Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/1a91b38a-b933-379e-b99b-857497ab07c9.roa
File:                     1a91b38a-b933-379e-b99b-857497ab07c9.roa (raw, json)
Hash identifier:          oy3OTkyLGIdN6MuFu18RdMmfdiLJOEfHQvOBADJW/UE=
Subject key identifier:   E8:3F:96:8D:5B:61:1C:31:04:A8:C0:AD:A4:9A:88:9D:B8:CE:46:E7
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584AEE268283E86FD4059C963480
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/1a91b38a-b933-379e-b99b-857497ab07c9.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     211266
IP address blocks:        45.61.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:82:83:e8:6f:d4:05:9c:96:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=de174cb7-682a-4497-893d-44a9591b44db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:61:1d:ea:77:21:02:f1:6f:5d:63:4e:27:2e:
                    71:e7:ca:3d:68:17:0e:31:c1:c2:dc:0e:4c:3c:9b:
                    db:17:43:f0:4f:55:00:56:5e:0b:64:2c:19:0a:ef:
                    9c:b3:58:b1:0d:23:a4:c4:e0:93:89:c2:f8:3f:6a:
                    bf:d1:94:20:ee:e9:37:c2:90:47:25:d3:1d:7a:42:
                    81:fd:db:d1:ab:3a:dc:ab:3b:41:bf:d0:15:43:bf:
                    f8:14:04:8a:c5:b9:21:39:b6:0a:41:0a:f4:eb:52:
                    a4:b0:de:37:19:97:95:dd:a4:74:da:c8:42:c3:aa:
                    28:29:5a:de:4d:d0:1d:21:a8:bf:ea:5a:04:71:9b:
                    3e:99:cf:2b:a8:48:09:7b:49:a8:f4:47:8d:43:ae:
                    2c:d9:37:2f:ae:b5:2f:4d:9f:32:32:de:b6:13:f8:
                    8c:81:56:91:bb:0e:77:08:81:94:9a:de:cf:17:c2:
                    95:00:e9:bc:fe:b2:5b:30:80:32:91:4f:2d:eb:67:
                    d6:d8:40:16:41:25:48:75:e6:1f:40:8a:26:ba:cc:
                    73:15:71:2f:11:43:ac:91:12:c2:f3:f2:b2:d8:3e:
                    79:d6:cf:7f:c0:a7:14:2d:de:d9:90:86:04:b6:2d:
                    bc:47:04:29:8d:88:1d:5b:01:e2:83:ae:4e:4c:1f:
                    c0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3F:96:8D:5B:61:1C:31:04:A8:C0:AD:A4:9A:88:9D:B8:CE:46:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/1a91b38a-b933-379e-b99b-857497ab07c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:96:d8:59:42:44:eb:53:d3:ce:a5:73:d4:58:d1:cd:f5:0b:
         b7:80:31:af:ae:99:e7:d0:a2:79:87:23:b9:07:c8:85:b8:c9:
         64:85:3c:87:62:26:c1:b2:07:51:62:0c:81:e1:73:f7:a7:00:
         6e:df:08:be:25:c9:b8:a1:38:33:48:02:f5:aa:03:69:62:9a:
         71:b6:23:69:92:06:e9:36:ad:7f:85:de:00:43:cc:d5:5f:59:
         97:aa:3c:5f:2e:7e:fa:af:38:13:a6:15:92:89:e6:4c:c2:93:
         22:df:cd:c0:93:bc:c3:dd:cd:fc:b2:a2:35:1c:05:f8:6a:d9:
         0d:e5:f6:9a:d0:12:28:ac:23:f3:e0:f5:e1:6d:19:a1:25:8c:
         2f:9a:ca:7f:67:7c:53:0b:b5:e4:d4:40:c6:11:44:e1:b6:d1:
         c3:1a:5c:dd:cb:32:0b:71:4b:c6:80:fe:e4:51:ad:aa:38:bf:
         ff:07:df:a8:b8:db:03:ee:55:cf:bb:61:8e:d6:99:b2:ee:d3:
         c2:16:bd:ba:f5:5c:f7:e2:53:6a:3a:07:a2:70:78:0b:40:fd:
         da:e2:5d:0a:fe:97:1d:c1:44:db:23:e5:32:77:f9:0c:a8:90:
         fe:80:d7:40:58:b1:eb:26:d6:4e:53:84:1c:42:dc:93:66:20:
         1c:bb:e6:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruJoKD6G/UBZyWNIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOThjYjUwNTgtMDFhZC00NWJmLTljMTUtNDUzZjQxMGJi
OWQ3MB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk
ZGUxNzRjYjctNjgyYS00NDk3LTg5M2QtNDRhOTU5MWI0NGRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWEd6nchAvFvXWNOJy5x58o9aBcOMcHC3A5M
PJvbF0PwT1UAVl4LZCwZCu+cs1ixDSOkxOCTicL4P2q/0ZQg7uk3wpBHJdMdekKB
/dvRqzrcqztBv9AVQ7/4FASKxbkhObYKQQr061KksN43GZeV3aR02shCw6ooKVre
TdAdIai/6loEcZs+mc8rqEgJe0mo9EeNQ64s2TcvrrUvTZ8yMt62E/iMgVaRuw53
CIGUmt7PF8KVAOm8/rJbMIAykU8t62fW2EAWQSVIdeYfQIomusxzFXEvEUOskRLC
8/Ky2D551s9/wKcULd7ZkIYEti28RwQpjYgdWwHig65OTB/A4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOg/lo1bYRwxBKjAraSaiJ24zkbnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OGNi
NTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNmNDEwYmI5ZDcvMWE5MWIzOGEtYjkzMy0z
NzllLWI5OWItODU3NDk3YWIwN2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOThjYjUwNTgtMDFhZC00NWJmLTlj
MTUtNDUzZjQxMGJiOWQ3Lzk4Y2I1MDU4LTAxYWQtNDViZi05YzE1LTQ1M2Y0MTBi
YjlkNy5jcmwwHwYDVR0jBBgwFoAUgs6ENpgBbErCBlI/wMU9V+EIADkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85OGNiNTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNm
NDEwYmI5ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALT2gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACaW2FlCROtT086lc9RY0c31C7eAMa+umefQonmHI7kHyIW4yWSFPIdi
JsGyB1FiDIHhc/enAG7fCL4lybihODNIAvWqA2limnG2I2mSBuk2rX+F3gBDzNVf
WZeqPF8ufvqvOBOmFZKJ5kzCkyLfzcCTvMPdzfyyojUcBfhq2Q3l9prQEiisI/Pg
9eFtGaEljC+ayn9nfFMLteTUQMYRROG20cMaXN3LMgtxS8aA/uRRrao4v/8H36i4
2wPuVc+7YY7WmbLu08IWvbr1XPfiU2o6B6JweAtA/driXQr+lx3BRNsj5TJ3+Qyo
kP6A10BYsesm1k5ThBxC3JNmIBy75ik=
-----END CERTIFICATE-----
Generated at Sun Aug 24 01:20:50 2025 by rpki-client