Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/cb44221e-6d75-301d-8034-5c462b952531.roa
File:                     cb44221e-6d75-301d-8034-5c462b952531.roa (raw, json)
Hash identifier:          HUYL8/KRNLZF4Dm3Wc4sl6UzCvEcWYpgQ4l96HoveH4=
Subject key identifier:   62:AE:7E:FB:DF:B4:2D:C1:18:C3:47:D5:B1:43:9D:FF:32:85:0D:9B
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584644AF00A80F1BAD59034D3940
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/cb44221e-6d75-301d-8034-5c462b952531.roa
Signing time:             Thu 20 Jun 2024 01:00:24 +0000
ROA not before:           Thu 20 Jun 2024 01:00:24 +0000
ROA not after:            Wed 18 Sep 2024 01:00:24 +0000
asID:                     198983
IP address blocks:        45.61.152.0/22 maxlen: 24
                          104.194.128.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Jul 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:44:af:00:a8:0f:1b:ad:59:03:4d:39:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Jun 20 01:00:24 2024 GMT
            Not After : Sep 18 01:00:24 2024 GMT
        Subject: CN=f339e3a8-cb84-4aa8-aad9-98c5c14dbe47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:54:62:16:dc:1e:c4:2a:90:9c:ef:47:52:17:
                    d8:87:e7:1c:b3:68:71:23:e4:46:41:31:28:5b:c5:
                    6a:75:60:68:12:2a:b3:ab:e6:17:7e:2c:7b:c0:b6:
                    43:96:92:b2:a5:a2:b1:b0:17:dd:12:e7:9a:50:0e:
                    15:9a:93:73:cb:a8:1f:4e:16:b9:cf:0d:7a:e3:bf:
                    38:6a:a8:c3:69:a7:e2:81:96:a6:6c:6c:05:ad:1e:
                    a0:87:de:fb:cd:d1:1d:fe:f0:d6:fe:43:c2:fc:7d:
                    db:84:28:5e:0f:04:49:6b:33:54:26:54:a2:d7:96:
                    52:8f:3b:d1:74:7f:66:ee:69:6b:c0:54:c0:36:06:
                    0c:0b:db:0d:aa:8e:04:88:82:f8:f0:f8:6d:d9:29:
                    68:da:5e:6c:43:15:7f:da:ba:c8:7c:2b:75:e3:d8:
                    58:de:66:e8:a9:e8:25:a4:8e:d6:8c:d4:dc:8e:92:
                    2e:12:57:f8:68:11:b6:d8:56:79:8e:0d:3a:36:4e:
                    59:f1:ad:97:d5:f3:0c:25:33:22:53:5f:17:92:2c:
                    f7:68:92:b4:6f:9f:07:9f:f1:0f:e5:03:5a:fc:d7:
                    a4:d1:37:97:e4:ba:69:b6:ff:1f:9d:c9:85:0a:7c:
                    49:25:82:16:45:6b:03:14:26:00:8f:10:8d:c7:f3:
                    5f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:AE:7E:FB:DF:B4:2D:C1:18:C3:47:D5:B1:43:9D:FF:32:85:0D:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/cb44221e-6d75-301d-8034-5c462b952531.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.152.0/22
                  104.194.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:28:2f:e4:4e:39:2c:9c:62:0a:32:de:d5:2d:5f:99:71:85:
         28:88:bb:18:dc:f1:3d:c0:13:9f:ff:b0:d5:c0:46:e8:a6:f2:
         d5:35:c3:de:85:5f:88:a1:56:18:56:a6:d5:11:b8:b5:19:a9:
         2c:47:95:e6:78:0f:00:29:b1:bd:b2:5b:9f:39:bb:70:76:27:
         c2:b2:59:d4:79:9d:52:94:f3:30:d3:00:b9:f1:af:bf:27:eb:
         91:de:42:e4:32:27:27:b0:c5:d5:bc:68:33:7d:77:45:56:97:
         e0:ec:cd:54:ae:83:aa:27:f9:7e:e1:91:3d:de:2d:34:22:40:
         61:3c:96:59:9b:ff:b4:0f:45:ef:b2:38:b3:a4:7a:97:4d:fa:
         5d:b8:bb:db:62:86:c0:06:f8:62:bb:d9:e9:e1:3c:bd:29:c2:
         76:64:50:6d:8a:8f:7b:f7:00:6b:86:9b:61:8b:7f:14:2d:e6:
         a5:39:7b:74:cb:aa:f3:13:b1:68:d8:6f:e8:75:8a:03:a5:35:
         9c:6f:7f:ff:a3:7d:d7:97:95:3d:8d:4d:26:c4:0e:8d:b8:12:
         9f:82:70:96:5e:bb:6c:9e:62:c9:a5:3b:98:8d:b5:7f:d7:c3:
         e5:55:b5:e3:1c:1f:5e:86:80:21:20:16:13:4a:3a:59:ae:77:
         ad:44:85:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 23:02:25 2024 by rpki-client on console-ams.rpki-client.org