Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/292ff941-8199-3c57-a8fe-0cb33d7d45a2.roa
File:                     292ff941-8199-3c57-a8fe-0cb33d7d45a2.roa (raw, json)
Hash identifier:          9KOhxupFhFi5Vhq2Hxp7tdMdKZbUpUDxlGfuDuyh7jc=
Subject key identifier:   78:DD:FD:2B:A8:F6:96:71:53:DF:EA:F7:02:6B:9E:B0:C8:7F:4A:60
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584AC2E0DE13490088B56F554E00
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/292ff941-8199-3c57-a8fe-0cb33d7d45a2.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     398395
IP address blocks:        45.61.143.0/24 maxlen: 24
                          144.172.66.0/24 maxlen: 24
                          144.172.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:de:13:49:00:88:b5:6f:55:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=b788498c-bdcf-443e-9b07-3f3db1d7932d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:37:73:92:d6:54:b1:b9:5f:6f:d5:81:b3:12:
                    53:70:89:67:b6:b6:c8:20:fc:65:ad:b2:48:f0:7e:
                    dc:f9:a7:64:08:bc:a3:24:ce:12:47:2e:6c:8b:0f:
                    05:ac:44:e1:3a:6f:f2:f0:1a:0d:e3:ad:bf:16:c1:
                    39:84:e9:f2:02:5b:c9:43:9f:37:70:3e:bc:94:0c:
                    16:5f:77:4d:97:85:7c:34:0f:24:35:90:cd:bc:11:
                    d4:ae:94:5c:26:a8:3f:f9:6e:cc:03:ba:92:3b:46:
                    45:15:2a:fd:06:72:ad:06:75:af:41:b7:f1:2e:d0:
                    b1:26:7d:f0:4a:0b:ab:8e:ec:6b:71:ff:04:83:5e:
                    3b:86:83:45:5f:05:c9:c8:ac:a6:23:e3:1d:91:37:
                    62:c2:64:52:fa:42:7e:e8:24:77:4f:06:0e:5b:d1:
                    26:1f:43:46:4a:13:ba:26:3c:45:54:42:eb:36:2f:
                    b9:3b:24:f0:6f:24:c7:5b:14:24:1c:73:6b:3b:58:
                    c6:7c:ff:99:5c:e9:1b:2b:66:d6:e2:f1:55:b6:54:
                    1e:b3:85:24:88:1e:e8:0c:68:3c:3c:1c:d7:cc:80:
                    c7:86:e9:e0:57:cc:69:51:53:86:29:23:77:c0:a6:
                    06:5a:1f:62:59:5e:5d:74:4f:e0:fc:ba:e2:2c:ed:
                    98:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:DD:FD:2B:A8:F6:96:71:53:DF:EA:F7:02:6B:9E:B0:C8:7F:4A:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/292ff941-8199-3c57-a8fe-0cb33d7d45a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.143.0/24
                  144.172.66.0/24
                  144.172.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:cf:f7:2e:b8:e0:98:12:bb:81:67:d8:b8:b1:fd:74:81:80:
         7b:c7:c7:43:d3:db:07:a0:04:57:9d:76:df:9e:4f:60:84:12:
         79:91:ed:3c:28:f3:45:13:e0:64:b1:5a:78:bb:cd:03:41:94:
         eb:d4:b1:07:e0:dc:64:53:ae:fd:c0:b4:78:18:83:1c:3e:3b:
         c8:bc:a3:a5:d5:d5:12:f8:13:19:de:f6:a6:cf:ab:40:a2:a1:
         df:62:6b:d5:33:94:c5:ae:12:7e:35:fe:1d:54:6a:d1:07:6c:
         ec:70:65:13:11:6c:16:ea:71:a0:6c:ed:31:dd:fc:63:be:c4:
         5b:d4:66:a6:39:2e:2a:ee:9d:cb:43:8e:6c:ae:23:52:75:e4:
         c6:18:12:e1:40:e2:f1:ee:69:3f:65:8f:ad:58:e6:00:f3:f5:
         45:43:62:b7:60:ce:00:0d:96:1d:bd:91:e6:a4:96:46:33:8e:
         96:73:12:e5:64:14:ff:c0:0e:3b:e9:88:ad:01:5f:62:42:f8:
         c1:7f:75:d1:5c:b8:47:c7:9a:c6:00:33:9f:64:ce:b3:72:cb:
         c8:58:97:b9:7b:10:a2:13:f8:18:fc:61:18:fb:f1:1c:9c:26:
         04:db:34:41:63:29:5e:0d:53:59:38:ff:06:8a:27:ad:4d:5f:
         5a:56:69:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:11:31 2025 by rpki-client