Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1dc3fd36-05f4-3e5f-a7c0-4a10bf8277f9.roa
File:                     1dc3fd36-05f4-3e5f-a7c0-4a10bf8277f9.roa (raw, json)
Hash identifier:          OkEo5pXTdr7jh+OHpJs2gojg8KxfVeTdGY731HDrvPA=
Subject key identifier:   DF:4E:C2:47:E2:86:9A:6D:29:86:D7:AE:AB:51:C1:09:58:59:90:7D
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A761B694CB83B2078AFFA4800
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1dc3fd36-05f4-3e5f-a7c0-4a10bf8277f9.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     3257
IP address blocks:        142.111.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:69:4c:b8:3b:20:78:af:fa:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=6d3e4d91-25e7-48cf-9452-30ab1b353913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5b:85:f1:8c:59:31:92:0f:55:a0:d4:bc:92:
                    0d:47:73:27:8d:a8:4d:72:85:86:a7:f7:4c:3a:29:
                    07:b5:95:85:ec:b4:55:48:19:f5:10:63:9b:c2:b6:
                    30:de:f9:e6:28:10:36:e9:07:c4:0e:a3:7f:d9:9e:
                    53:7e:c2:16:aa:16:71:75:96:e5:4e:c0:b4:7d:26:
                    27:39:d4:54:a3:79:64:b4:f3:77:11:d2:bc:d7:5d:
                    fb:ba:ed:e5:44:ab:fe:cb:a6:6f:d7:04:7f:03:31:
                    a0:f2:20:ed:3d:49:f0:6f:3f:7c:2f:b7:df:aa:c2:
                    87:94:47:d3:7d:42:89:d1:58:bc:a7:ae:84:ca:7e:
                    c5:d9:d5:b8:d8:99:e3:65:35:06:08:00:13:c3:07:
                    d9:f9:c6:7d:dc:ac:51:b8:59:30:ca:c7:e8:36:06:
                    46:aa:e0:bd:ab:3b:d5:ac:94:28:96:1f:ce:e0:7f:
                    29:0a:d0:af:67:90:32:4e:f1:9f:28:48:02:6b:f0:
                    b6:04:ac:8d:2d:84:79:81:ab:d7:82:df:42:57:ab:
                    a3:21:14:f8:38:7d:71:ed:52:e6:a9:02:f0:e2:6f:
                    8e:bf:56:42:0a:71:4b:48:e8:ab:42:f6:a5:da:8c:
                    bb:2f:f2:10:31:ff:cb:96:58:dc:e9:32:4d:b8:2f:
                    a4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4E:C2:47:E2:86:9A:6D:29:86:D7:AE:AB:51:C1:09:58:59:90:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1dc3fd36-05f4-3e5f-a7c0-4a10bf8277f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:4a:b9:ef:69:46:52:4c:64:a9:1f:a5:f5:0c:ef:c1:43:ec:
         c5:d8:c5:2c:11:f4:a7:1f:e6:3f:89:83:22:1c:75:08:db:fe:
         15:1b:b9:10:55:1d:b0:07:ca:d9:a6:20:2a:73:4f:e8:84:13:
         10:85:87:ec:89:f3:93:4d:c6:42:9c:98:76:f7:58:eb:48:13:
         d3:e2:1b:4c:c5:7f:71:79:87:8e:b5:30:2c:cf:56:a7:cf:b7:
         77:a9:2b:50:ba:34:ad:48:2a:6b:73:5e:d9:7d:03:eb:6f:45:
         f9:02:41:b9:c4:22:e7:aa:6a:b8:b2:79:cc:fc:07:9e:82:7a:
         ac:e9:60:1f:01:89:26:02:b2:cd:0a:44:14:5a:de:0a:3b:5f:
         03:6a:a5:ee:2d:8d:22:19:29:4d:08:78:81:12:39:d2:67:d1:
         45:65:88:63:53:83:a7:73:75:9f:30:08:06:82:a7:3e:db:c1:
         a6:1a:ed:76:60:88:ff:ff:ab:88:ba:1b:80:b3:0d:f6:93:b7:
         bb:b6:ce:60:91:20:ef:21:a7:45:c7:dc:3c:ed:22:e8:c9:01:
         7a:7b:ef:ce:67:17:ff:db:73:36:62:a7:87:31:70:a7:6b:53:
         37:6c:fb:6a:a8:19:81:bb:5f:fc:3d:59:3e:2c:92:75:f1:54:
         f8:02:d2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:56:35 2025 by rpki-client