Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/3611f798-9a1f-36bf-90a3-e2b14476974e.roa
File:                     3611f798-9a1f-36bf-90a3-e2b14476974e.roa (raw, json)
Hash identifier:          paS5q/Emkb5mIIk30Urg5+QcK/YrKAoJStAuqP672RU=
Subject key identifier:   D6:69:16:23:FC:91:B9:D6:3D:C8:65:BD:9E:BA:84:F5:89:F8:CC:9C
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584ACE0B8F01D18C14F9C5C8F930
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/3611f798-9a1f-36bf-90a3-e2b14476974e.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     399820
IP address blocks:        45.61.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:8f:01:d1:8c:14:f9:c5:c8:f9:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=9eb15478-df85-4c69-8b81-79e5578a463b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:83:ad:ac:b3:88:46:f2:d6:91:bb:55:38:51:
                    bd:02:93:10:ec:ce:8e:1a:e6:5d:89:0a:c2:38:bb:
                    b2:4e:d6:46:38:4c:c9:de:2b:1e:fa:d7:bf:84:7c:
                    62:57:a7:ee:c4:11:4d:0c:46:c9:0d:2a:d3:09:36:
                    0e:84:d2:e5:79:43:02:88:32:25:36:25:0d:1c:d1:
                    7e:15:ff:64:54:2b:c1:a5:b5:05:be:5b:6e:4b:54:
                    2b:85:2b:9f:41:ca:61:da:ad:0f:8f:ed:b9:db:31:
                    73:c1:a7:3e:f8:d6:cd:2a:47:0b:85:51:f1:ff:c1:
                    26:d2:05:8c:0e:fd:24:b0:83:98:2d:bf:bf:1f:3e:
                    f0:7e:89:eb:53:e0:98:23:48:6c:e5:93:e0:ed:fb:
                    92:72:5b:b3:a9:59:c5:e7:6b:ec:86:68:4e:ea:ae:
                    cf:f2:59:82:c6:24:53:53:5d:4c:ed:c8:d5:b1:27:
                    a1:92:6e:94:94:e4:52:78:5c:3c:df:11:87:21:46:
                    fe:12:f5:14:db:c2:55:a9:ad:fa:38:f5:fb:77:0c:
                    ce:6b:08:97:6e:5e:ad:ce:00:20:46:8d:6f:fe:75:
                    b6:90:74:28:e2:2a:c1:52:10:34:26:20:93:8b:47:
                    2d:46:5b:3e:cb:ff:49:c6:d6:ee:7c:e5:ab:ee:de:
                    ed:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:69:16:23:FC:91:B9:D6:3D:C8:65:BD:9E:BA:84:F5:89:F8:CC:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/3611f798-9a1f-36bf-90a3-e2b14476974e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:bb:fa:a1:c7:c9:01:ee:86:fd:da:b9:83:db:8c:f0:5b:83:
         a7:a3:c7:ce:28:43:9f:9e:2e:e6:21:ac:21:f2:8d:81:95:ee:
         dc:fe:d4:12:42:cd:19:47:59:2f:b5:78:ac:31:40:d8:55:b6:
         66:42:d1:0f:f9:4a:b7:2f:28:27:83:e7:64:06:f7:1c:84:cf:
         02:2e:15:62:50:61:0f:34:d5:c9:45:f9:ce:2f:89:8d:3a:1a:
         b9:10:2d:f1:da:a1:c3:1b:ec:fd:6d:77:c6:30:b0:8a:22:2e:
         d8:ba:0b:c8:40:d6:2f:95:85:84:34:cb:ae:54:ed:01:59:d2:
         08:84:0f:53:04:0f:91:4a:28:59:c5:10:2a:5e:c4:02:56:20:
         04:34:0f:06:1f:11:52:d5:f9:6c:ff:d7:56:2e:f8:85:10:04:
         c0:e3:9e:1c:79:99:9c:8c:cf:5e:67:92:fa:a2:a9:bf:02:d2:
         9d:e6:b9:df:73:86:ce:5a:5b:3d:2e:d2:0a:ba:cb:aa:56:27:
         d0:56:2f:96:27:2d:e5:54:5c:76:9f:68:06:3f:48:90:84:b4:
         91:de:d2:b0:0d:9c:6e:8c:4c:95:2b:45:d2:ce:e9:d3:dd:e9:
         c8:4e:a5:2f:57:69:6e:49:0c:a3:b1:9a:82:d3:6b:fa:00:c9:
         d8:f5:6b:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC48B0YwU+cXI+TAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOThjYjUwNTgtMDFhZC00NWJmLTljMTUtNDUzZjQxMGJi
OWQ3MB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk
OWViMTU0NzgtZGY4NS00YzY5LThiODEtNzllNTU3OGE0NjNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4OtrLOIRvLWkbtVOFG9ApMQ7M6OGuZdiQrC
OLuyTtZGOEzJ3ise+te/hHxiV6fuxBFNDEbJDSrTCTYOhNLleUMCiDIlNiUNHNF+
Ff9kVCvBpbUFvltuS1QrhSufQcph2q0Pj+252zFzwac++NbNKkcLhVHx/8Em0gWM
Dv0ksIOYLb+/Hz7wfonrU+CYI0hs5ZPg7fuScluzqVnF52vshmhO6q7P8lmCxiRT
U11M7cjVsSehkm6UlORSeFw83xGHIUb+EvUU28JVqa36OPX7dwzOawiXbl6tzgAg
Ro1v/nW2kHQo4irBUhA0JiCTi0ctRls+y/9JxtbufOWr7t7t7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNZpFiP8kbnWPchlvZ66hPWJ+MycMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OGNi
NTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNmNDEwYmI5ZDcvMzYxMWY3OTgtOWExZi0z
NmJmLTkwYTMtZTJiMTQ0NzY5NzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOThjYjUwNTgtMDFhZC00NWJmLTlj
MTUtNDUzZjQxMGJiOWQ3Lzk4Y2I1MDU4LTAxYWQtNDViZi05YzE1LTQ1M2Y0MTBi
YjlkNy5jcmwwHwYDVR0jBBgwFoAUgs6ENpgBbErCBlI/wMU9V+EIADkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85OGNiNTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNm
NDEwYmI5ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALT2qMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ+7+qHHyQHuhv3auYPbjPBbg6ejx84oQ5+eLuYhrCHyjYGV7tz+1BJC
zRlHWS+1eKwxQNhVtmZC0Q/5SrcvKCeD52QG9xyEzwIuFWJQYQ801clF+c4viY06
GrkQLfHaocMb7P1td8YwsIoiLti6C8hA1i+VhYQ0y65U7QFZ0giED1MED5FKKFnF
ECpexAJWIAQ0DwYfEVLV+Wz/11Yu+IUQBMDjnhx5mZyMz15nkvqiqb8C0p3mud9z
hs5aWz0u0gq6y6pWJ9BWL5YnLeVUXHafaAY/SJCEtJHe0rANnG6MTJUrRdLO6dPd
6chOpS9XaW5JDKOxmoLTa/oAydj1axk=
-----END CERTIFICATE-----
Generated at Sun Aug 24 07:39:18 2025 by rpki-client