Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/34cb0d3d-e148-33b8-af11-5a3dc92a301f.roa
File:                     34cb0d3d-e148-33b8-af11-5a3dc92a301f.roa (raw, json)
Hash identifier:          SpU7KVMcyodAssrrUZW7v8Tzymx519YsG10gCzM4Cos=
Subject key identifier:   1D:EB:6B:34:59:FF:35:88:A6:BA:8B:A3:B0:96:15:8B:4D:7F:25:37
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584996C4B5CF2C648B25364F2EC0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/34cb0d3d-e148-33b8-af11-5a3dc92a301f.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     3257
IP address blocks:        142.111.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:b5:cf:2c:64:8b:25:36:4f:2e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=fd60a3b8-7e09-47cb-bf02-edffc6eabf9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bd:d7:f8:4f:82:11:5b:da:bf:1d:94:bb:e8:
                    77:99:02:b5:36:e6:1f:27:c5:d6:2c:24:c9:7e:73:
                    2c:e4:eb:37:9c:98:7a:aa:15:c0:df:05:70:f1:eb:
                    de:e0:fc:27:c0:08:4f:c5:f7:0a:53:77:af:4f:16:
                    bf:1b:ba:3f:c0:d3:44:7a:a9:e4:06:94:fd:30:f4:
                    ed:92:c8:3f:be:63:87:c9:d8:45:03:09:5b:80:58:
                    cc:08:4b:74:9b:80:de:6c:aa:ed:ff:e2:2e:f4:8f:
                    58:af:23:eb:94:bb:ed:84:11:c1:7a:b2:08:18:5a:
                    08:ae:7c:0c:6b:34:96:6c:9e:04:19:e0:8c:ed:d1:
                    06:c2:5d:2f:84:ee:64:04:94:b7:13:04:63:0b:0b:
                    24:90:6d:b5:64:7b:22:37:49:e7:2f:95:b1:87:fd:
                    12:82:e7:fe:1b:ba:b8:da:72:6b:f6:db:03:ee:f9:
                    cf:4c:8e:e8:14:60:59:03:29:46:76:28:b5:1c:4a:
                    65:ef:b8:08:e9:6a:11:72:c6:91:91:44:7d:d8:aa:
                    47:8c:88:b8:22:38:c0:af:48:fc:37:2e:68:97:ea:
                    b7:58:5c:66:fa:19:f0:96:d7:f2:5a:d7:0e:38:c8:
                    d9:e9:52:d9:26:08:51:3f:d1:56:ee:70:f4:0c:91:
                    2a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:EB:6B:34:59:FF:35:88:A6:BA:8B:A3:B0:96:15:8B:4D:7F:25:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/34cb0d3d-e148-33b8-af11-5a3dc92a301f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:d9:a9:5b:6e:2c:ec:b2:36:90:be:24:12:2f:5b:54:b6:db:
         0a:89:86:01:10:d4:b0:f4:c3:e6:20:0a:19:26:ec:6e:bb:a0:
         96:14:89:6e:ee:4a:18:d7:99:e0:a4:b4:17:df:01:e6:c7:71:
         cd:57:e1:b6:6a:54:a4:6f:08:64:4d:65:b0:c1:79:1a:10:d9:
         e6:0f:82:bf:78:1f:ce:1a:b1:03:f0:65:92:da:e0:df:3e:38:
         7f:7f:23:39:99:c2:0c:7e:58:04:db:92:2f:69:21:5c:1d:0d:
         09:81:9a:c0:0a:ef:15:80:dd:4c:d5:86:1b:93:f6:0a:4d:a3:
         16:4e:29:c5:00:da:36:8a:91:83:bb:cc:91:ce:9e:b3:5f:0a:
         40:41:38:c6:84:a8:9e:1b:db:d9:1a:f6:89:2c:b3:35:21:10:
         50:e7:cb:a8:2d:b0:c7:2b:75:df:72:37:30:46:8e:5b:11:da:
         b3:b0:c9:e9:09:04:fb:6b:d8:09:d4:38:9b:8d:61:76:fe:f3:
         e2:52:91:2f:72:4c:76:b4:21:d8:40:77:89:a4:4d:af:c1:72:
         1a:32:06:12:3b:14:a0:37:68:d6:8c:4e:b0:40:5f:58:b9:2f:
         02:46:78:7b:52:34:16:f2:c3:dd:d5:d6:21:93:a9:e3:09:96:
         cd:e3:a3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:20:17 2025 by rpki-client