Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/8302b886-d780-30f6-9ddf-7d0667ecd296.roa
File:                     8302b886-d780-30f6-9ddf-7d0667ecd296.roa (raw, json)
Hash identifier:          Rr+T+AsThd36yxLil8fvG/UHzZfkMuifwdQ5tmdru9c=
Subject key identifier:   90:2E:49:47:6D:D3:15:92:03:6E:B9:A7:BC:4D:0E:FB:22:4D:13:48
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F43285849F2E545774C275B910902E660
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/8302b886-d780-30f6-9ddf-7d0667ecd296.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     14956
IP address blocks:        45.61.132.0/24 maxlen: 24
                          45.61.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:45:77:4c:27:5b:91:09:02:e6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=5023923e-0998-419d-8ec7-2227b8296c6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cd:25:4f:f7:89:c1:db:87:d7:ca:51:6e:7e:
                    76:5c:22:9c:45:68:08:c4:ca:43:46:91:91:41:85:
                    0f:5c:ad:97:77:eb:f1:b6:c4:6f:3d:e8:8a:97:34:
                    f9:b0:5a:50:97:b6:1f:07:52:93:70:1c:d6:53:30:
                    99:51:fd:e1:03:bc:70:b4:2a:a6:9b:d5:60:ad:a2:
                    64:69:6c:b5:54:44:29:8e:6c:b3:1e:85:45:fe:c3:
                    54:a3:66:18:22:59:1d:d6:bc:18:dd:1b:07:ad:94:
                    9b:7b:70:8d:b9:3f:90:15:5f:1b:31:90:03:02:e5:
                    f1:2b:84:69:e7:60:7e:5d:9e:60:62:dc:f7:2a:f7:
                    c4:31:53:a9:b2:ed:60:29:05:86:55:8d:45:9a:6a:
                    67:7c:01:0e:ef:fc:4d:51:09:1d:ad:77:5a:6d:0e:
                    41:e0:3b:3b:b0:c3:86:76:cf:16:5f:b7:11:68:65:
                    7f:85:87:ff:4e:f3:de:52:f3:09:f2:17:33:ce:e5:
                    a9:c2:36:d1:8e:bc:10:b1:bd:96:ac:8e:be:3b:cb:
                    4d:77:c9:76:8a:91:ad:b0:7d:2c:ab:4f:18:ef:6d:
                    c6:98:4b:d1:f4:cb:f3:c7:5f:f5:f3:f7:86:56:8f:
                    96:ca:01:fe:5b:a6:71:93:38:b0:8c:b9:8b:91:b9:
                    94:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:2E:49:47:6D:D3:15:92:03:6E:B9:A7:BC:4D:0E:FB:22:4D:13:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/8302b886-d780-30f6-9ddf-7d0667ecd296.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:72:a9:2f:9d:f4:4c:f0:43:8f:7b:c5:26:ba:5f:5b:97:07:
         c2:9d:48:d1:73:94:25:d3:79:37:8b:d3:56:9c:bc:48:b0:88:
         0f:a5:ec:87:f5:f8:1a:e5:1f:0d:43:d9:75:30:ca:b2:a2:c6:
         51:84:f4:4c:82:e0:86:8a:28:8a:e7:7e:c6:33:f0:c5:16:02:
         c4:5c:57:0f:bb:31:26:c5:9a:b0:6a:b6:04:01:c6:da:7e:2c:
         ff:09:fa:d5:f8:0e:a9:6a:41:03:df:aa:28:99:b3:aa:22:c6:
         03:81:a6:49:09:3e:89:08:a2:28:33:50:97:9c:55:2a:8d:49:
         d4:a4:90:7a:c3:55:a3:db:1b:ef:f1:80:ba:83:7c:6d:bf:09:
         24:a2:38:dd:6b:e0:3b:a9:71:44:e0:d5:08:d2:e6:89:43:d0:
         da:cc:00:53:e0:91:4a:ec:ef:40:c6:19:d3:a8:4c:42:52:04:
         bc:e3:b6:a9:9c:4d:4d:ff:45:49:e2:00:09:39:ed:82:9a:6f:
         d4:be:b5:d6:41:ca:c2:a4:e8:8b:82:e2:77:71:f3:1f:cf:ef:
         16:82:8b:2a:4d:4c:03:d6:bc:26:0b:22:1e:3b:78:b0:25:60:
         5a:c1:8a:bf:1d:79:d9:6e:d1:9f:f9:37:8c:64:aa:21:67:3c:
         ea:a6:a1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:44:18 2025 by rpki-client