Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/6bb15422-1e97-32d9-a74b-ac2509c2b1c7.roa
File:                     6bb15422-1e97-32d9-a74b-ac2509c2b1c7.roa (raw, json)
Hash identifier:          Pw1TyRAfm5pgxgOIJKoNiFHu/2BVI9d53mCICt/fVrM=
Subject key identifier:   16:37:93:77:69:62:31:07:12:61:02:C3:E8:A2:EC:AB:9E:13:92:2A
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F43285849F17FAF83EE864690CB3B3540
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/6bb15422-1e97-32d9-a74b-ac2509c2b1c7.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     399629
IP address blocks:        45.61.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:af:83:ee:86:46:90:cb:3b:35:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=fc1824cf-3c39-481d-9431-59f2e742955e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:23:49:52:0d:08:1a:3c:11:da:5b:7b:c6:b4:
                    e4:3c:81:85:f2:e0:81:24:d7:d6:7a:e3:f3:b9:c0:
                    bb:32:ba:0a:91:80:68:67:65:c8:b8:d0:f3:d3:4c:
                    a7:9e:5c:37:2d:8e:b1:e2:53:79:8d:58:eb:0a:af:
                    22:02:44:be:f7:fb:32:21:10:21:31:1c:69:79:48:
                    10:45:bb:da:24:c2:89:c1:90:bd:6f:65:69:3f:d2:
                    a3:2f:d8:92:7b:ee:00:a5:31:1d:3b:81:72:6d:cc:
                    cd:d6:9e:4a:42:4b:56:10:f9:4f:77:36:d6:d5:ac:
                    e9:d3:5e:66:7b:e4:90:d8:34:e2:ce:09:27:22:cb:
                    db:c1:6e:5a:f9:7d:dc:c6:53:af:ce:84:73:31:63:
                    4b:40:54:94:7f:17:86:33:04:5b:90:82:c1:93:09:
                    5d:79:47:50:ce:63:7d:eb:6c:59:52:e6:eb:87:fa:
                    6f:ca:c4:08:5e:a8:ae:7a:88:c7:46:43:a6:72:3f:
                    6e:13:bb:f3:98:89:c4:7e:7a:9e:21:82:9a:74:02:
                    c8:94:3a:ff:ba:df:a3:fe:1c:ca:87:b5:ff:98:4a:
                    5a:b5:38:68:d1:be:31:ae:6b:5e:54:3c:c4:de:1b:
                    75:36:89:84:4d:32:cf:98:01:b5:fd:bb:5b:f7:49:
                    8f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:37:93:77:69:62:31:07:12:61:02:C3:E8:A2:EC:AB:9E:13:92:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/6bb15422-1e97-32d9-a74b-ac2509c2b1c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:f2:c1:f8:2f:30:a9:b8:d6:47:e0:fe:3c:85:cd:ac:c8:66:
         05:4d:f3:98:7f:36:11:27:fa:e4:d4:84:71:11:7e:5d:c5:a1:
         3d:6d:a2:52:5d:e4:ff:3d:3f:01:31:ed:71:3d:43:34:ec:6e:
         22:cb:1b:e8:c7:d9:95:3e:06:fc:4d:ba:8b:cb:91:bf:bb:75:
         2b:3c:65:ed:5c:16:01:ec:ad:63:2b:03:c6:c1:cf:0f:64:4b:
         b6:c6:5e:d2:c8:de:c3:ad:19:30:b7:00:ee:a9:84:31:b3:00:
         a5:69:03:23:53:fc:f2:b7:e3:08:3a:59:fd:de:78:68:26:3e:
         4d:70:ce:5b:be:fe:c7:6f:14:69:53:68:70:d8:0e:26:af:7f:
         1f:87:6e:73:97:e2:d3:81:37:f1:77:23:b5:9a:ea:27:bd:76:
         c6:ea:7c:8e:12:f3:e2:11:88:7c:70:7f:cc:bc:32:43:c5:4e:
         a8:51:ed:bc:e5:f6:a9:23:ea:c5:86:c0:bf:62:3d:96:37:1b:
         af:57:f1:d4:86:cc:9b:96:43:a8:5c:e6:03:89:8d:c2:44:8b:
         fe:50:17:1b:d7:85:88:14:68:d2:31:95:42:6c:d6:47:48:9b:
         e6:63:42:d8:af:f5:ab:d8:34:7c:17:74:42:4a:2f:f3:c1:5a:
         a3:03:bc:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:45:28 2025 by rpki-client