Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/da8ca663-257b-37f4-be08-9c507fbc3d03.roa
File:                     da8ca663-257b-37f4-be08-9c507fbc3d03.roa (raw, json)
Hash identifier:          KRru5C7DEX0yGyJ2LfVEvkt3tFpXaUaO8+MibF7MwAQ=
Subject key identifier:   CB:82:39:47:7A:E8:06:D7:6E:12:A8:0B:76:3E:5B:09:C9:80:D4:85
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F43285849ED4FC924E62164609900DF00
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/da8ca663-257b-37f4-be08-9c507fbc3d03.roa
Signing time:             Wed 21 May 2025 13:01:04 +0000
ROA not before:           Wed 21 May 2025 13:01:04 +0000
ROA not after:            Tue 19 Aug 2025 13:01:04 +0000
asID:                     142111
IP address blocks:        45.61.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:4f:c9:24:e6:21:64:60:99:00:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: May 21 13:01:04 2025 GMT
            Not After : Aug 19 13:01:04 2025 GMT
        Subject: CN=a23d5ecc-fdbb-4704-8bc6-f77e97c7a4bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5d:07:54:1a:82:51:6a:a6:5b:34:5a:c2:f9:
                    ff:8d:d7:47:0d:48:06:bc:01:f4:23:17:b3:82:f2:
                    e0:9d:79:85:e7:53:c2:0d:ca:75:74:8d:85:08:18:
                    ea:b2:80:95:23:85:94:73:a5:36:3b:dc:44:49:17:
                    fb:50:4e:77:7c:46:1c:a3:3c:06:a9:ca:00:42:a9:
                    0f:4b:9b:65:53:74:0b:af:74:85:94:0d:89:4d:4f:
                    e1:33:2c:95:b1:0a:ec:14:db:0a:a7:b7:89:51:a4:
                    b5:5a:8c:8f:10:1e:f7:a3:d2:68:be:55:8d:bc:05:
                    f1:a0:30:c2:b6:17:31:65:cb:51:e7:9c:cb:40:1b:
                    be:d9:e9:ad:db:c8:36:07:28:a0:43:1d:92:60:7b:
                    0d:62:a8:0f:2f:d5:42:26:9a:36:62:53:e7:9b:ed:
                    34:7c:bd:53:3f:a8:9b:41:e5:90:4f:cb:8f:86:94:
                    f8:71:b2:22:ae:ff:9d:a1:45:1a:98:d8:37:1a:bd:
                    eb:fb:1e:9e:22:df:14:8d:f0:24:99:5a:94:a9:ad:
                    69:4d:77:15:8f:67:21:89:a6:4b:c9:52:81:66:f0:
                    9b:42:f9:a3:51:1b:0e:d3:c1:09:55:a0:f0:3c:a5:
                    f0:87:ef:97:ab:87:72:53:ca:5e:b3:7f:ce:9d:23:
                    da:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:82:39:47:7A:E8:06:D7:6E:12:A8:0B:76:3E:5B:09:C9:80:D4:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/da8ca663-257b-37f4-be08-9c507fbc3d03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:35:bd:2b:2c:7e:40:b6:4c:3d:de:7f:c5:a8:dc:d1:53:eb:
         bd:8c:23:e1:46:d4:99:b0:6c:54:a3:e4:80:20:94:fa:96:ed:
         7d:23:5a:36:ea:03:f3:46:ce:e5:59:5b:00:91:45:c5:3a:96:
         97:91:e7:0d:93:5a:8b:29:cc:37:c0:39:cd:e1:10:bb:a6:14:
         e3:6b:55:37:50:31:30:18:88:b8:12:26:6f:6a:6e:d3:8c:1f:
         4d:2e:b2:e2:93:7c:14:c3:10:60:4f:15:f5:e2:97:04:35:d4:
         6e:b0:53:ac:9c:e7:46:8b:81:0e:68:d1:25:ea:e7:8f:1f:8b:
         46:be:55:b7:a2:5c:57:eb:3e:14:1f:35:5e:b1:94:6f:a3:ee:
         ce:03:5d:4d:03:4b:0e:de:a1:34:6d:99:c1:43:dd:44:84:36:
         2c:f2:2e:fa:9b:d3:4c:e4:39:86:88:1a:ea:3e:d9:0c:9a:76:
         ac:5e:74:5c:6e:ab:4e:6c:4f:4e:39:04:23:4d:6b:e1:ee:21:
         ef:63:5a:39:e0:d7:af:59:a0:52:eb:0b:f7:3d:ee:74:e5:71:
         f4:e8:fb:5b:fe:05:c1:9c:b7:20:75:1e:30:cf:a0:9a:0a:e0:
         12:52:26:b9:aa:5d:2c:aa:1c:75:3c:0c:fc:95:b2:9f:2c:52:
         93:11:cd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:25:06 2025 by rpki-client