Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0d322ce3-6718-3a85-aece-7106b2539792.roa
File:                     0d322ce3-6718-3a85-aece-7106b2539792.roa (raw, json)
Hash identifier:          vNmvsMk8HtRKeHNykHu8FwFwAlyr8p/1BKiyVO4HnoI=
Subject key identifier:   E3:23:90:E2:DC:FD:A0:17:41:B8:23:99:E1:32:8A:9A:58:3B:93:E1
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285849E7BA8B4C9F2405F634018340
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0d322ce3-6718-3a85-aece-7106b2539792.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     393886
IP address blocks:        142.111.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:8b:4c:9f:24:05:f6:34:01:83:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=0f9b7a79-bde2-41a4-93cf-307a5e5420ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:93:00:d9:6f:71:ed:f2:72:ba:62:22:28:3e:
                    c6:52:b4:23:89:b2:78:6d:4b:67:a6:de:b4:2b:2d:
                    85:10:5d:12:ed:0b:f7:7b:80:95:39:2c:e2:0f:46:
                    f1:38:cb:bf:12:3c:d9:d7:71:06:d5:1e:5b:aa:69:
                    ce:9a:4c:e2:4b:cb:f7:55:a8:84:f8:aa:cf:f8:c4:
                    43:f3:83:21:a8:bd:4a:b5:d6:49:4e:48:5d:42:b0:
                    51:fb:71:d1:4f:d5:20:72:b9:b0:c5:5c:f1:c0:b2:
                    a9:a8:ef:1f:7b:2e:be:cf:d8:ce:9a:b0:f3:9a:f2:
                    87:b5:14:6e:6f:75:43:02:77:66:a5:85:89:cb:5f:
                    15:87:08:f3:ca:be:67:15:12:81:88:89:0f:8a:dc:
                    2d:ef:32:eb:e7:52:c6:67:70:b4:ea:e0:af:86:75:
                    61:33:72:1e:2e:8d:02:c7:f7:7a:dd:54:d3:e9:36:
                    42:92:98:4c:60:1f:db:89:a5:a7:13:12:91:4f:6e:
                    2f:eb:2c:fa:c3:fd:9b:b0:b7:d3:ee:48:9c:0a:bb:
                    ce:07:39:3d:3b:5a:01:fc:41:90:b8:3e:c9:39:d5:
                    a7:cb:3e:e7:2c:c7:db:17:d2:53:e3:8a:86:27:3c:
                    82:71:21:9e:6e:49:21:cf:36:1c:0b:66:2b:65:89:
                    7a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:23:90:E2:DC:FD:A0:17:41:B8:23:99:E1:32:8A:9A:58:3B:93:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0d322ce3-6718-3a85-aece-7106b2539792.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:f5:19:cb:85:4b:fd:38:32:cc:d4:eb:10:51:4c:e6:db:c6:
         5f:f0:61:cb:bb:fc:6b:6e:7b:02:c1:3c:e1:24:a6:ea:fa:9f:
         27:b0:02:fe:d7:21:f0:fd:e7:0e:41:d5:43:dd:83:7b:7b:96:
         70:ac:0a:20:a2:1a:a8:dc:32:c3:fc:e4:ad:fd:23:2b:b6:8e:
         ca:b3:0f:a5:c5:93:90:d5:53:4b:dc:61:00:fb:04:c6:e6:75:
         9a:50:d7:76:44:4d:bf:34:4d:14:88:8a:45:8e:90:d9:46:30:
         4a:c9:5e:5a:cc:75:63:f7:81:1d:e3:fe:37:3d:57:8e:4e:cc:
         a2:81:89:7a:95:e5:75:7f:a5:3c:ec:ee:cc:11:d2:56:d6:03:
         44:4a:29:b4:0f:67:a0:2b:7e:06:a6:e9:5d:6c:3f:da:91:c7:
         24:03:92:07:91:ef:46:77:b0:ea:8a:53:e0:66:a2:80:ba:59:
         9d:63:4a:95:a1:0c:fe:b9:07:a2:26:3b:56:31:58:86:45:71:
         b9:fb:e0:5d:b0:71:fa:83:39:aa:71:97:87:a8:27:dd:9e:69:
         53:82:72:76:3a:52:4a:7b:90:0d:5c:c5:4f:af:67:e3:2b:64:
         06:24:9c:1a:76:d2:b1:92:f1:08:dc:ee:a9:71:51:a4:d0:45:
         a2:4c:26:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:03:43 2025 by rpki-client