Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2d83cfe4-5d1d-371b-be87-cb88396a35ec.roa
File:                     2d83cfe4-5d1d-371b-be87-cb88396a35ec.roa (raw, json)
Hash identifier:          2a8kMz8U4kPrFTCLNISdX19BHXWQy7jU8oPp3orB5yk=
Subject key identifier:   33:9D:D7:45:C3:2D:A4:C2:83:22:15:6A:83:5C:60:07:2D:FA:86:55
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A94D0E7E2836C203BE981B370
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2d83cfe4-5d1d-371b-be87-cb88396a35ec.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     7018
IP address blocks:        142.111.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:e7:e2:83:6c:20:3b:e9:81:b3:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=43410644-a8d9-4cec-9ec4-505ab65b1047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0f:d7:d1:e9:41:39:d7:4c:38:96:d5:19:35:
                    b9:7c:c5:55:8b:bc:f3:06:d6:97:54:7c:84:13:cc:
                    14:62:e0:c8:ff:e8:0c:8a:5c:ca:88:08:3e:22:20:
                    60:77:76:16:36:a1:0f:c3:d9:7c:2f:eb:e6:f6:05:
                    2a:3e:c3:95:b2:b3:7c:8f:72:2a:04:6a:c3:1b:64:
                    95:1e:f0:46:69:ab:f9:88:46:95:66:c9:e6:6c:2e:
                    a4:e5:37:80:1c:ab:d5:2c:96:ef:76:1b:05:9b:79:
                    43:27:e1:4f:20:8d:a7:f5:ce:6f:fe:2b:41:ca:0e:
                    60:b9:1b:ab:bd:fb:ec:a3:08:6b:40:fc:8e:07:85:
                    3f:df:2b:33:c7:13:a7:be:9b:b9:64:7d:52:90:c0:
                    69:67:90:a6:13:34:0a:6b:5d:43:64:3b:84:05:37:
                    42:9b:5f:67:0b:bd:20:c0:5a:3e:42:e5:33:6c:10:
                    82:01:e7:f2:92:5c:8a:37:c8:b0:7e:0e:ee:df:a1:
                    46:a9:06:05:23:02:d3:2d:a5:08:4d:f4:1a:31:f8:
                    30:79:39:17:c8:21:04:d9:3c:0f:43:b5:76:36:5e:
                    8a:8b:95:02:9f:56:91:92:b8:a2:84:e8:79:60:39:
                    5a:7c:be:4c:70:51:15:92:72:71:4c:e2:2f:71:81:
                    e7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:9D:D7:45:C3:2D:A4:C2:83:22:15:6A:83:5C:60:07:2D:FA:86:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2d83cfe4-5d1d-371b-be87-cb88396a35ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:6e:83:fd:a3:9d:89:fe:1d:b9:a2:db:62:dc:ca:66:de:c7:
         dd:51:73:1d:55:ef:9b:c2:ad:8f:f2:e4:04:e3:60:6c:48:05:
         73:fa:fe:b6:46:8d:82:56:ed:b3:f8:41:06:3c:e2:33:c6:61:
         d9:41:e7:c3:4f:0a:40:65:5f:fd:da:49:22:45:4b:99:95:7e:
         aa:ea:81:fe:ec:8b:a7:62:08:5c:28:75:03:44:8e:a3:e0:6c:
         22:7b:3a:da:7f:07:00:54:56:af:88:da:b5:ec:2e:2f:3c:16:
         9d:7a:6e:5e:d8:c3:da:69:75:af:ce:53:a7:21:e0:ff:5e:9f:
         89:c2:26:47:a5:34:09:32:ff:ff:54:80:95:c9:49:89:90:1e:
         80:ce:3c:73:a7:a7:31:01:e0:cb:7d:bf:9d:3d:ab:2e:90:da:
         3a:53:ed:28:13:dc:55:98:7c:d8:15:45:7c:2f:b0:63:5d:1b:
         1c:0e:f4:c9:e9:2b:aa:82:72:60:6d:12:c6:7c:a8:f5:3d:55:
         c6:c1:50:42:8a:9a:63:7c:57:05:60:f3:18:df:7a:35:ac:28:
         47:7e:6d:62:43:e4:e8:f1:60:e3:4d:93:2e:1a:64:6c:dc:34:
         f7:e6:48:c9:af:6d:e5:ca:80:6e:f9:45:c6:b7:c7:b9:73:30:
         c5:ef:d9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:07:22 2025 by rpki-client