Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/645ab11b-fa21-32cb-b7a1-dad64d6a4275.roa
File:                     645ab11b-fa21-32cb-b7a1-dad64d6a4275.roa (raw, json)
Hash identifier:          3UChFbB6b3XvqAOm4F6o2CnZhdHMmjn3z+7be7Ih2oA=
Subject key identifier:   75:02:C7:1B:DF:BB:9D:18:71:39:E3:33:75:90:C8:E1:3B:B3:AD:2B
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A761B695CF34B255E61D79DC0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/645ab11b-fa21-32cb-b7a1-dad64d6a4275.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     3257
IP address blocks:        142.111.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:69:5c:f3:4b:25:5e:61:d7:9d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=b2687160-1ec8-4b7e-a6f5-80964b96aa4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5c:88:3d:06:ec:04:db:ac:11:41:52:69:53:
                    bd:da:92:7f:7e:1f:68:40:9f:3a:07:95:76:f1:03:
                    0b:1a:7a:4d:61:d8:52:2d:d3:e0:29:a6:b5:61:3e:
                    96:42:a7:5f:0d:ab:68:2c:a8:c8:8b:0e:86:36:20:
                    dc:f0:0e:13:ab:c0:72:32:f4:c4:50:13:ee:aa:ef:
                    c7:a4:99:34:26:f5:64:7c:dd:32:0b:d2:f9:4f:79:
                    92:c9:b0:ae:4e:5d:e3:7b:e1:26:17:6b:3c:08:21:
                    5b:3a:53:a4:8b:4b:69:b6:8a:71:5c:ff:28:b0:56:
                    b3:73:c4:8c:32:c4:e9:7f:b7:cb:63:22:a3:9f:f4:
                    b8:3b:6e:72:eb:2d:ed:70:ce:69:40:3c:22:c8:86:
                    9f:28:e4:1d:37:75:80:ad:5c:66:77:f6:f9:f8:81:
                    7e:85:c9:a0:f6:ee:20:f5:1d:f9:9c:54:43:30:ea:
                    5e:da:bc:ee:84:60:18:da:74:cf:15:25:38:30:54:
                    6c:a6:30:b5:48:58:55:cd:11:3f:68:c6:09:e3:70:
                    12:ab:da:4c:34:1b:7a:81:f1:d2:f1:ab:6b:23:d0:
                    28:46:dc:9d:c6:57:80:a6:fe:fe:bc:67:84:d7:19:
                    19:a7:ac:b9:be:68:68:15:1f:ae:aa:cc:b8:ba:13:
                    87:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:02:C7:1B:DF:BB:9D:18:71:39:E3:33:75:90:C8:E1:3B:B3:AD:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/645ab11b-fa21-32cb-b7a1-dad64d6a4275.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:a2:e1:df:9a:2d:a2:6d:cc:51:5b:b9:4c:91:8e:10:a0:73:
         4b:8c:06:59:22:d9:58:63:ca:27:6c:a5:ee:bd:86:23:3c:03:
         a9:1e:a9:92:e0:62:42:6c:1f:db:48:25:ba:d5:56:00:9e:bd:
         40:0e:ad:96:29:f0:56:83:f5:f2:d7:64:17:71:43:a9:e4:bd:
         0b:d7:f8:07:db:e6:99:9d:7e:e3:d4:08:e9:05:ff:51:bd:ab:
         2c:f3:88:7c:50:da:9c:15:eb:d5:c6:00:0e:02:31:5a:21:38:
         1b:44:8e:e4:95:75:fc:01:25:42:e2:7d:11:89:55:c4:ec:8b:
         b8:ea:1c:35:9d:96:56:4d:47:c0:f0:2d:7f:20:5d:bd:c2:66:
         78:5f:a2:9c:ad:13:80:94:f0:71:6d:33:de:2b:af:ec:a8:88:
         91:07:b1:01:8a:e5:c5:5e:85:3a:51:b1:29:59:c7:66:bd:89:
         4f:dc:41:b9:6e:9a:96:01:0e:5c:5e:ad:37:1d:88:5d:67:bd:
         56:97:98:63:27:0e:92:7b:cb:99:7b:25:da:07:cc:0e:9f:44:
         d4:17:3f:4b:a4:a5:aa:10:11:98:6c:b9:8a:dd:6f:7c:5e:18:
         8b:16:6a:14:06:03:ce:4c:c9:bf:b0:33:d7:21:dd:bf:b0:fb:
         71:20:37:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:44:00 2025 by rpki-client