Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/a7819acd-c509-352a-ae27-2ad8a5652c4a.roa
File:                     a7819acd-c509-352a-ae27-2ad8a5652c4a.roa (raw, json)
Hash identifier:          sa/UzlT2KbzyUI569Nlfm1SClZYHUWo4hKoMpWYSyfE=
Subject key identifier:   F2:FD:63:8D:EB:AD:94:77:A5:A3:0E:A1:9D:6D:66:DB:99:A9:49:98
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F432858454D9D7C6C438074D49BF9D320
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/a7819acd-c509-352a-ae27-2ad8a5652c4a.roa
Signing time:             Sat 23 Mar 2024 13:00:32 +0000
ROA not before:           Sat 23 Mar 2024 13:00:32 +0000
ROA not after:            Fri 21 Jun 2024 13:00:32 +0000
asID:                     61003
IP address blocks:        45.61.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4d:9d:7c:6c:43:80:74:d4:9b:f9:d3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Mar 23 13:00:32 2024 GMT
            Not After : Jun 21 13:00:32 2024 GMT
        Subject: CN=77d47638-8cd1-4795-a63d-feec9c85c3a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:73:7c:c2:a8:af:bc:96:b8:e6:08:bc:44:e5:
                    e5:71:26:df:3f:69:24:81:57:32:10:6d:68:6c:eb:
                    83:ee:d9:64:9d:99:4d:ae:38:b4:86:a7:90:09:db:
                    20:e0:38:f6:99:c6:39:57:27:d6:56:fb:6d:ea:90:
                    a4:b4:d0:9b:62:7d:8a:6c:73:b5:c5:4e:16:d4:9c:
                    33:09:aa:4b:e5:26:2f:8d:ea:36:05:ee:ae:54:cb:
                    6e:83:9f:5a:41:ce:95:09:0a:9d:9a:21:98:fa:0c:
                    1b:14:9d:5d:1c:b2:96:96:1b:d9:81:13:8f:88:64:
                    a5:03:bf:ca:f7:f9:bd:3e:83:4f:c0:ef:40:85:3f:
                    c6:4e:12:60:ad:8d:7f:1e:80:7e:9e:f0:07:1f:2f:
                    1e:75:c7:90:6c:1f:58:47:3e:3f:1c:73:d6:2f:28:
                    c6:9f:93:8d:d7:e0:fc:68:3c:52:24:45:e8:4e:c5:
                    77:f8:65:b2:77:d4:20:10:13:6c:1c:19:ca:4c:be:
                    27:90:8c:9c:9a:d9:fe:b4:af:8a:d8:e1:7c:25:e0:
                    8a:c9:cd:cf:df:d6:06:09:48:4f:25:ac:04:a5:df:
                    76:6e:89:85:ff:46:3e:cb:bd:c1:bc:0e:19:20:09:
                    82:93:45:ef:31:a4:78:25:66:2f:17:4f:a1:f6:b0:
                    03:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:FD:63:8D:EB:AD:94:77:A5:A3:0E:A1:9D:6D:66:DB:99:A9:49:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/a7819acd-c509-352a-ae27-2ad8a5652c4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:ee:cf:77:1c:be:af:b7:2b:cd:a5:da:78:4c:bd:a3:00:8f:
         bb:0a:a4:3e:45:b4:4d:a7:67:0b:61:71:3c:bf:8a:a4:1c:2b:
         e7:a5:00:ff:d4:32:aa:19:26:7a:9e:9f:2b:ab:9d:e7:a6:52:
         05:06:fb:01:fd:a4:d4:d7:3f:19:a2:f3:f1:82:81:00:ca:e1:
         73:71:a3:78:1e:87:d3:92:bc:07:8a:84:21:3b:10:2f:48:14:
         2f:cd:72:4b:16:b2:f9:52:f1:44:d1:e7:79:50:54:09:1c:d0:
         56:98:90:a3:55:b3:ca:71:ef:c7:1e:13:75:47:b7:12:2c:b9:
         1d:42:e5:ec:32:c1:ab:c3:f4:db:09:cd:72:9e:59:39:8e:f4:
         44:d5:7d:fe:7f:48:8f:95:25:62:84:55:20:aa:28:86:b0:77:
         a1:df:e2:88:b4:09:c3:71:a4:c6:fb:7f:12:47:1b:a5:8b:ea:
         27:c4:04:5e:4f:bc:c0:f5:36:ff:5f:ba:2a:04:75:bb:6d:c1:
         ed:b5:e9:73:1d:e8:dd:f5:60:7e:7e:b1:8c:4b:64:5e:36:7b:
         ce:7a:e7:53:cb:2e:c7:82:e7:cb:b8:18:49:70:3f:3b:b2:f3:
         64:11:cd:2d:cf:57:4c:c4:eb:e7:52:1e:6a:23:51:90:48:bc:
         c9:3e:2b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 05:09:25 2024 by rpki-client on console-fra.rpki-client.org