Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/95e7cb0e-590d-309d-9bc5-3cde69b6e037.roa
File:                     95e7cb0e-590d-309d-9bc5-3cde69b6e037.roa (raw, json)
Hash identifier:          fpNFeiDTSKR563RJ9eRuH5P1COxlXlPC5fMAM/1jvFk=
Subject key identifier:   A0:FB:3D:29:C9:DF:55:40:B8:C5:3A:F9:10:28:A8:95:17:6B:A4:DF
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858498E649F01B396B0ECA511E000
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/95e7cb0e-590d-309d-9bc5-3cde69b6e037.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     18779
IP address blocks:        142.111.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:9f:01:b3:96:b0:ec:a5:11:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=b69071c9-df1d-418b-bef8-4e68f4135225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:60:cf:e1:6b:8b:d0:40:1e:73:45:7f:ae:b9:
                    b6:98:7b:2d:d8:0c:ef:40:12:c6:c9:63:3e:43:cd:
                    ff:96:5b:4c:40:df:bb:1c:7c:b0:80:79:7b:20:21:
                    ac:fb:f9:f1:5b:2d:98:a1:1b:2d:de:4e:72:95:38:
                    d6:08:53:ab:7b:ac:03:22:64:be:84:70:fb:31:b9:
                    7a:37:02:89:04:6a:3b:1b:98:13:da:66:65:2c:e7:
                    b7:19:91:bb:1d:e7:f5:9e:2d:39:78:ad:3c:75:67:
                    2d:16:5c:97:27:69:de:c2:53:6c:16:f3:c5:11:2e:
                    39:64:5b:34:d6:31:d9:09:d3:1d:49:f0:d2:b8:f3:
                    c8:3e:49:c6:50:7c:b1:b9:57:d5:14:6f:af:da:c1:
                    0d:ae:de:8f:13:c7:98:4e:5c:57:b0:38:58:3a:89:
                    5a:a0:c9:eb:50:d3:48:41:63:db:0c:87:2b:71:2e:
                    af:74:82:56:da:d7:98:98:80:ad:c3:e6:94:b7:a6:
                    21:46:35:de:e9:2b:36:93:da:97:ab:7a:c7:89:4e:
                    6b:93:cf:a2:6c:1d:81:a8:ee:b1:f2:da:1d:8b:e7:
                    c6:ba:e2:af:c9:06:94:85:eb:d8:da:58:57:0a:66:
                    4e:73:16:a4:37:c4:cb:c3:f9:50:01:85:88:e2:c5:
                    e0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:FB:3D:29:C9:DF:55:40:B8:C5:3A:F9:10:28:A8:95:17:6B:A4:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/95e7cb0e-590d-309d-9bc5-3cde69b6e037.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:09:58:f8:8e:91:04:3f:47:fb:59:8d:2c:13:5d:c4:e8:12:
         17:86:62:32:86:23:e8:5c:0e:10:5c:0a:ae:9e:79:9d:38:ab:
         86:ee:f7:cd:2d:f4:3e:dc:56:84:9f:8c:69:f1:d7:58:89:f3:
         75:b9:3c:b9:48:fd:00:af:1b:23:c4:cc:75:94:aa:4b:c3:0f:
         b2:41:22:8f:18:07:13:bd:1e:3a:85:96:0e:a0:dd:00:b7:29:
         2e:61:fc:1d:29:e6:3a:15:5a:fe:49:ea:7f:bf:e9:fd:47:89:
         48:ba:af:1d:4c:e4:57:48:ee:b5:7e:ff:10:62:01:30:79:34:
         a9:14:43:71:d2:71:02:68:3f:2e:4d:11:29:74:75:a5:e4:37:
         f7:a6:c6:cb:d5:42:92:49:3b:df:20:82:61:d2:55:78:9c:e2:
         9d:c5:9a:ba:4b:e2:a6:12:37:81:c0:8a:1c:7e:be:fe:6a:58:
         5a:31:c6:e7:9e:bf:2b:b5:a7:5d:d7:09:c5:b6:75:04:0d:db:
         d8:9d:eb:9a:df:42:0b:7d:c8:78:f5:9a:04:ee:27:0a:69:37:
         9d:fc:f3:2a:35:27:b8:62:1e:40:3d:bf:0c:13:48:e4:ee:a3:
         7b:1c:9c:f1:f7:4b:68:91:20:4d:3c:03:86:ac:51:1b:6d:a6:
         52:e5:b7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:58:29 2025 by rpki-client