Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/d37a060a-b448-33f8-8d25-0a8249caa97f.roa
File:                     d37a060a-b448-33f8-8d25-0a8249caa97f.roa (raw, json)
Hash identifier:          ynEV+roVUF0jhHIBaqHVbiotdYMl5K2Mv09W7mGFsYI=
Subject key identifier:   1B:70:AF:54:EE:4C:4E:66:BD:99:E2:94:9B:A6:88:5F:0C:B7:74:0B
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584EA79BFB3944C4A08739F24980
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/d37a060a-b448-33f8-8d25-0a8249caa97f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     53667
IP address blocks:        45.61.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:fb:39:44:c4:a0:87:39:f2:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6a7c3ba7-f56b-47b4-8ade-ce4d0dfd6a1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:79:fe:88:96:37:98:db:cd:5f:43:9a:9c:f4:
                    bc:9d:0d:36:4a:7e:2a:38:9b:86:3b:49:ee:d7:b8:
                    0d:ff:cb:72:3f:1a:c1:4c:71:18:2e:08:c2:6c:d9:
                    73:d7:42:44:89:72:b9:b6:b5:80:e7:98:5b:cd:be:
                    fb:84:49:59:e3:fa:2e:c4:cf:f2:ee:46:6c:e2:e3:
                    f4:8d:0d:9e:79:37:fe:48:bb:5d:db:0a:8f:d4:66:
                    b1:8e:89:e8:28:03:ff:f3:ed:c0:9f:57:e2:25:61:
                    c5:86:fd:df:aa:a4:0b:4d:0c:c1:6a:94:61:5d:4b:
                    c7:45:0f:05:29:44:49:e7:52:60:c2:a0:e6:c5:f6:
                    eb:17:9d:2a:db:a2:40:77:0a:24:c2:86:ed:29:ab:
                    ea:f1:1d:e7:7d:0c:b7:50:6b:22:c4:43:c6:c8:f2:
                    42:9f:c1:2e:8b:d1:11:c5:31:16:4e:9e:e3:c0:3b:
                    ba:1b:62:9e:9f:0a:26:89:81:d6:c8:5a:2f:e2:a1:
                    11:9d:d6:e3:29:97:9e:05:9e:94:a0:5b:75:72:93:
                    2e:00:f7:6f:3d:45:90:31:d2:a5:b4:a7:5b:46:b6:
                    19:73:37:8b:84:9e:4b:3f:5c:db:9b:6b:10:c7:1d:
                    94:ee:fd:ad:b2:64:13:27:6d:2c:81:22:b7:23:3f:
                    03:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:70:AF:54:EE:4C:4E:66:BD:99:E2:94:9B:A6:88:5F:0C:B7:74:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/d37a060a-b448-33f8-8d25-0a8249caa97f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:5b:64:1d:d7:03:46:1d:e1:89:56:b7:d2:74:c7:1c:42:d6:
         b6:26:b6:9a:53:bd:62:42:07:40:37:d9:75:33:f5:f4:1e:d0:
         61:f5:80:ff:0c:3d:bd:30:cf:ce:68:ee:45:2a:aa:95:a3:fb:
         98:9e:29:99:e5:52:85:21:0b:99:c5:e2:ae:ec:1b:04:b3:bb:
         d6:60:76:66:22:16:7d:73:47:e9:36:a3:d1:d2:41:98:ce:38:
         54:bb:a9:40:0a:8f:d9:96:ff:bd:3c:64:b1:ab:74:95:71:48:
         93:db:cf:b1:19:bd:c2:70:82:50:48:36:68:37:68:93:30:84:
         c4:a5:43:b0:d5:cc:bf:3d:3b:df:ad:33:51:12:67:77:90:51:
         e0:6d:9a:46:1d:b5:a8:91:32:38:95:41:39:4e:02:5d:74:8e:
         88:91:4f:cf:51:24:9e:a6:43:f1:2f:6f:73:5b:a2:71:d6:75:
         5f:fb:1b:6a:cb:36:fd:f0:8d:0f:a3:12:03:0c:79:9e:11:eb:
         4c:cb:d0:36:93:69:36:9f:c0:1f:4f:3f:fe:6f:20:80:14:c0:
         55:3c:7f:6d:8e:1e:bb:74:78:56:f0:de:a6:97:98:99:e1:ca:
         9e:fb:f8:8e:21:03:70:b2:bc:c2:6c:22:a2:01:1f:78:36:97:
         14:28:97:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm/s5RMSghznySYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOThjYjUwNTgtMDFhZC00NWJmLTljMTUtNDUzZjQxMGJi
OWQ3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NmE3YzNiYTctZjU2Yi00N2I0LThhZGUtY2U0ZDBkZmQ2YTFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXn+iJY3mNvNX0OanPS8nQ02Sn4qOJuGO0nu
17gN/8tyPxrBTHEYLgjCbNlz10JEiXK5trWA55hbzb77hElZ4/ouxM/y7kZs4uP0
jQ2eeTf+SLtd2wqP1GaxjonoKAP/8+3An1fiJWHFhv3fqqQLTQzBapRhXUvHRQ8F
KURJ51JgwqDmxfbrF50q26JAdwokwobtKavq8R3nfQy3UGsixEPGyPJCn8Eui9ER
xTEWTp7jwDu6G2KenwomiYHWyFov4qERndbjKZeeBZ6UoFt1cpMuAPdvPUWQMdKl
tKdbRrYZczeLhJ5LP1zbm2sQxx2U7v2tsmQTJ20sgSK3Iz8DUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBtwr1TuTE5mvZnilJumiF8Mt3QLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OGNi
NTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNmNDEwYmI5ZDcvZDM3YTA2MGEtYjQ0OC0z
M2Y4LThkMjUtMGE4MjQ5Y2FhOTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOThjYjUwNTgtMDFhZC00NWJmLTlj
MTUtNDUzZjQxMGJiOWQ3Lzk4Y2I1MDU4LTAxYWQtNDViZi05YzE1LTQ1M2Y0MTBi
YjlkNy5jcmwwHwYDVR0jBBgwFoAUgs6ENpgBbErCBlI/wMU9V+EIADkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85OGNiNTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNm
NDEwYmI5ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALT2mMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHpbZB3XA0Yd4YlWt9J0xxxC1rYmtppTvWJCB0A32XUz9fQe0GH1gP8M
Pb0wz85o7kUqqpWj+5ieKZnlUoUhC5nF4q7sGwSzu9ZgdmYiFn1zR+k2o9HSQZjO
OFS7qUAKj9mW/708ZLGrdJVxSJPbz7EZvcJwglBINmg3aJMwhMSlQ7DVzL89O9+t
M1ESZ3eQUeBtmkYdtaiRMjiVQTlOAl10joiRT89RJJ6mQ/Evb3NbonHWdV/7G2rL
Nv3wjQ+jEgMMeZ4R60zL0DaTaTafwB9PP/5vIIAUwFU8f22OHrt0eFbw3qaXmJnh
yp77+I4hA3CyvMJsIqIBH3g2lxQol0A=
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:13:10 2026 by rpki-client