Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/12faeaf6-43fc-36d3-95aa-3a8ef06f12ce.roa
File:                     12faeaf6-43fc-36d3-95aa-3a8ef06f12ce.roa (raw, json)
Hash identifier:          TcPulKzJjDkf4Sf8m0YghMDYvj6GiOkEbf05++vTd40=
Subject key identifier:   9A:E1:78:C1:2A:59:3E:14:9B:A3:92:AE:A7:4A:76:4D:B9:8A:B7:58
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584ADA9BB613438FFD980B5F0500
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/12faeaf6-43fc-36d3-95aa-3a8ef06f12ce.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     211350
IP address blocks:        45.61.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:b6:13:43:8f:fd:98:0b:5f:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=7b5af0e6-f30e-4162-b485-9cb8a65ba5ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4a:dd:a5:f7:a2:ca:56:75:95:9b:76:61:97:
                    cc:26:c1:0a:15:4e:69:b3:9a:ea:6b:de:51:6c:bb:
                    c6:0b:fe:fb:c8:f9:33:61:fc:39:6a:bc:62:57:ff:
                    c2:51:91:af:2b:d1:ee:3f:d8:51:d8:15:e5:75:ee:
                    d6:54:d7:9b:de:9a:ff:c3:0b:75:dd:c7:9d:b4:24:
                    59:44:55:fb:4a:ac:62:eb:b2:79:87:1b:8c:85:32:
                    71:02:73:5e:07:b4:61:98:1b:b1:4f:c0:0f:bc:79:
                    9b:b1:fb:53:70:2b:86:f6:5c:73:73:49:43:5a:1c:
                    66:46:26:2b:ee:83:fc:04:bc:09:54:29:52:3b:32:
                    3d:be:1f:bc:b8:68:cf:29:ae:08:22:ad:37:89:7f:
                    7d:f8:91:93:f9:6e:40:b7:8d:2f:c9:39:70:49:81:
                    88:0c:f8:83:4d:19:87:4f:c4:67:f1:62:42:41:d8:
                    7a:0a:68:fc:e0:f1:71:cf:28:fc:23:25:97:3d:e2:
                    21:98:5d:87:e4:67:b1:bb:cc:c0:ea:2b:7a:1e:8f:
                    c4:f2:6b:cd:90:d4:c2:de:d1:27:66:cb:85:59:6d:
                    7d:d9:d0:dc:be:38:36:f1:2a:a2:d0:97:d7:94:03:
                    a3:03:22:9a:8e:3e:ce:37:e0:0a:3c:ce:20:7d:b6:
                    ad:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E1:78:C1:2A:59:3E:14:9B:A3:92:AE:A7:4A:76:4D:B9:8A:B7:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/12faeaf6-43fc-36d3-95aa-3a8ef06f12ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:22:63:ba:1b:43:e8:06:5d:a4:14:4e:da:74:05:0c:ba:bb:
         6d:80:7e:d1:4c:45:fd:13:e3:7f:c5:94:a6:9c:47:50:d7:8c:
         be:6e:04:6d:c2:c0:39:77:45:0c:f4:52:7e:b2:67:3e:1e:6d:
         2c:c4:6f:6b:4b:b0:dd:8e:da:0e:cd:9a:45:27:c4:e0:8f:6d:
         0e:f4:d4:90:14:df:32:50:bb:c5:62:c9:cc:7d:51:f5:5e:d7:
         ae:ad:ab:5b:ca:85:99:fd:e9:8d:51:3f:d0:86:69:b4:a9:61:
         32:97:0f:9a:72:05:73:4a:8c:82:f9:34:4a:bd:ad:c3:95:9a:
         8e:78:ba:ef:7d:a3:b7:73:67:e8:6a:24:f2:2f:4a:5e:cc:17:
         eb:65:15:76:24:16:8c:21:d6:00:7c:6a:85:30:fb:db:17:9a:
         55:e7:3c:da:7c:fc:c6:f1:44:da:9b:19:31:48:07:73:35:f3:
         6d:e3:ff:4b:d9:4d:14:79:b7:0a:08:13:77:e4:41:97:83:35:
         f3:8d:f0:e0:ee:65:be:90:ae:4e:97:1f:38:45:96:0b:dd:b8:
         fe:1c:fe:e9:d0:cd:a5:20:84:fc:62:5b:c9:72:06:77:27:76:
         99:30:c9:86:57:6d:3f:db:5c:f6:12:66:0d:01:25:74:27:48:
         2b:14:11:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:14:15 2025 by rpki-client