Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4aa0e3e4-f6be-3a1f-a213-dce0f0136504.roa
File:                     4aa0e3e4-f6be-3a1f-a213-dce0f0136504.roa (raw, json)
Hash identifier:          0HIO0xUwF7rhbGAA63PNM/R5z34wVszSYHJt63/YXjY=
Subject key identifier:   E1:8E:52:77:F0:83:5F:48:0E:3E:BA:8D:3C:1D:A7:4E:39:01:59:D8
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285849C20AB8DC58FCF04FD70BCA80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4aa0e3e4-f6be-3a1f-a213-dce0f0136504.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     6939
IP address blocks:        142.111.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:b8:dc:58:fc:f0:4f:d7:0b:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=87c7338d-19c5-4710-94bb-9cc678a68d7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:67:83:44:64:c0:f6:08:0d:09:d9:c9:a6:9a:
                    fd:4e:db:41:ca:b8:cf:3b:13:12:a9:9a:89:88:d3:
                    84:fa:83:f6:21:7e:ec:c5:77:fd:e2:76:f0:11:bb:
                    ec:54:1b:ad:80:f1:d2:11:6e:7e:b7:d6:ee:71:04:
                    5a:66:6f:c4:79:4b:98:fc:21:f6:b3:45:5b:fc:4d:
                    15:9e:49:62:3f:83:f5:1d:ce:4e:fa:8f:de:95:df:
                    2a:6e:eb:82:79:bc:f8:ad:a7:9d:f2:87:b8:08:19:
                    3f:ae:bd:68:03:a6:b3:36:37:6b:23:c1:78:13:90:
                    34:63:29:31:78:64:83:8f:62:29:62:06:e1:45:3b:
                    63:b8:2f:38:cf:cb:8c:32:a8:af:b2:f4:49:d6:a8:
                    1d:ca:08:6f:14:93:26:d6:1e:3d:2c:6a:d7:ce:44:
                    c0:90:ce:c9:c1:e2:e1:49:a5:5c:b1:52:04:26:79:
                    ac:9f:73:88:77:a0:85:17:29:f2:e3:ae:56:26:04:
                    d9:b7:f6:95:7e:82:35:e5:d6:fe:68:42:0b:ba:d0:
                    75:26:6f:07:8c:16:0a:86:bd:ef:01:39:92:1e:55:
                    bf:a1:d4:8d:85:1a:66:f3:62:22:9d:ff:71:8c:00:
                    4c:3f:6e:20:d5:63:17:8b:2d:e7:7e:e2:92:b4:98:
                    b6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8E:52:77:F0:83:5F:48:0E:3E:BA:8D:3C:1D:A7:4E:39:01:59:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4aa0e3e4-f6be-3a1f-a213-dce0f0136504.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:13:bf:d1:7d:98:90:c7:b0:1d:de:11:8d:b5:ca:6d:8d:93:
         09:09:fb:bd:da:b0:77:a0:33:47:d1:93:46:9c:74:81:07:95:
         19:8e:ea:c9:10:5a:5a:55:8a:75:62:41:99:76:40:3c:cf:f8:
         70:64:69:3b:1c:08:5e:7a:bf:70:99:a1:9a:c7:91:4d:f4:1a:
         b5:be:38:9f:e2:ab:c3:0e:df:e5:e8:47:07:57:a2:27:7f:42:
         eb:bd:9a:34:8c:f4:92:77:34:30:67:92:65:51:34:d6:be:3f:
         41:17:40:75:88:69:8f:b0:73:5a:0a:0a:eb:68:7e:6b:db:d4:
         b9:b4:3d:83:78:a0:34:b8:bb:df:31:47:8c:18:c8:96:26:5d:
         fd:2d:3e:65:b4:9d:4f:5e:a1:0f:d8:5e:18:b0:ef:9b:60:28:
         e9:f6:1b:25:bc:83:78:38:ed:14:a0:db:e7:2a:c6:b8:ee:ed:
         0a:fa:a6:55:1f:32:bb:33:17:af:80:e6:96:56:97:5c:3c:6b:
         02:f6:5b:5c:4b:42:80:70:9d:78:60:23:4d:6d:33:53:74:6b:
         7f:ac:49:77:ce:44:01:d0:57:42:fa:81:33:1f:2f:bd:f9:94:
         24:b7:ad:ce:0d:dd:ca:b0:04:04:f8:05:c9:51:4b:30:49:e6:
         78:e9:29:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:41:16 2025 by rpki-client