Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/3fb414dd-1c0d-35f5-85d2-f198fe94f1b1.roa
File:                     3fb414dd-1c0d-35f5-85d2-f198fe94f1b1.roa (raw, json)
Hash identifier:          tu/js0H1LldhGwj6FliA+zEig28lbjAj8MYQTQflyCw=
Subject key identifier:   08:97:98:97:4D:B2:59:00:48:28:93:2A:EE:64:89:F5:58:21:D3:A4
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F43285849C20A1FB45BD32959A2615700
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/3fb414dd-1c0d-35f5-85d2-f198fe94f1b1.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     14956
IP address blocks:        45.61.142.0/24 maxlen: 24
                          45.61.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:1f:b4:5b:d3:29:59:a2:61:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=55fa4c8f-64c3-4b3d-bbed-27800a38f118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e8:34:ff:c3:88:2b:d6:2d:8b:65:2f:36:6c:
                    b4:7d:ea:cc:f3:f4:db:0b:9f:f9:57:ec:e9:4d:a8:
                    9c:16:3c:7f:2f:ed:94:bc:60:7f:b0:0b:15:df:8c:
                    e3:25:fd:87:71:78:28:96:2b:95:2a:af:4d:1c:4e:
                    f9:88:f1:0f:65:de:e0:a9:ab:e0:31:d3:d9:3b:d7:
                    59:41:98:3a:42:8d:c5:4a:02:e6:35:1a:3e:8a:2d:
                    69:d1:5f:5d:31:9d:5f:70:58:c3:4b:41:50:7d:50:
                    23:e1:4e:8a:29:d8:38:b9:82:9a:2d:79:f3:2e:22:
                    7d:6b:5a:59:4b:2e:4d:dd:1e:2a:61:69:6c:91:36:
                    0a:46:e6:e1:0b:75:82:4e:d3:30:27:9e:89:80:45:
                    14:6c:77:13:08:79:b6:90:c3:60:85:fd:73:b1:ef:
                    28:ab:bb:25:8d:90:02:ab:ee:7e:33:78:f3:a3:85:
                    e1:22:bc:d8:c3:19:6c:42:0d:d8:18:f2:bf:9b:6e:
                    a5:f1:00:c9:e4:06:3e:96:91:1c:3f:fc:0f:48:b4:
                    e6:8a:ed:9b:d9:b2:e8:0e:b1:58:4e:a3:af:53:98:
                    b0:36:70:43:0d:4a:9d:6b:f6:64:20:19:a4:3d:1e:
                    57:8d:37:8f:15:d1:61:ca:37:d7:68:73:d0:a6:cf:
                    35:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:97:98:97:4D:B2:59:00:48:28:93:2A:EE:64:89:F5:58:21:D3:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/3fb414dd-1c0d-35f5-85d2-f198fe94f1b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.142.0/24
                  45.61.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:ef:2a:0f:66:3a:a3:43:0d:d7:1e:c7:1d:c5:30:e9:e5:9e:
         60:58:4d:47:f3:af:31:3c:3c:ae:c6:13:0b:98:3e:9f:99:41:
         27:90:5f:91:0c:f3:bf:79:54:57:01:dc:96:c5:83:76:80:21:
         51:70:85:8b:68:19:1c:5f:b0:e1:ba:fa:f4:ce:c1:71:1e:16:
         5f:42:38:a9:b9:2d:c7:f2:ea:d9:e5:b6:2f:a8:81:9b:85:13:
         e0:11:12:55:e4:01:76:8d:6a:7b:7c:79:13:42:8e:8d:87:f5:
         06:b0:52:6f:29:0a:3b:18:42:85:64:97:31:3f:2f:3f:90:b5:
         86:cf:59:5e:01:29:4e:c8:27:18:ff:b1:06:4b:1e:c7:95:90:
         68:b6:ad:83:a3:8c:fb:12:c7:52:ab:59:fb:5c:a2:10:09:58:
         f7:a9:38:56:5a:56:d2:75:60:f9:38:40:a6:0b:54:57:29:d5:
         ff:57:13:a9:d0:30:f5:e6:b2:55:50:ce:f3:9f:24:27:b1:6b:
         17:4a:0b:b9:51:3b:5f:bc:8f:55:3a:b5:24:10:e6:5f:fb:be:
         62:00:e7:fb:c6:37:11:9a:42:fa:37:74:f2:fe:87:1e:27:13:
         bb:07:ac:5e:47:df:86:b2:aa:18:cb:d2:b1:5d:59:fa:14:e5:
         83:a2:ec:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 13:08:22 2025 by rpki-client