Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/d37a060a-b448-33f8-8d25-0a8249caa97f.roa
File:                     d37a060a-b448-33f8-8d25-0a8249caa97f.roa (raw, json)
Hash identifier:          87ittdNDJhijql9zA2FECTOzo6uTqfrkzUj/eobxYrc=
Subject key identifier:   E5:F6:1B:1B:D4:15:B5:00:9F:EE:EA:70:D6:1B:FF:84:6A:E0:DF:8B
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584A8146450FCFF2AD4CE367FC20
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/d37a060a-b448-33f8-8d25-0a8249caa97f.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     53667
IP address blocks:        45.61.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:45:0f:cf:f2:ad:4c:e3:67:fc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=fd393368-22bb-445b-aedf-96ca53116eeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fb:4e:cd:88:0b:31:3c:63:2b:68:da:7e:2c:
                    d8:91:2f:4c:95:17:c4:1e:9a:4e:87:28:83:9f:3f:
                    55:9d:d7:09:0f:1d:b3:6d:1f:d1:a2:84:24:cb:cb:
                    5e:96:0f:1c:d9:fd:17:5a:41:64:12:58:e5:7e:40:
                    c2:df:69:66:14:28:74:6f:f9:78:42:6e:ec:b9:df:
                    6a:bc:7f:0f:53:fe:50:1e:b3:26:6f:ce:99:5e:eb:
                    61:e5:df:a2:17:20:f4:76:70:0a:d2:00:51:d7:a0:
                    9b:a4:68:3a:62:6a:47:e7:6c:50:83:42:5f:b7:92:
                    00:73:ab:86:7e:f7:7e:df:a7:0b:b0:4e:4f:42:13:
                    1d:02:c5:fc:74:42:4c:63:97:f3:05:21:fe:57:14:
                    c4:b8:28:d3:10:74:d2:08:25:fb:41:71:84:84:e2:
                    38:c1:69:e9:f8:3e:1e:2e:9c:86:d8:06:ff:5b:4d:
                    c0:79:22:d2:9a:1b:eb:ef:86:cb:25:38:9c:90:af:
                    78:3e:3b:0a:ec:59:ea:e1:4f:3d:a7:e1:0a:54:c5:
                    7b:1d:ca:88:72:ed:47:0e:76:f9:a5:c1:c2:f2:cd:
                    72:04:33:38:17:d6:c3:9e:f2:dc:45:22:11:95:1e:
                    dc:a5:c3:f0:ca:9f:79:4a:65:72:52:46:b6:f5:c5:
                    51:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F6:1B:1B:D4:15:B5:00:9F:EE:EA:70:D6:1B:FF:84:6A:E0:DF:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/d37a060a-b448-33f8-8d25-0a8249caa97f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:e6:ed:35:04:20:7b:f9:7b:6b:73:06:0c:45:4f:e4:98:7f:
         01:27:91:9f:61:9b:12:a4:b1:e2:36:eb:2d:cd:4a:ac:48:b2:
         8a:ec:0f:ba:4c:11:41:35:fe:2e:0d:77:bb:a5:f0:2c:c8:94:
         81:52:4d:b4:e7:ab:cc:53:24:91:5e:54:c3:ea:e3:a8:26:11:
         d7:d2:2e:3f:27:2d:5e:f6:0c:d6:80:60:f6:21:c2:ac:94:2f:
         b3:0d:db:6e:07:49:a2:e1:63:f9:12:3e:65:34:5e:b9:0b:00:
         81:fc:18:fe:1f:1b:8c:64:32:01:4d:82:72:5a:81:c7:d5:c5:
         1e:64:5d:23:90:c5:aa:5c:f7:3c:a1:88:45:fa:08:49:4e:ea:
         37:8c:27:8e:61:fd:3c:e9:01:e7:12:c9:45:da:18:07:de:15:
         6b:6c:59:e3:48:0c:d2:13:5d:2b:60:9f:9c:5a:61:0e:2a:34:
         0a:aa:62:34:e9:14:50:19:ff:ce:ed:b3:55:d8:c6:31:3f:74:
         5d:22:c1:24:ce:20:7d:67:9f:26:c6:90:5a:e4:59:d4:c8:2d:
         7a:1b:6e:58:b6:60:f9:dd:04:94:d4:c3:91:b9:a3:06:5a:db:
         9f:31:48:89:5d:6d:f1:dc:24:e5:b2:23:43:16:92:4a:7c:ae:
         07:84:e7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:14:00 2025 by rpki-client