Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/d1bdfb51-2031-3064-93dc-6e806e45dfc1.roa
File:                     d1bdfb51-2031-3064-93dc-6e806e45dfc1.roa (raw, json)
Hash identifier:          D6tYuqHNgY/UUf8b27EAeDP7uhQ9UTdXXEBcwlgPXK4=
Subject key identifier:   34:5C:27:E3:F4:7F:74:D8:D3:8B:A1:E3:66:A2:66:15:EE:9A:F1:CD
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F43285844E66FE84FBFA8080679B9EB80
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/d1bdfb51-2031-3064-93dc-6e806e45dfc1.roa
Signing time:             Thu 15 Feb 2024 14:00:30 +0000
ROA not before:           Thu 15 Feb 2024 14:00:30 +0000
ROA not after:            Wed 15 May 2024 13:00:30 +0000
asID:                     206216
IP address blocks:        45.61.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e6:6f:e8:4f:bf:a8:08:06:79:b9:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Feb 15 14:00:30 2024 GMT
            Not After : May 15 13:00:30 2024 GMT
        Subject: CN=47b76f98-5ff2-42af-9ec8-49edb712ed65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:95:ad:a1:b3:12:07:af:3f:d9:f5:28:a2:29:
                    01:b1:5f:33:a1:d5:e7:3a:f6:50:4f:01:3e:ec:98:
                    5b:7b:62:98:dc:1a:a1:d3:5f:23:c3:aa:7b:33:cd:
                    19:20:30:b0:f5:73:e8:94:e0:e4:c4:e5:43:1d:0f:
                    05:21:64:40:f1:3a:99:73:4a:8a:6a:19:f7:d9:e2:
                    e6:20:de:2c:86:96:12:a1:d1:5e:f6:07:cc:97:0e:
                    71:95:96:21:7c:ff:7a:a4:44:5c:d5:05:8b:ec:ee:
                    db:cd:de:5a:76:c2:86:49:a1:16:c7:f5:4c:39:e0:
                    17:c4:ca:c8:f9:d4:06:7e:96:33:b6:49:56:fd:9e:
                    72:2b:59:1d:02:4f:2f:f0:6f:50:0f:81:a8:ee:4b:
                    9f:b3:56:a7:ed:27:6b:d7:dd:fb:9b:65:25:7f:14:
                    95:80:5d:c0:e9:48:ee:54:65:8b:73:79:4c:49:0e:
                    ce:da:c0:59:6b:84:98:72:b3:fe:4c:5d:bb:ea:d0:
                    c1:18:bf:36:15:17:18:68:21:30:bf:0f:14:3c:10:
                    b2:a8:83:ab:82:4e:ba:ca:6d:00:7d:14:25:40:ff:
                    3f:30:fc:c5:df:b6:47:15:75:20:d2:2a:b2:5e:60:
                    23:60:7c:a5:2e:ce:e3:4e:cc:45:ee:71:71:ef:bc:
                    5b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5C:27:E3:F4:7F:74:D8:D3:8B:A1:E3:66:A2:66:15:EE:9A:F1:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/d1bdfb51-2031-3064-93dc-6e806e45dfc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:7e:84:46:1b:f6:62:f9:49:ca:04:4f:83:aa:dc:b1:6b:52:
         5d:a7:7c:6a:05:d7:71:22:14:39:41:8a:b1:48:d2:5c:49:d0:
         90:e2:5a:67:f4:d5:72:52:95:f8:9e:d2:17:77:38:13:21:ba:
         6d:2f:5e:62:1c:6e:7b:82:6e:47:27:5d:b6:1d:a7:83:97:57:
         8f:e5:d0:0f:8a:1e:24:a1:2a:00:f0:57:0a:cb:dc:1b:b7:ce:
         5e:e9:ac:32:43:97:0d:12:4b:ba:5b:fd:17:c6:53:78:56:99:
         85:98:16:53:f7:14:cb:c9:af:eb:c8:32:8f:3c:12:8e:55:d1:
         bf:fb:6e:61:aa:90:76:38:bd:9e:e5:62:0c:dd:cd:ed:0c:9a:
         3b:54:d5:80:23:42:d7:4f:5f:41:dc:cf:a4:70:08:34:5b:45:
         7f:b0:7d:fa:ae:d9:02:33:33:d7:8c:fe:29:90:a4:d6:35:e6:
         29:f0:64:4f:fd:52:ef:12:c0:34:7c:2c:b3:7a:a4:7d:f2:e6:
         7f:fc:09:79:24:32:c9:a9:0f:ca:65:f2:2c:7c:73:e4:cf:d9:
         ee:66:d2:67:ce:5e:b4:06:80:36:d9:3f:58:51:88:25:65:36:
         27:90:be:3b:40:51:04:fb:37:a5:56:ff:77:5d:bb:7e:31:4e:
         ca:03:de:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:27:46 2024 by rpki-client on console-ams.rpki-client.org