Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/cdb55576-3077-358a-a411-40c0f4e67ec5.roa
File:                     cdb55576-3077-358a-a411-40c0f4e67ec5.roa (raw, json)
Hash identifier:          GO4BdGG+lPPSfoQOe+8cXPMT9D0orK6Bxrs0Ze8FvKg=
Subject key identifier:   1C:45:D3:0A:B2:63:13:28:85:EE:0E:07:64:5C:9F:64:4C:EE:4A:39
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F43285845A428AEE25DC7BF8C00AF3A80
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/cdb55576-3077-358a-a411-40c0f4e67ec5.roa
Signing time:             Tue 23 Apr 2024 13:00:34 +0000
ROA not before:           Tue 23 Apr 2024 13:00:34 +0000
ROA not after:            Mon 22 Jul 2024 13:00:34 +0000
asID:                     213122
IP address blocks:        45.61.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:28:ae:e2:5d:c7:bf:8c:00:af:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Apr 23 13:00:34 2024 GMT
            Not After : Jul 22 13:00:34 2024 GMT
        Subject: CN=0307f712-f94e-47f2-9f5f-388d41375f79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d7:52:3c:63:67:e8:13:4d:08:d9:23:07:f1:
                    f2:cb:e1:58:94:a5:44:48:b1:31:c6:da:d1:5e:4c:
                    0b:c0:03:99:14:22:dc:a5:b6:eb:a8:21:db:c0:79:
                    b3:bd:dd:f1:ec:09:81:21:bf:bf:75:20:82:23:e1:
                    49:56:08:1e:58:f9:c4:89:eb:4f:d5:27:6d:71:fb:
                    8b:b2:3f:2e:ff:ac:86:b6:6c:76:a9:dc:95:7a:27:
                    ca:45:75:cf:a3:be:6e:56:b8:60:34:6d:1e:31:e8:
                    c3:e1:1c:45:e6:fc:84:24:ed:91:a1:8b:de:1d:57:
                    3c:58:cc:6d:4d:86:38:7b:19:37:31:12:12:ac:10:
                    0c:ce:d7:00:de:30:53:27:2a:19:ba:dd:e2:0e:e0:
                    30:38:77:b9:1c:c7:07:8a:3b:94:4d:fd:66:82:47:
                    7f:75:18:6c:58:97:72:e5:a1:97:70:91:13:66:c4:
                    c8:05:df:ac:10:6f:4e:9f:55:23:26:a6:99:b0:5f:
                    21:7d:47:7e:84:ae:e8:dd:f6:76:0b:73:d9:f2:87:
                    7a:95:d2:4b:ab:c6:9e:a6:50:91:a0:64:d8:4e:38:
                    e3:d8:33:a7:b6:7e:93:df:b3:43:a7:05:17:ba:63:
                    a1:d4:bd:42:6f:64:f8:28:df:db:29:00:3b:c8:3d:
                    80:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:45:D3:0A:B2:63:13:28:85:EE:0E:07:64:5C:9F:64:4C:EE:4A:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/cdb55576-3077-358a-a411-40c0f4e67ec5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:c4:a1:24:e0:02:05:2f:0a:89:0b:be:9b:30:4a:e5:af:03:
         41:37:35:11:09:c2:9e:5a:a6:94:0d:10:9d:a3:07:a5:5c:cc:
         a3:6f:43:c8:fc:14:f2:4e:44:bd:37:13:32:bb:b1:c0:0f:2e:
         b9:70:b6:00:cd:a4:16:c2:99:95:9b:bc:c9:4c:9c:3e:3a:58:
         4b:b6:1c:e6:6f:d2:13:b5:f6:92:72:f2:07:a2:52:47:7e:22:
         80:58:38:b9:f5:04:78:48:01:12:1d:76:7f:c0:84:e0:15:f6:
         af:cf:e2:c3:22:a9:ae:55:0b:44:12:80:ab:12:01:bd:25:49:
         7e:af:b3:87:32:37:dd:90:9d:2a:c4:47:dd:aa:45:ac:fd:a1:
         9f:e4:f6:a9:bd:9a:9c:d0:06:18:75:4a:44:de:6f:d5:b8:5e:
         26:6f:43:87:c1:cc:98:e7:e6:25:e4:43:90:88:3c:4d:1b:40:
         0d:f2:44:de:03:13:7d:af:27:1c:b1:77:93:70:65:be:9b:f5:
         12:f5:f0:38:21:40:16:b8:89:30:47:44:1c:82:7a:c7:24:f3:
         ce:79:18:af:03:e7:f9:c3:3d:5f:a9:f1:e8:3d:01:44:c8:11:
         02:80:e2:3f:94:6c:29:e6:fa:a1:77:89:19:aa:d3:75:53:58:
         a0:0d:3a:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWkKK7iXce/jACvOoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOThjYjUwNTgtMDFhZC00NWJmLTljMTUtNDUzZjQxMGJi
OWQ3MB4XDTI0MDQyMzEzMDAzNFoXDTI0MDcyMjEzMDAzNFowLzEtMCsGA1UEAxMk
MDMwN2Y3MTItZjk0ZS00N2YyLTlmNWYtMzg4ZDQxMzc1Zjc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9dSPGNn6BNNCNkjB/Hyy+FYlKVESLExxtrR
XkwLwAOZFCLcpbbrqCHbwHmzvd3x7AmBIb+/dSCCI+FJVggeWPnEietP1SdtcfuL
sj8u/6yGtmx2qdyVeifKRXXPo75uVrhgNG0eMejD4RxF5vyEJO2RoYveHVc8WMxt
TYY4exk3MRISrBAMztcA3jBTJyoZut3iDuAwOHe5HMcHijuUTf1mgkd/dRhsWJdy
5aGXcJETZsTIBd+sEG9On1UjJqaZsF8hfUd+hK7o3fZ2C3PZ8od6ldJLq8aeplCR
oGTYTjjj2DOntn6T37NDpwUXumOh1L1Cb2T4KN/bKQA7yD2AHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBxF0wqyYxMohe4OB2Rcn2RM7ko5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OGNi
NTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNmNDEwYmI5ZDcvY2RiNTU1NzYtMzA3Ny0z
NThhLWE0MTEtNDBjMGY0ZTY3ZWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOThjYjUwNTgtMDFhZC00NWJmLTlj
MTUtNDUzZjQxMGJiOWQ3Lzk4Y2I1MDU4LTAxYWQtNDViZi05YzE1LTQ1M2Y0MTBi
YjlkNy5jcmwwHwYDVR0jBBgwFoAUgs6ENpgBbErCBlI/wMU9V+EIADkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85OGNiNTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNm
NDEwYmI5ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALT2rMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEHEoSTgAgUvCokLvpswSuWvA0E3NREJwp5appQNEJ2jB6VczKNvQ8j8
FPJORL03EzK7scAPLrlwtgDNpBbCmZWbvMlMnD46WEu2HOZv0hO19pJy8geiUkd+
IoBYOLn1BHhIARIddn/AhOAV9q/P4sMiqa5VC0QSgKsSAb0lSX6vs4cyN92QnSrE
R92qRaz9oZ/k9qm9mpzQBhh1SkTeb9W4XiZvQ4fBzJjn5iXkQ5CIPE0bQA3yRN4D
E32vJxyxd5NwZb6b9RL18DghQBa4iTBHRByCesck8855GK8D5/nDPV+p8eg9AUTI
EQKA4j+UbCnm+qF3iRmq03VTWKANOiU=
-----END CERTIFICATE-----
Generated at Fri May 3 05:09:25 2024 by rpki-client on console-fra.rpki-client.org