Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/3fc5a483-4b3c-33da-bb25-1678712f0fc1.roa
File:                     3fc5a483-4b3c-33da-bb25-1678712f0fc1.roa (raw, json)
Hash identifier:          PCyb+EiK19AOFqnlY5ImFNLsaJ4YhG3LaqHXFUqFG3w=
Subject key identifier:   F5:BF:A9:68:C7:AC:C9:1B:47:C0:6D:75:AC:C8:87:A9:83:94:A6:3E
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584B3AEC3C821DD1E654DF523AC0
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/3fc5a483-4b3c-33da-bb25-1678712f0fc1.roa
Signing time:             Thu 18 Sep 2025 01:00:32 +0000
ROA not before:           Thu 18 Sep 2025 01:00:32 +0000
ROA not after:            Wed 17 Dec 2025 02:00:32 +0000
asID:                     53667
IP address blocks:        45.61.184.0/22 maxlen: 24
                          45.61.188.0/24 maxlen: 24
                          45.61.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3a:ec:3c:82:1d:d1:e6:54:df:52:3a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Sep 18 01:00:32 2025 GMT
            Not After : Dec 17 02:00:32 2025 GMT
        Subject: CN=2b083816-825c-4ec4-8355-4f0af445134a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f9:54:e7:74:2d:21:88:48:e6:34:74:cf:8b:
                    57:bd:56:17:07:41:3c:24:b2:37:e7:2a:c5:b9:95:
                    ef:54:b3:b6:d4:f6:4d:45:30:dc:7e:d0:13:08:33:
                    3c:f5:a5:61:54:d1:5c:b8:31:0f:d0:4e:80:37:ac:
                    58:e6:55:97:60:54:f1:64:d2:9a:54:e0:0e:ba:94:
                    74:83:a1:58:8f:01:76:e9:81:33:53:ee:b3:91:99:
                    d1:6a:a4:92:eb:02:5f:07:f3:36:c1:b7:0b:2d:49:
                    d2:eb:c4:1b:46:ec:51:e3:bd:88:69:19:4d:98:83:
                    f1:94:ce:2a:99:15:3c:5a:17:92:c3:21:5a:eb:d5:
                    bf:62:8e:c1:fd:51:6a:f3:80:27:1f:84:b2:74:49:
                    dd:d5:01:e3:df:e7:e2:8f:d9:df:8a:c0:7a:e5:c2:
                    52:58:e1:03:50:97:91:3f:9c:58:35:b3:71:72:fc:
                    ec:2a:26:84:12:7b:b0:11:49:c5:2d:cc:04:99:b0:
                    a9:dd:68:cf:cf:04:88:10:f0:84:53:f8:a2:2b:52:
                    3e:b4:13:12:02:58:33:c3:1b:cb:13:b6:30:1c:e7:
                    e4:c9:10:d6:04:1f:9e:0f:39:0b:7a:2d:75:07:ab:
                    1b:f0:88:bd:7c:fd:e7:80:f9:17:a5:83:03:e2:fb:
                    75:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:BF:A9:68:C7:AC:C9:1B:47:C0:6D:75:AC:C8:87:A9:83:94:A6:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/3fc5a483-4b3c-33da-bb25-1678712f0fc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.184.0-45.61.188.255
                  45.61.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:b0:03:eb:e8:9f:1e:bf:ce:b0:ef:80:2d:7f:83:d6:b6:47:
         0a:c6:68:31:5b:4a:59:aa:aa:c1:ac:a8:ea:a0:c2:17:0f:9c:
         18:59:a3:59:bf:56:10:39:88:66:21:ec:7e:fa:7f:9f:86:5f:
         29:b3:40:81:76:b5:82:e2:3f:e5:2e:13:75:cf:04:87:f9:e7:
         ce:7f:1d:c2:f4:3f:f3:e5:2a:51:b7:c6:bb:fc:bd:b5:db:5a:
         92:a3:e2:b9:14:3f:96:9b:0b:c7:f1:3b:38:bc:29:42:d5:5c:
         8f:50:56:0b:3b:0a:84:0e:ef:d9:38:aa:fc:9f:6a:2d:c2:bb:
         72:48:61:4a:d2:01:c0:58:1c:10:40:50:d5:4b:fc:87:35:7b:
         a4:1c:d2:59:8b:bb:c8:19:5d:ae:44:93:ce:18:83:a0:b1:0a:
         89:f1:c2:02:98:95:2f:08:c5:93:d1:9a:fb:25:89:93:87:31:
         6a:22:2f:c2:ba:80:9e:7e:db:95:03:2d:c1:38:75:25:1d:58:
         4f:5d:8b:5f:b7:7b:19:51:99:8b:0a:58:bf:ff:e2:76:fd:d4:
         25:53:81:35:30:30:ef:50:c5:70:17:8f:88:8a:48:01:05:55:
         6d:17:98:f5:7f:80:cb:b3:ad:d7:57:76:f5:26:a1:81:03:89:
         8f:6b:9f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:15:05 2025 by rpki-client