Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/123e6b5f-db2c-3e68-bb65-a14e35a5a778.roa
File:                     123e6b5f-db2c-3e68-bb65-a14e35a5a778.roa (raw, json)
Hash identifier:          M7aUY3M9BF305AtbHwTi+4g/T8GISkP0mdaaw8WLIZw=
Subject key identifier:   95:18:7D:53:BB:9E:D7:7A:6E:B7:75:05:90:A2:32:26:6C:E8:C2:61
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A0D6A99C7A2AAC6C9022ADF00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/123e6b5f-db2c-3e68-bb65-a14e35a5a778.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     27411
IP address blocks:        142.111.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:99:c7:a2:aa:c6:c9:02:2a:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=f10884dc-e712-4215-a9d5-296a2228a9e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:34:e6:82:b0:ec:5d:91:46:37:23:e0:b7:c8:
                    10:fa:2f:12:bb:c1:fc:9e:0d:37:2a:e8:17:4a:7d:
                    f5:0a:d8:c8:c8:0b:da:24:22:88:36:9b:a6:ff:bb:
                    3f:71:ec:ad:6c:6b:03:be:36:43:37:83:e0:e2:3c:
                    db:e7:79:82:97:04:d6:40:2a:bd:20:8e:b7:f4:0a:
                    e5:0e:4d:97:08:09:49:90:a4:b1:dc:22:45:a7:f1:
                    ee:22:0e:ee:18:7b:3c:e6:5c:16:d0:51:37:de:3b:
                    0f:b1:e1:0b:60:95:9a:a2:62:5c:7d:1d:ec:4b:bc:
                    4c:23:41:8f:6c:19:fc:62:96:da:e8:d7:06:ba:03:
                    e6:6e:4f:c9:c0:63:ca:5e:49:f9:56:23:89:e4:bc:
                    e5:db:e9:22:26:4d:a8:9b:e9:0f:77:cb:7a:79:46:
                    80:f7:56:3f:00:19:63:7b:f6:03:29:a0:90:9f:c3:
                    9e:6d:60:2f:c7:6a:f8:d7:00:6e:69:3a:2a:4b:48:
                    27:95:25:60:27:4b:1d:2e:dd:f2:2f:5d:59:a3:de:
                    62:45:e8:eb:28:0f:93:ca:4c:cb:6c:25:ff:98:5b:
                    46:a2:6b:ed:75:76:f1:a0:93:f0:82:77:67:05:91:
                    12:c2:79:02:5b:17:b0:e5:fb:25:03:d1:7c:75:d9:
                    31:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:18:7D:53:BB:9E:D7:7A:6E:B7:75:05:90:A2:32:26:6C:E8:C2:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/123e6b5f-db2c-3e68-bb65-a14e35a5a778.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:1d:20:67:a1:13:6f:b8:3b:0c:92:76:39:d8:bf:1f:4e:03:
         27:dd:e1:77:33:c8:1b:24:38:24:89:41:0d:e1:2a:c2:c1:51:
         1f:39:79:a7:09:59:10:22:8f:2d:72:3f:31:d4:53:45:30:66:
         12:c6:8f:0c:cb:e7:e6:02:44:23:d1:99:dc:88:a4:a2:46:6b:
         d7:df:89:5f:30:bb:da:b4:af:c1:ef:3c:6e:7b:20:12:08:18:
         75:5f:57:6b:fb:2a:e7:74:3f:4f:f5:26:de:47:d7:22:fc:f3:
         c2:45:ea:4b:c3:8e:61:1e:a9:78:54:67:33:8d:9e:3e:7c:de:
         0c:21:e9:60:1e:30:db:fb:10:f9:d0:4e:6f:6f:3b:f2:00:d5:
         74:3c:2f:91:9c:61:f2:e1:2d:24:97:54:c8:db:2a:8c:af:cd:
         d4:74:c2:95:c7:53:03:03:a3:d7:f9:3d:65:3e:71:10:bd:e4:
         30:cb:90:e7:b7:53:7a:1f:f6:0f:e9:d1:9c:0a:6d:73:5d:92:
         8b:6b:3a:d6:9e:1f:2d:c2:18:23:d9:18:2b:7f:0a:5d:f3:5a:
         a3:43:45:e9:9a:91:87:c4:29:4f:46:1a:80:17:65:70:8c:29:
         77:00:c8:fc:2f:14:96:ba:3a:46:bd:31:75:1c:ef:c1:12:43:
         8e:4f:6a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:35:56 2025 by rpki-client