Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/4f1db5c3-6c0a-362f-a834-5e66e3d1bc91.roa
File:                     4f1db5c3-6c0a-362f-a834-5e66e3d1bc91.roa (raw, json)
Hash identifier:          JsQMME9gZ6RPoF9DBUcWQ7QKX+pBv+7k29EMyxFkroo=
Subject key identifier:   96:36:51:C2:65:53:8D:0F:70:0A:06:74:F5:1E:BA:71:5C:C9:55:EB
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584E66DA3A3676F0FCBAB5FB5040
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/4f1db5c3-6c0a-362f-a834-5e66e3d1bc91.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     14956
IP address blocks:        45.61.163.0/24 maxlen: 24
                          45.61.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:3a:36:76:f0:fc:ba:b5:fb:50:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=84def2e8-294d-4aa5-9964-34cdd7cdea27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:08:2e:36:53:ae:f8:0a:c2:33:1a:0b:3a:12:
                    44:3c:ea:dc:0a:6b:5b:be:42:a1:2f:93:55:a6:5b:
                    f7:82:a1:12:02:61:40:15:d6:6f:b2:1c:83:41:14:
                    98:10:9e:eb:09:6a:7c:7a:da:62:7f:c1:13:44:37:
                    12:e7:71:5c:4f:cd:22:7d:40:f0:cf:71:7b:10:df:
                    a6:bc:a6:9c:3b:b1:35:ac:17:89:8a:ad:80:bd:ae:
                    e7:b3:20:dd:5b:02:b9:6c:c8:67:96:32:12:b7:d3:
                    54:f5:80:32:f5:ed:1b:22:0c:9f:2e:c8:51:f1:91:
                    01:bd:97:d2:74:74:c1:d0:7c:18:88:d3:95:f3:3b:
                    63:89:44:97:7c:13:29:ac:89:e5:05:d5:62:97:a4:
                    6b:91:1b:3b:dd:3d:f6:4b:f1:0f:e8:f3:bb:4e:ee:
                    64:ff:60:67:e3:1a:03:ef:64:9c:64:83:3e:8a:dd:
                    50:37:6e:e5:e1:59:02:3b:5c:93:9d:32:43:c1:f8:
                    c4:04:82:72:d0:28:3c:de:c2:82:8c:18:ce:6f:5f:
                    10:12:aa:a3:f8:cb:d2:b5:34:2a:a1:8d:57:8f:53:
                    33:0e:a0:8a:3c:9d:07:98:64:30:a2:fe:67:77:01:
                    50:6c:0d:00:d5:91:3d:29:0a:54:75:8c:d7:f7:ca:
                    54:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:36:51:C2:65:53:8D:0F:70:0A:06:74:F5:1E:BA:71:5C:C9:55:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/4f1db5c3-6c0a-362f-a834-5e66e3d1bc91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.163.0-45.61.164.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:20:8f:dd:08:0e:13:ed:17:33:69:fa:fa:2c:e5:65:26:5b:
         ca:44:1c:dc:39:bb:ae:ba:71:94:13:fb:de:c6:0a:16:d4:05:
         19:c6:86:c1:22:63:90:ea:9c:4f:28:3c:eb:c3:08:55:1d:30:
         fe:34:97:4c:7b:6c:40:a3:df:86:09:08:2c:22:ab:22:8e:da:
         57:dc:94:84:88:ea:9c:ba:74:7b:99:39:3b:f4:6a:90:e4:b7:
         bd:38:f3:84:e5:a4:d9:4f:57:ca:42:c9:4e:37:6d:6e:de:7b:
         4f:44:06:c9:69:6a:14:76:c6:41:66:10:d6:83:dc:29:90:04:
         1a:cc:40:82:eb:11:da:5e:9f:bd:ac:89:76:25:0f:87:6e:52:
         1f:4b:c5:8b:b7:9b:02:a8:5f:a3:95:57:2f:c8:98:0b:b6:2f:
         72:dc:f5:37:8f:aa:2e:89:91:cb:c8:fd:5c:31:9b:98:eb:85:
         31:4b:e0:85:b6:4b:1a:ff:d3:75:66:7d:02:1b:53:95:f0:0f:
         cd:6c:93:34:9f:6b:28:23:a5:84:2d:01:67:5b:4a:af:d1:0c:
         5b:99:a0:ef:78:0e:8f:7b:d7:31:79:be:d9:77:f4:11:fe:1b:
         0a:81:98:1c:eb:99:92:a0:ed:ce:35:52:c0:c0:75:71:e2:da:
         ad:db:a9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:48:26 2026 by rpki-client