Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3ff4da4d-ded8-3936-a4b6-cb9b739af9b8.roa
File:                     3ff4da4d-ded8-3936-a4b6-cb9b739af9b8.roa (raw, json)
Hash identifier:          KL/V2YFxSnUIB/OkDV8OVmJ4oYNODfrDYyVPhhjzzC0=
Subject key identifier:   64:6F:EB:79:40:EE:00:3E:F7:1F:48:B2:DE:B5:85:EB:F1:EC:B6:4C
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285849E7BA8B0D3A516CFC8740E800
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3ff4da4d-ded8-3936-a4b6-cb9b739af9b8.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     393886
IP address blocks:        142.111.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:8b:0d:3a:51:6c:fc:87:40:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=18bc6ed5-5751-4513-a07e-bd1448b8b8ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ef:30:08:02:8a:b7:1e:86:14:33:f8:08:04:
                    0a:37:fc:00:2b:c8:41:9b:6a:5e:d5:98:ff:8a:ad:
                    a9:94:06:98:55:54:00:07:30:29:53:2a:9a:cd:dd:
                    d7:46:ed:89:74:36:7d:ae:1e:49:09:43:37:b1:e0:
                    d3:76:9f:12:45:1e:99:b8:d5:fd:ed:15:a0:c4:e6:
                    eb:ee:dd:9e:12:29:b4:6a:f3:40:9c:3d:8f:c3:09:
                    71:06:aa:60:c0:62:64:c5:d8:19:69:57:05:92:92:
                    37:ba:fa:d7:1c:05:83:d5:3d:54:c6:7d:87:de:79:
                    20:11:49:b4:d3:75:bf:59:21:a3:48:2e:0a:84:77:
                    fe:8f:fc:38:27:ca:48:c8:6c:5c:ae:be:91:03:ac:
                    b6:49:11:c4:bd:74:1b:4c:17:c8:c0:ee:c3:13:a7:
                    1b:33:bc:04:8d:e8:91:52:98:af:40:65:1b:7e:07:
                    ff:48:20:96:6f:93:e4:f4:0f:98:81:97:28:83:02:
                    c2:22:fb:32:f2:1a:52:95:7c:49:b8:6e:74:97:49:
                    9f:d9:18:1a:bb:67:af:27:fb:4b:07:2b:8a:6e:a0:
                    02:88:2b:d9:87:54:86:05:0d:ea:6e:ce:b6:25:0d:
                    96:14:11:04:6a:aa:9f:21:66:51:46:74:1b:ae:e4:
                    2f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:6F:EB:79:40:EE:00:3E:F7:1F:48:B2:DE:B5:85:EB:F1:EC:B6:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3ff4da4d-ded8-3936-a4b6-cb9b739af9b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:8e:08:bb:ad:54:61:35:16:8f:95:59:fa:37:aa:05:eb:c4:
         fa:2e:96:fe:34:a1:61:4d:7c:b0:cf:cc:43:0e:1b:9e:7d:fa:
         fb:03:8e:35:2d:2f:46:f8:8a:5b:65:b9:d6:02:35:26:55:28:
         d2:6d:cf:1f:a2:25:ee:69:3c:6d:05:ef:b6:f0:ef:06:7f:1a:
         8c:0b:aa:a8:30:13:4f:35:9c:39:49:3b:e7:f7:d2:b4:ac:2e:
         3d:fb:ac:66:88:d8:5f:92:56:bf:61:92:af:ac:81:41:b9:3a:
         ec:d0:7c:13:9f:2d:f2:81:00:9a:37:40:37:16:0e:ad:25:05:
         6a:a0:e4:e8:df:c1:87:b6:71:8a:c0:14:b4:e5:ee:f0:45:41:
         af:d3:a5:38:d1:ff:77:83:4c:b7:d0:42:60:d8:13:92:78:11:
         e2:9d:b6:ef:c8:99:01:74:89:b9:9e:18:d1:74:1f:64:36:f4:
         04:73:d2:db:af:11:31:4c:6d:c8:66:28:89:94:b2:0e:fa:74:
         3f:fb:3d:3d:4c:ad:3e:66:2b:32:68:df:84:29:72:4e:1c:77:
         d4:fe:40:d6:b8:69:8e:a5:db:a4:4d:d7:fa:9c:33:b5:71:d0:
         75:a5:f6:95:64:88:a6:7c:22:06:d5:ff:f3:22:44:31:d4:19:
         bd:28:e7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:39:31 2025 by rpki-client