d6:26:
                    6a:5d:1c:7b:af:b8:7f:f8:4b:fe:90:b9:1a:c1:ca:
                    9c:fa:fa:36:de:22:b4:44:92:f6:82:d2:b3:12:65:
                    c1:db:0d:cd:c8:fa:46:1e:e5:b0:0a:76:33:e5:fa:
                    08:df:c0:c7:02:c4:96:d8:4f:b8:07:4b:ef:9e:7b:
                    b2:98:5b:af:b8:fd:3a:35:ad:78:81:ba:b8:fd:f2:
                    d4:d6:55:1a:60:1c:eb:e2:cb:b9:03:3f:2e:fe:f8:
                    6a:ab:0e:0d:24:cb:a5:26:fb:61:55:b1:75:df:3a:
                    11:e0:4b:2a:4d:2b:c4:9c:ac:db:c1:03:5e:29:fd:
                    32:2b:f4:15:c9:be:d3:98:68:06:49:cd:28:5d:23:
                    cf:7e:a4:e9:f2:9b:cd:78:ff:10:5c:46:ee:ad:03:
                    5f:a1:6d:1c:57:df:87:db:e0:f9:29:e9:71:09:5c:
                    03:2b:c9:bc:c6:63:f5:9d:30:1d:85:da:b7:59:4c:
                    64:6c:be:b1:0c:47:d6:18:26:e3:17:0f:8b:1e:98:
                    b2:ed:aa:05:1a:a2:c1:05:f7:a1:42:6a:25:f5:09:
                    33:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D8:B9:EA:7B:82:B4:E0:51:39:FF:47:DF:E4:CF:58:D7:F7:0A:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/8b62fd67-4bb4-3600-9bb0-807a7e4b8077.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:a0:06:1e:fa:7e:36:e0:f4:e5:1b:59:63:4d:50:21:d6:69:
         dd:c4:cb:9a:c5:78:b3:db:05:79:c6:de:af:16:f0:81:e1:99:
         72:7a:7c:2f:37:25:9e:6a:a6:7b:d5:a7:f7:17:f1:77:65:24:
         14:d7:de:bb:c6:5e:f5:aa:e9:98:55:50:9d:b7:40:13:df:b7:
         7e:21:79:3f:1e:75:d1:7f:a9:e2:4a:e0:93:19:ab:fa:83:17:
         b5:af:81:1a:d1:db:39:48:51:57:48:a7:2e:a8:7b:38:de:b4:
         2a:b3:ad:b4:8e:1b:7c:34:14:5f:f4:06:b1:fb:ab:76:a6:eb:
         79:da:42:fd:b0:b4:72:45:49:a7:17:b6:d6:9c:bb:f7:15:c8:
         d4:68:66:4e:8a:cf:65:dd:f1:49:31:19:69:f4:91:83:d3:9c:
         d7:6a:ac:da:41:f1:2f:13:de:94:24:1a:95:32:fb:85:fd:d2:
         2e:32:4e:54:4e:85:30:7a:b9:d5:38:4b:2a:d5:51:dc:48:be:
         c7:26:23:fb:87:d3:5f:5d:4f:26:e9:33:31:56:bd:7e:f9:b9:
         54:3d:9b:c5:54:b3:99:cb:3c:c6:19:67:04:d4:2b:6f:c3:c3:
         96:e6:3e:ff:5c:ab:79:a9:a3:e6:c0:d7:55:8c:3e:1d:11:87:
         e3:f3:87:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:40 2024 by rpki-client on console-ams.rpki-client.org