Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/12faeaf6-43fc-36d3-95aa-3a8ef06f12ce.roa
File:                     12faeaf6-43fc-36d3-95aa-3a8ef06f12ce.roa (raw, json)
Hash identifier:          WF+V9ECaKvXjtRkAO1qYIPm9y93vdRykbpNWkfWvqMk=
Subject key identifier:   5C:94:4A:F3:87:A2:79:57:B2:BC:0F:69:F0:89:B5:67:75:48:86:4B
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584BBB75803FAB533C5726DC0880
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/12faeaf6-43fc-36d3-95aa-3a8ef06f12ce.roa
Signing time:             Mon 03 Nov 2025 02:00:31 +0000
ROA not before:           Mon 03 Nov 2025 02:00:31 +0000
ROA not after:            Sun 01 Feb 2026 02:00:31 +0000
asID:                     211350
IP address blocks:        45.61.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bb:75:80:3f:ab:53:3c:57:26:dc:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Nov  3 02:00:31 2025 GMT
            Not After : Feb  1 02:00:31 2026 GMT
        Subject: CN=edd7f14d-12ce-4aaf-9d34-89a2b3e72b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:62:f4:f9:22:77:4f:74:37:59:2e:a3:d6:97:
                    2e:2b:0d:a7:9d:48:51:32:d4:1d:38:bf:34:65:4e:
                    20:70:78:52:ea:a4:89:b2:3c:ab:ae:6b:61:8a:23:
                    d4:15:f4:2d:6d:29:3d:37:d3:8e:28:34:57:6a:c9:
                    e7:f0:d4:f2:f0:4f:a1:41:ba:3a:08:e6:34:f0:1c:
                    3f:51:8f:7d:06:a1:1f:26:dd:2e:59:bb:31:70:39:
                    77:d1:bb:e4:60:a5:b8:31:de:09:31:a8:4d:68:cb:
                    f4:20:1e:39:58:55:ef:2b:12:81:69:89:2d:d4:d6:
                    ac:5a:62:e6:9b:73:38:82:fa:37:c3:eb:ef:53:bf:
                    d0:6d:a9:cd:ea:b7:63:6a:64:21:90:5a:cb:5f:dc:
                    99:88:46:28:c4:d4:ea:eb:61:2b:fd:49:ee:a7:15:
                    3c:ee:e1:c1:9a:ec:b7:bb:30:e8:ee:9f:ca:7a:3d:
                    67:1f:8e:bd:a7:e5:9d:b7:3c:af:ac:71:c0:c8:86:
                    1d:cc:52:ca:5a:d3:e5:01:f3:ad:46:8b:40:07:8c:
                    37:46:0e:28:18:91:f3:2c:6b:6a:33:83:68:78:c2:
                    a7:4b:62:f1:47:1a:d5:f9:c4:5a:22:fb:8e:d1:59:
                    33:40:17:2d:bb:d7:79:a6:2a:dc:d4:d2:6c:4f:be:
                    51:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:94:4A:F3:87:A2:79:57:B2:BC:0F:69:F0:89:B5:67:75:48:86:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/12faeaf6-43fc-36d3-95aa-3a8ef06f12ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:51:5c:e1:b4:88:64:d5:50:c2:55:a7:54:9d:d4:cd:f4:4c:
         f1:27:7b:6a:cb:2a:97:dd:47:9c:86:09:11:3f:24:b9:89:66:
         34:08:13:60:49:4d:6c:92:39:22:53:3f:a0:7c:a6:14:56:58:
         13:54:01:31:f5:0f:35:f4:91:84:9c:ca:37:f7:cf:f9:1a:08:
         4e:e0:6a:95:b8:97:5a:f3:2d:76:42:d8:35:30:e7:4c:9e:ed:
         2d:42:dd:3f:17:ba:2a:d9:ef:e1:ef:3f:76:f3:ec:3e:34:3d:
         16:a9:f7:20:34:d0:62:6a:78:70:d0:cd:d4:77:19:69:01:b1:
         3a:d8:4d:be:39:73:e2:04:10:26:fd:11:97:cc:48:c4:10:04:
         59:e0:66:f3:35:a4:81:30:76:c1:dd:d8:f8:13:18:5d:f8:08:
         16:08:bf:59:66:d9:be:8f:ca:8c:da:59:09:71:a3:f3:a4:8c:
         96:96:03:e5:72:bb:0c:15:7c:ef:9c:4b:39:b8:84:d8:94:f8:
         1c:3a:6a:ff:2a:cc:2e:ec:38:20:a8:9e:7b:95:d5:d9:c8:af:
         d7:51:16:46:c9:d5:94:97:50:4f:81:09:77:1a:97:bc:74:24:
         45:99:c6:a8:6c:c1:b7:d8:ce:f5:8b:71:12:cd:64:6d:13:05:
         44:2b:65:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:52:42 2025 by rpki-client