Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/21cef264-648b-31c5-a85e-052f0cff5bb8.roa
File:                     21cef264-648b-31c5-a85e-052f0cff5bb8.roa (raw, json)
Hash identifier:          dGwneDCe8onAsdO4jF+xHJQ/PVOlkmWbdxVa72ozFwo=
Subject key identifier:   E0:01:23:F8:07:A6:65:9E:AF:40:C5:AF:A1:2E:7E:86:5D:CC:C6:FB
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285849E7BA8B1E895D10390B3E02D0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/21cef264-648b-31c5-a85e-052f0cff5bb8.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     393886
IP address blocks:        142.111.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:8b:1e:89:5d:10:39:0b:3e:02:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=0b6e547b-133d-4358-9465-b20364df31e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a0:38:c1:23:a5:ca:78:73:71:f7:12:48:a4:
                    b0:a6:37:3c:fe:51:f4:30:2b:5d:96:d2:11:18:46:
                    aa:ac:c6:c1:9a:c4:14:57:a7:90:93:19:4c:a4:6b:
                    b3:34:a8:58:b3:97:eb:96:f9:2d:74:65:4c:07:42:
                    2a:42:46:db:82:3e:d7:ce:31:ea:f9:42:6b:d3:ee:
                    83:38:2e:0e:33:98:a0:0b:f3:b2:a4:ec:60:22:94:
                    73:8e:31:5b:37:e3:fd:92:f3:b6:df:d5:64:e7:4b:
                    c4:61:79:d9:86:9b:b4:7f:19:48:cb:a6:df:38:7f:
                    b6:d1:45:62:5b:d0:f6:98:b8:41:fd:b2:ad:8d:45:
                    9d:b2:67:f8:db:04:37:4b:27:b6:b5:a6:7f:fb:ae:
                    16:df:4c:47:9e:75:f7:c2:97:1c:58:3d:1a:98:c4:
                    89:f6:84:84:83:88:fb:20:4a:0c:d1:88:ac:61:d8:
                    a2:73:fd:86:21:7d:36:9c:2d:e6:23:80:e6:75:46:
                    65:2e:f2:e5:6f:64:01:01:82:31:ec:d0:02:60:bd:
                    57:5e:54:cd:f4:3a:a4:1f:2c:f5:95:f0:2d:6e:52:
                    a9:59:07:86:a3:ed:98:da:0d:68:49:f8:36:a3:b5:
                    b2:5b:47:df:e3:2d:9c:00:98:d0:36:7e:52:0f:c6:
                    64:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:01:23:F8:07:A6:65:9E:AF:40:C5:AF:A1:2E:7E:86:5D:CC:C6:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/21cef264-648b-31c5-a85e-052f0cff5bb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:d9:d7:da:14:ef:1a:9d:cf:71:e5:7f:54:4f:8b:fe:e5:72:
         1d:fd:bf:ab:fe:16:a6:dc:46:dd:7e:09:22:02:6a:2f:88:95:
         82:0c:5e:cf:30:d3:7b:5f:7e:b0:9a:b0:dd:7f:fb:d4:32:67:
         b9:80:71:f7:2c:bc:75:74:26:59:2a:be:5c:3c:5e:90:c8:ac:
         04:aa:9f:6c:e2:9b:41:c0:90:47:04:bb:e5:fe:58:16:3c:24:
         0f:3a:f5:aa:e1:2f:1b:6d:2b:3c:d8:94:1a:f0:50:8e:7f:53:
         4c:78:56:d8:d1:cb:9e:9a:13:54:01:04:e6:88:f5:30:8b:54:
         0c:16:00:4c:bf:43:fe:c5:3c:08:e5:36:3c:a3:13:b0:7e:02:
         f5:1e:77:82:38:1d:6b:5d:ce:af:ad:2a:2a:89:7e:db:2f:5e:
         a7:ba:df:0b:bf:1b:fb:df:41:4f:34:e7:ab:4a:da:d6:b7:e0:
         af:98:d7:79:b7:2a:cd:7d:f7:e9:45:a9:dd:ca:8b:0c:da:ab:
         e0:0e:73:f2:f5:bd:85:c6:f8:43:bc:e4:50:ba:cb:28:b1:e7:
         21:00:63:8e:76:9c:07:b6:c8:32:12:0a:61:44:cd:b9:88:88:
         68:82:af:2d:2f:8a:a8:b3:8c:53:1c:8a:fd:b4:77:4e:f1:48:
         0a:b4:c1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:47:44 2025 by rpki-client