Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/864f994d-b9af-3c1c-a51f-d428fcf9044f.roa
File:                     864f994d-b9af-3c1c-a51f-d428fcf9044f.roa (raw, json)
Hash identifier:          2NJdO2C2nOPK1GGTXhyHjrKmQzi0gGLUD95XZ8V8UEo=
Subject key identifier:   3A:84:A8:AB:31:DB:BD:24:D8:8D:96:6D:F5:A7:75:25:DC:C0:17:E6
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584965E983F66A2EB430CADCF460
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/864f994d-b9af-3c1c-a51f-d428fcf9044f.roa
Signing time:             Thu 03 Apr 2025 01:00:46 +0000
ROA not before:           Thu 03 Apr 2025 01:00:46 +0000
ROA not after:            Wed 02 Jul 2025 01:00:46 +0000
asID:                     401152
IP address blocks:        142.111.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:e9:83:f6:6a:2e:b4:30:ca:dc:f4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr  3 01:00:46 2025 GMT
            Not After : Jul  2 01:00:46 2025 GMT
        Subject: CN=00afbb7d-4a43-4857-8564-49bfa909fa6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bd:d9:34:28:6e:f4:ed:e3:32:b3:96:3b:fa:
                    bb:6a:45:56:f5:00:df:82:3f:25:c1:63:45:e0:53:
                    79:f7:e4:37:2f:d1:32:82:9f:30:5d:43:65:95:5f:
                    07:c0:1e:c0:12:c0:ce:13:3c:74:50:f1:e0:7a:75:
                    bd:a9:59:2d:60:74:d3:1f:b2:1a:9d:93:b6:84:00:
                    e6:42:76:34:02:7a:f2:37:42:73:f0:3e:b1:95:c0:
                    b8:81:77:63:8e:d5:6f:78:47:91:76:51:2e:ce:71:
                    00:5e:ee:5f:0d:ae:35:fb:be:bb:49:13:09:f1:5c:
                    03:fd:f0:4d:21:9a:4f:50:ae:14:00:06:7c:cc:e9:
                    fa:82:85:90:99:99:1e:e5:ca:69:e0:c0:5a:73:00:
                    1d:38:1c:b3:4d:65:3f:2b:83:b9:ad:a2:00:3b:dd:
                    a7:bc:d8:10:fa:0a:86:75:e5:5c:a2:1e:73:1e:ca:
                    f5:c7:a6:bb:5d:51:ac:59:aa:87:c9:72:c5:54:66:
                    81:69:b1:00:c9:54:6d:54:53:a8:7d:6f:44:4f:77:
                    6d:4b:0e:3e:05:d9:9f:4d:a4:7a:a7:f9:04:a3:86:
                    e8:50:ff:08:bf:ba:df:d3:d0:29:ad:ba:0b:fd:fd:
                    7b:31:9a:78:cf:37:7e:74:f7:f4:4a:ca:5c:99:c7:
                    ae:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:84:A8:AB:31:DB:BD:24:D8:8D:96:6D:F5:A7:75:25:DC:C0:17:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/864f994d-b9af-3c1c-a51f-d428fcf9044f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:fc:0d:56:df:1d:ce:ac:45:73:19:62:bb:9f:e1:a5:3a:cb:
         5e:0e:ea:16:9a:1c:f3:06:2b:bf:8b:40:42:a6:0d:a2:56:61:
         21:10:5f:c0:6c:74:69:97:ee:ad:b8:6d:e3:97:eb:2c:8a:32:
         2e:9e:4b:38:27:50:3e:74:0e:1b:73:a3:2c:de:15:6b:8a:c5:
         e0:b8:d7:80:96:0a:20:d6:a9:15:92:da:6b:4a:50:c5:71:4e:
         d1:c5:bf:f5:01:e7:6a:80:4c:f6:c3:44:3d:96:8e:32:55:97:
         83:d4:1c:9a:b9:04:67:b3:b7:ea:82:68:b5:a1:67:27:53:cb:
         ae:d0:f7:da:68:98:f0:1e:8b:eb:38:8d:9e:c1:5d:04:33:6c:
         d0:98:31:ed:ba:99:41:16:3d:b5:55:3a:db:db:4c:4b:8f:11:
         6e:14:58:ae:ca:52:18:bb:80:b6:c0:d7:e8:a0:91:d6:6c:23:
         5d:5b:91:68:2a:43:ed:e0:0f:93:d3:3f:4c:d3:f2:7d:63:20:
         95:06:2a:2f:80:67:40:86:e8:ec:5b:42:7c:d2:98:20:a0:e0:
         c6:39:8d:b1:94:24:a4:62:66:39:ef:dd:4d:fa:3e:6d:42:f4:
         cd:62:4e:d8:3c:ca:73:0b:9e:d7:ce:1a:2b:95:f8:2d:aa:37:
         8f:47:20:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:03:47 2025 by rpki-client