Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/7abfca27-f5dc-3782-b5ae-ec83eb3b0640.roa
File:                     7abfca27-f5dc-3782-b5ae-ec83eb3b0640.roa (raw, json)
Hash identifier:          O4Q19jl5oaYvlCIGNc8s2nW1o0DTI5N1Nbo5i8IKvQE=
Subject key identifier:   38:1E:5D:A8:4B:7D:D0:AE:2C:92:65:3F:56:BE:08:B3:EE:B0:B6:BE
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F43285849ED4FC21EBEF0C4A665D90FC0
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/7abfca27-f5dc-3782-b5ae-ec83eb3b0640.roa
Signing time:             Wed 21 May 2025 13:01:04 +0000
ROA not before:           Wed 21 May 2025 13:01:04 +0000
ROA not after:            Tue 19 Aug 2025 13:01:04 +0000
asID:                     63023
IP address blocks:        45.61.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:4f:c2:1e:be:f0:c4:a6:65:d9:0f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: May 21 13:01:04 2025 GMT
            Not After : Aug 19 13:01:04 2025 GMT
        Subject: CN=dc62f9d7-75c3-40a0-9dd0-5bde924fc1b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:39:f7:0a:47:b6:6d:ec:22:ff:c8:85:c3:e3:
                    df:97:73:4f:f8:48:be:fb:8e:4e:8e:29:36:d7:62:
                    ed:e5:f8:1a:4e:27:71:d5:d2:2f:09:9a:d2:dd:28:
                    33:3c:75:1d:bf:94:d3:71:68:b1:19:ba:ba:14:c7:
                    93:d8:d0:43:65:17:ed:30:6d:91:c7:9f:2d:2d:c3:
                    92:1b:ab:08:ff:3a:ad:a6:f1:c5:d0:75:5d:13:ec:
                    88:9c:9c:02:d9:a4:07:4a:57:ed:b1:b7:c7:87:b0:
                    97:38:6a:fa:60:3d:85:31:08:8e:e7:b0:a4:7d:2e:
                    58:cc:9b:a8:11:19:a2:df:94:a3:84:09:c1:38:32:
                    88:82:dc:d0:24:f3:0f:72:52:56:99:71:42:f2:15:
                    0b:df:e0:8c:e0:1d:c0:bb:41:55:be:0b:f1:2d:be:
                    f5:67:7b:5f:46:86:88:69:09:18:7f:f8:c2:8c:40:
                    29:0d:63:de:2e:c0:61:d0:2c:b8:ac:e9:25:dc:84:
                    ea:e7:68:df:24:fb:c0:de:8a:c1:bb:c1:7d:d5:f3:
                    c0:9f:d7:b3:eb:43:e0:e0:f4:87:2f:ae:8a:76:7d:
                    2e:02:31:66:a6:bc:53:9d:70:cd:ad:cd:13:05:f0:
                    8d:60:0a:46:35:c0:42:d7:43:9b:50:ce:67:cb:9c:
                    94:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:1E:5D:A8:4B:7D:D0:AE:2C:92:65:3F:56:BE:08:B3:EE:B0:B6:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/7abfca27-f5dc-3782-b5ae-ec83eb3b0640.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:34:4d:a6:84:4b:10:7a:bd:47:1a:85:0b:e0:ef:96:57:9f:
         e4:e1:bf:0f:54:5c:de:37:21:19:81:2a:a4:f3:56:df:2c:60:
         c0:e5:b8:1b:6d:fc:72:ee:1f:98:37:03:7e:4d:3b:45:91:c3:
         17:ac:a5:a8:ac:2b:dc:48:ed:6e:0e:08:26:a4:f9:48:f9:bc:
         ef:14:44:1a:64:0f:4e:46:ef:21:d8:52:7e:95:de:2b:20:f4:
         ec:09:09:13:78:4d:a4:bb:50:5f:6b:17:2e:43:fe:65:5b:60:
         bd:2e:b9:ba:dc:c7:69:81:d3:00:1e:59:a7:b7:70:a7:f1:61:
         de:3d:30:75:0c:a6:b7:49:24:3a:4e:73:40:66:40:8f:3e:5b:
         b8:31:5e:0c:88:aa:3a:b7:82:c8:cd:1d:5b:f5:32:ed:11:4c:
         c5:f3:73:65:2d:5f:64:87:d3:f4:b7:5c:1c:66:67:a8:04:aa:
         c2:3e:ee:d7:89:5e:ba:78:ee:16:eb:d1:37:7d:7c:9f:16:b4:
         ae:d3:9b:41:26:c4:45:2d:0b:37:15:3a:04:f7:dc:94:62:4b:
         a2:a6:be:ba:2d:5b:a3:c0:ba:43:36:19:02:22:70:dc:96:81:
         a0:07:f0:39:b3:3a:d1:aa:f8:db:7c:66:cb:c5:50:5f:df:52:
         43:27:6d:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntT8IevvDEpmXZD8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOThjYjUwNTgtMDFhZC00NWJmLTljMTUtNDUzZjQxMGJi
OWQ3MB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk
ZGM2MmY5ZDctNzVjMy00MGEwLTlkZDAtNWJkZTkyNGZjMWI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDn3Cke2bewi/8iFw+Pfl3NP+Ei++45Ojik2
12Lt5fgaTidx1dIvCZrS3SgzPHUdv5TTcWixGbq6FMeT2NBDZRftMG2Rx58tLcOS
G6sI/zqtpvHF0HVdE+yInJwC2aQHSlftsbfHh7CXOGr6YD2FMQiO57CkfS5YzJuo
ERmi35SjhAnBODKIgtzQJPMPclJWmXFC8hUL3+CM4B3Au0FVvgvxLb71Z3tfRoaI
aQkYf/jCjEApDWPeLsBh0Cy4rOkl3ITq52jfJPvA3orBu8F91fPAn9ez60Pg4PSH
L66Kdn0uAjFmprxTnXDNrc0TBfCNYApGNcBC10ObUM5ny5yUqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDgeXahLfdCuLJJlP1a+CLPusLa+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OGNi
NTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNmNDEwYmI5ZDcvN2FiZmNhMjctZjVkYy0z
NzgyLWI1YWUtZWM4M2ViM2IwNjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOThjYjUwNTgtMDFhZC00NWJmLTlj
MTUtNDUzZjQxMGJiOWQ3Lzk4Y2I1MDU4LTAxYWQtNDViZi05YzE1LTQ1M2Y0MTBi
YjlkNy5jcmwwHwYDVR0jBBgwFoAUgs6ENpgBbErCBlI/wMU9V+EIADkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85OGNiNTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNm
NDEwYmI5ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALT2kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKQ0TaaESxB6vUcahQvg75ZXn+Thvw9UXN43IRmBKqTzVt8sYMDluBtt
/HLuH5g3A35NO0WRwxespaisK9xI7W4OCCak+Uj5vO8URBpkD05G7yHYUn6V3isg
9OwJCRN4TaS7UF9rFy5D/mVbYL0uubrcx2mB0wAeWae3cKfxYd49MHUMprdJJDpO
c0BmQI8+W7gxXgyIqjq3gsjNHVv1Mu0RTMXzc2UtX2SH0/S3XBxmZ6gEqsI+7teJ
Xrp47hbr0Td9fJ8WtK7Tm0EmxEUtCzcVOgT33JRiS6KmvrotW6PAukM2GQIicNyW
gaAH8DmzOtGq+Nt8ZsvFUF/fUkMnbbg=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:26:41 2025 by rpki-client