Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/8959dc14-7a41-3d06-81d6-b3529df6dcef.roa
File:                     8959dc14-7a41-3d06-81d6-b3529df6dcef.roa (raw, json)
Hash identifier:          Sc0G1FdUKHf+42bsSA09XD2ix/3tB9XJ6bAJfK63468=
Subject key identifier:   CB:E1:E0:96:6A:8A:27:90:FB:53:85:C5:51:03:0D:C7:63:A7:81:D2
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584EA0152B771DDBD4C306E19A00
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/8959dc14-7a41-3d06-81d6-b3529df6dcef.roa
Signing time:             Sun 26 Jul 2026 09:00:12 +0000
ROA not before:           Sun 26 Jul 2026 09:00:12 +0000
ROA not after:            Sat 24 Oct 2026 09:00:12 +0000
asID:                     52041
IP address blocks:        45.61.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a0:15:2b:77:1d:db:d4:c3:06:e1:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Jul 26 09:00:12 2026 GMT
            Not After : Oct 24 09:00:12 2026 GMT
        Subject: CN=97533809-1e3c-4d27-86c1-f412b819ac1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:43:47:f0:35:17:41:29:fb:8b:8d:4a:22:2a:
                    89:be:26:4b:79:c4:b0:ce:d8:4c:67:0f:4d:df:36:
                    b5:44:e7:d0:36:02:e0:75:0b:3d:09:5b:cc:79:c6:
                    c6:36:20:13:59:32:b9:8b:ea:f9:13:c8:40:e9:a2:
                    fe:c1:03:31:b2:c5:aa:42:f0:52:bc:78:ad:56:2e:
                    b8:59:79:57:99:18:b5:54:e3:b2:cf:47:97:e7:eb:
                    a2:93:e9:27:ad:74:33:70:a0:5c:76:ce:5f:1a:23:
                    30:cd:14:2c:52:8b:79:c8:0e:a9:3f:02:c0:a1:51:
                    c2:e7:6c:f4:6b:98:77:70:f1:1a:67:e1:c1:27:5c:
                    77:19:47:a8:fa:bb:99:41:1c:49:94:9b:8d:59:ac:
                    82:5c:c9:7c:cb:33:d5:20:c5:bd:4b:7a:69:da:6f:
                    05:48:e0:5f:7f:71:30:89:4f:32:bd:39:e6:66:c9:
                    c1:83:59:48:3f:06:67:a2:13:b3:e2:98:88:4b:8a:
                    67:5f:b9:ac:22:ef:64:15:92:58:ec:13:e4:1a:c3:
                    18:29:b4:86:e9:e8:54:21:ee:39:10:94:77:4f:3f:
                    33:49:45:a0:c9:a5:e2:03:1f:6e:95:20:4e:53:49:
                    c7:24:1d:c4:41:b2:5e:ae:39:47:a8:a7:6a:71:ae:
                    31:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E1:E0:96:6A:8A:27:90:FB:53:85:C5:51:03:0D:C7:63:A7:81:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/8959dc14-7a41-3d06-81d6-b3529df6dcef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:1e:2b:7c:4f:a0:e3:5a:ca:2a:56:df:f8:38:6b:7c:18:fd:
         63:17:f3:0b:0a:54:e7:67:c4:eb:6a:44:49:4c:8d:60:67:97:
         b9:61:89:8f:79:ab:77:bb:a7:96:52:6c:62:30:c8:1b:54:a6:
         e7:1e:41:23:35:cb:ee:c1:88:37:8c:be:13:60:ad:a7:3d:5d:
         8e:96:e9:45:39:64:aa:03:01:83:4c:5d:38:fe:ec:92:16:d5:
         2b:d5:63:20:c8:6d:51:36:ac:50:0b:c4:9a:54:fb:bf:7c:29:
         ac:90:38:7b:02:87:42:74:8e:6a:b3:f7:c5:50:92:ff:63:e8:
         0a:10:44:a8:b3:ef:81:31:21:95:74:73:f9:41:19:9b:a7:34:
         08:c8:3a:0f:67:85:11:dc:59:a3:41:69:79:28:50:9b:f7:f2:
         6f:20:bc:a3:91:3e:ac:fb:c3:b6:f6:99:53:ab:5a:04:8c:63:
         de:de:74:af:0b:e7:d3:2d:1a:66:f1:bf:c2:1f:e4:11:a1:6b:
         d9:01:b2:20:b2:9f:57:1a:f3:0e:5d:c3:62:a6:96:d2:b5:c7:
         b0:9d:f0:2e:1d:4b:d4:2a:7b:7e:6c:89:3d:1f:15:58:ca:03:
         59:0e:2b:ef:61:b7:dd:ae:3a:2b:d6:f6:26:48:33:6f:f3:63:
         bd:e2:23:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:54:37 2026 by rpki-client