Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/a7819acd-c509-352a-ae27-2ad8a5652c4a.roa
File:                     a7819acd-c509-352a-ae27-2ad8a5652c4a.roa (raw, json)
Hash identifier:          dt62OQv2R3gCGEOc7GemSJs0VAposdYBXpPWRBaWfxU=
Subject key identifier:   CF:B2:03:B5:D2:78:1C:DB:7C:A2:19:03:E2:D2:B2:AD:F1:6E:E9:04
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584A8B0B54142B362EBF1624BC80
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/a7819acd-c509-352a-ae27-2ad8a5652c4a.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     61003
IP address blocks:        45.61.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:54:14:2b:36:2e:bf:16:24:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=b9a5b732-1c95-4595-8509-ae0fd4a8740f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:40:96:3c:54:78:b6:e7:91:cc:68:0f:82:5f:
                    2b:6e:a7:2a:0c:b8:88:07:b1:6a:03:72:28:04:be:
                    ea:10:a3:29:44:28:b6:a3:5f:65:88:1c:7a:38:c2:
                    0d:35:8a:a9:c3:7c:13:ac:af:d7:02:c5:67:27:16:
                    d5:a4:71:dd:6b:35:fe:72:98:95:87:f6:52:a7:f5:
                    bd:ea:bf:65:78:d1:6a:37:55:43:ff:cc:c7:c4:d0:
                    8c:44:7a:cd:d0:82:a5:dc:89:87:8f:87:f0:8a:4f:
                    9f:21:e9:1c:ce:f7:01:75:e4:2c:ea:0a:c4:d4:40:
                    88:29:e6:08:fc:b9:82:e3:bc:e9:b3:d0:c8:da:1f:
                    3a:ce:40:0f:72:c9:e6:1e:3d:97:6a:45:c4:a0:5c:
                    87:cd:bf:c1:80:d2:99:96:41:16:11:da:ff:81:45:
                    1e:ff:f6:76:64:72:2d:e0:40:1a:0c:b5:40:41:42:
                    a8:39:6d:42:53:20:23:f5:36:d2:3b:37:27:14:fa:
                    6c:0b:19:f6:bc:7f:6d:15:54:2f:96:b2:65:b8:32:
                    62:7b:a1:16:23:9a:b8:4c:10:2f:0f:6d:78:72:ef:
                    c3:bf:2d:48:c3:b0:c7:fc:a0:68:83:67:be:42:ff:
                    73:b1:c0:51:2a:6c:f0:2d:75:0a:d6:13:02:e8:aa:
                    72:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B2:03:B5:D2:78:1C:DB:7C:A2:19:03:E2:D2:B2:AD:F1:6E:E9:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/a7819acd-c509-352a-ae27-2ad8a5652c4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:a1:32:39:f0:1c:4f:d2:42:c7:98:e1:0d:ba:bc:30:a9:5e:
         5e:28:d4:61:34:d4:75:09:09:72:b6:b7:1e:28:36:e7:56:0e:
         e6:2f:d7:86:e1:d6:10:d9:7b:c0:ce:49:e9:6b:16:8c:ac:1a:
         dc:0b:00:12:c5:39:a0:49:b0:e6:fa:ac:bd:20:8e:a1:5a:c3:
         e7:92:8f:8e:9e:f6:24:74:4c:d1:50:2a:a5:46:70:d3:14:70:
         1f:a0:9c:fb:e2:db:d5:77:63:8f:27:86:a3:df:76:2b:5e:10:
         9b:a1:4f:35:d4:c8:47:99:4f:d7:64:fc:05:f2:12:05:6d:9e:
         66:17:2e:01:82:32:da:2e:06:7c:57:f2:fc:8c:84:86:4f:b7:
         4c:ec:2e:d0:e9:00:c8:8f:e2:78:be:c1:43:5e:60:f7:0d:31:
         96:d6:38:99:69:9b:f1:fc:7f:65:e7:29:47:b1:ef:80:b7:5f:
         e4:0d:84:2c:72:03:60:4a:62:eb:d9:5d:16:fd:19:b0:35:ef:
         84:9c:e8:88:c0:1c:e4:56:cb:11:2a:cb:e1:18:d5:77:2d:c9:
         4f:d3:37:2d:71:f7:b1:73:0f:e7:99:08:19:1f:90:a9:bf:a1:
         5c:80:26:55:b0:a9:c5:e1:e0:56:fb:80:60:f1:e7:be:98:bf:
         9a:34:3c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:17:03 2025 by rpki-client