Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/598af8ac-86a0-3161-bc94-c07de93e1d30.roa
File:                     598af8ac-86a0-3161-bc94-c07de93e1d30.roa (raw, json)
Hash identifier:          u1BqtQs9NI32yOV37ZKh8spVWSEXooTjRXvEhEMxwOk=
Subject key identifier:   56:74:3C:09:62:7B:61:C2:CD:4B:D4:51:79:EC:64:DC:73:F5:76:13
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A2EEAC47F81CB09FEA9D2BC80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/598af8ac-86a0-3161-bc94-c07de93e1d30.roa
Signing time:             Sat 14 Jun 2025 01:00:49 +0000
ROA not before:           Sat 14 Jun 2025 01:00:49 +0000
ROA not after:            Fri 12 Sep 2025 01:00:49 +0000
asID:                     8881
IP address blocks:        142.111.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2e:ea:c4:7f:81:cb:09:fe:a9:d2:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun 14 01:00:49 2025 GMT
            Not After : Sep 12 01:00:49 2025 GMT
        Subject: CN=a90e6268-0dca-4644-8e47-4e52f77c03b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:af:af:c7:a7:c9:bd:12:13:2d:60:14:8d:60:
                    42:33:bb:cf:04:8f:f0:c4:f2:ee:62:5a:f7:dd:36:
                    a9:95:56:5e:6b:a8:d7:14:12:9e:e6:a5:af:a6:ee:
                    ba:94:13:d9:84:e9:b8:5a:ae:45:2f:ab:7f:73:4c:
                    63:27:20:41:4e:86:6d:d7:f1:95:be:9a:f7:93:f1:
                    fb:b7:a7:23:c8:d9:69:9b:3a:cc:47:e7:ac:07:7a:
                    34:cf:7a:1c:00:09:7b:9e:51:f3:08:76:5e:a7:09:
                    79:f2:35:00:e2:d9:4e:26:39:2a:a2:ed:ad:71:d4:
                    52:c6:bb:49:e0:10:22:df:e4:73:9b:1e:7a:ac:7d:
                    07:1b:e2:af:dc:4d:e1:c0:e0:ec:04:40:ac:0f:67:
                    cd:f0:e7:47:bb:a0:e2:6b:71:22:84:95:9d:1e:1c:
                    4d:c9:80:87:a8:16:53:0b:3d:b6:15:74:be:d0:c9:
                    2d:13:41:2e:35:87:76:28:76:93:21:7a:4b:fe:e9:
                    db:db:18:66:54:37:e9:21:a7:70:d0:83:dc:22:4e:
                    95:a3:a4:6e:e6:64:ed:e0:4a:07:05:81:78:ed:f7:
                    15:ac:cc:65:f4:9a:d6:a6:01:0f:40:72:ea:fd:d5:
                    b4:ed:67:3a:05:fc:26:2e:8c:e7:40:75:fa:72:60:
                    08:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:74:3C:09:62:7B:61:C2:CD:4B:D4:51:79:EC:64:DC:73:F5:76:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/598af8ac-86a0-3161-bc94-c07de93e1d30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:c3:5c:27:62:49:ba:87:25:37:a4:7d:6c:70:99:e3:cc:78:
         ad:16:52:2c:09:07:f5:01:19:ee:b2:5e:77:65:62:5b:20:f4:
         e3:02:dc:a2:7f:39:5b:76:29:50:4e:57:43:c1:7f:20:32:26:
         73:2c:ce:03:62:5c:f3:5c:d0:62:d6:a2:d6:c6:5f:56:93:05:
         d7:64:a0:31:e4:04:9a:3f:f0:a8:94:69:98:ed:6e:e1:1d:4c:
         e9:6f:9a:f7:74:b5:61:1c:2a:03:51:b8:c6:11:96:0b:4b:37:
         5e:04:1d:32:b6:12:7f:d9:77:69:7f:e2:64:7f:45:3d:f6:38:
         0b:87:7c:27:0e:64:b7:ff:25:27:97:71:12:86:fd:57:17:99:
         3b:a4:f2:4a:70:ca:c0:58:4a:8e:e0:e8:b2:04:f0:c3:ae:89:
         a5:a7:d0:03:fd:47:b4:9c:e7:29:d6:23:67:1f:90:77:b2:c4:
         5a:79:b7:23:29:c9:f2:a6:79:2c:71:cf:18:fe:6a:49:8d:7e:
         58:6a:48:85:c9:f0:c7:b2:e9:83:5d:33:0c:01:5d:e1:d9:2f:
         21:7a:8f:8d:5e:f9:f1:36:97:f0:6d:b0:ea:db:e6:fb:bb:19:
         2d:ab:be:54:f5:db:e0:df:35:30:21:93:30:6a:39:e7:29:4a:
         9c:30:c6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:19:10 2025 by rpki-client