Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9d84b3e2-f1b6-3879-881f-f3567670063c.roa
File:                     9d84b3e2-f1b6-3879-881f-f3567670063c.roa (raw, json)
Hash identifier:          FgIiam5QBAOk7TVlAA46J4YPnNIKWBwtLMpYqOru2QE=
Subject key identifier:   9A:7A:E4:4A:51:90:7E:52:A8:4B:11:72:11:64:B9:CD:F6:92:C5:E1
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A331B0579FABB0161B8527580
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9d84b3e2-f1b6-3879-881f-f3567670063c.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     9009
IP address blocks:        142.111.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1b:05:79:fa:bb:01:61:b8:52:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=d39b7572-2e02-4cc0-88ed-44ffcc0efbdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f9:25:7e:cc:1c:46:fb:c1:8b:26:34:05:7a:
                    14:3a:13:6a:f9:62:04:2c:32:89:97:4b:5a:b9:85:
                    04:bc:67:9b:f1:59:26:c9:a4:d2:65:fc:34:3e:7a:
                    10:27:04:76:6d:08:c0:38:af:65:68:fe:a2:00:5e:
                    20:a5:bb:92:2b:33:fe:38:1c:87:93:95:b0:50:58:
                    3d:d2:18:3b:4b:69:79:7c:9d:a8:a2:9e:5b:03:f9:
                    cd:56:f5:c4:d8:ef:0a:6a:b8:46:bc:6d:ae:cb:fe:
                    6d:87:f1:96:fa:9b:d9:00:43:48:18:0e:6d:97:45:
                    24:8a:94:e3:69:86:3f:13:f4:25:e9:8e:00:32:66:
                    1d:76:aa:d9:f5:f0:f3:37:9c:c5:17:cb:c7:3c:29:
                    c0:41:58:80:56:85:49:32:34:cc:96:a9:5e:61:d1:
                    f5:83:1b:e5:b9:64:4f:1d:33:25:19:e8:df:32:6e:
                    04:4c:3b:b9:ec:2e:68:0f:48:d2:e4:f8:ec:e4:1e:
                    63:3f:88:bc:bc:f7:a1:ad:d4:6c:0f:69:f4:bc:fb:
                    94:a1:a8:44:cb:47:f2:14:8a:62:22:81:df:b3:30:
                    95:1d:cc:89:05:76:38:7c:81:35:c0:1c:62:2b:f9:
                    bd:81:14:10:1b:e2:03:78:36:74:38:d3:43:83:7f:
                    06:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:7A:E4:4A:51:90:7E:52:A8:4B:11:72:11:64:B9:CD:F6:92:C5:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9d84b3e2-f1b6-3879-881f-f3567670063c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:bf:c1:64:85:2f:cd:26:a8:9d:54:86:09:56:12:8e:51:d0:
         33:59:47:03:4d:bd:11:e5:6b:4f:ad:31:75:14:cf:1a:17:e9:
         51:92:25:44:4a:45:63:43:27:b6:e6:f8:a8:07:fd:9f:4b:10:
         a7:bb:d3:f8:12:2e:14:59:75:2b:b4:4a:3d:7e:e5:0b:9c:49:
         1e:8d:e1:52:58:30:aa:5c:12:27:cc:16:e8:58:50:97:f5:36:
         ff:d9:d6:bf:32:dc:47:b9:52:27:5e:b8:50:db:41:ca:1e:d7:
         03:60:08:92:75:8c:90:a0:10:11:8f:10:2b:be:89:c7:83:bf:
         a6:d6:eb:5f:e7:79:28:85:1f:95:57:93:52:6d:c1:19:62:49:
         a3:c9:9d:9b:af:da:2a:b1:96:6e:2c:29:39:3c:ef:c5:9e:b4:
         8d:aa:f0:d4:4f:2d:6e:18:3e:96:fc:ae:db:ad:3e:eb:14:45:
         fe:87:94:53:37:5e:75:14:48:1e:04:14:18:f9:bb:84:99:56:
         d3:3a:f1:25:7d:2a:b4:6d:05:f5:45:ce:96:64:0f:35:df:4c:
         da:a4:dd:69:14:94:3d:c1:18:ca:8e:51:64:d2:df:48:d8:58:
         14:51:65:f0:8f:15:9a:2e:6f:6a:47:94:e4:f5:47:c6:62:df:
         e6:ae:4f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:09:09 2025 by rpki-client