Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a7155a47-6b9a-380b-ae9c-c61dfaae0a00.roa
File:                     a7155a47-6b9a-380b-ae9c-c61dfaae0a00.roa (raw, json)
Hash identifier:          n5lK7LTF1sqC2MoRhUfFrkZVLkp+fsBOUYtMQSHbgEk=
Subject key identifier:   2A:F6:9D:28:C8:40:85:36:F3:92:BE:68:95:DD:4E:ED:C4:BD:4E:81
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A0D6A9A1C32BB0AFB93B58960
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a7155a47-6b9a-380b-ae9c-c61dfaae0a00.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     27411
IP address blocks:        142.111.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:9a:1c:32:bb:0a:fb:93:b5:89:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=f901efb6-0d17-4986-9406-d05a20b19fef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ca:69:18:46:8a:39:76:99:41:4f:84:52:df:
                    7a:0a:c0:d4:de:11:7f:bf:19:9b:1e:25:0b:f1:c4:
                    3c:3c:c9:94:20:12:90:76:24:ac:cf:63:fb:b7:e2:
                    c3:e5:e9:a1:02:84:c1:29:e2:85:bf:15:3e:7e:2e:
                    ac:ba:2d:c6:c1:cd:07:63:02:f7:c8:0a:44:00:78:
                    93:6b:e8:5d:c5:cc:59:45:e6:19:b5:f3:8d:de:41:
                    24:3e:ac:62:54:0b:b1:66:c4:86:2f:e1:c2:36:27:
                    d5:30:0d:18:c1:52:59:72:57:30:ad:e0:65:af:8d:
                    28:fa:97:f8:21:49:b2:d1:c0:5c:fe:75:8b:0c:b7:
                    69:ba:2f:dd:42:66:c5:ef:0a:0a:75:7b:ed:6e:6d:
                    6e:24:af:b7:f4:e6:8b:05:98:6e:2b:b0:36:8d:46:
                    fe:68:2f:a7:1d:16:3f:04:fe:c6:5b:eb:c2:53:05:
                    d7:39:18:44:ff:37:b2:e4:d7:fe:5c:28:22:29:6c:
                    81:ed:4b:fa:48:75:3f:8f:b4:a8:9e:7b:9b:27:56:
                    c6:f0:fe:e2:2f:e7:ac:05:f3:aa:4e:ba:8d:3b:24:
                    81:ae:03:51:08:76:37:87:92:bb:79:04:77:60:7d:
                    5b:c4:76:78:a9:3b:e6:fc:25:43:c6:84:63:58:be:
                    c6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F6:9D:28:C8:40:85:36:F3:92:BE:68:95:DD:4E:ED:C4:BD:4E:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a7155a47-6b9a-380b-ae9c-c61dfaae0a00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:01:2c:4f:2d:71:c5:35:35:e3:5c:43:bf:82:1a:2a:dd:ff:
         87:f9:ed:fa:d3:dd:d9:b3:8c:03:66:b9:51:60:7c:28:18:05:
         28:d9:25:6c:6b:ad:52:ff:34:ea:e3:8a:53:f0:73:8a:e6:fd:
         aa:de:63:49:f4:76:28:77:97:89:1c:55:14:31:9f:34:df:cf:
         e2:9b:03:22:c6:6d:fd:9e:a9:0a:6e:3c:1f:7c:ed:6f:a5:32:
         dd:3b:88:a6:76:4e:1f:1e:07:7f:85:85:ac:85:f2:5a:48:c1:
         3f:83:13:8a:d8:b0:4e:44:eb:34:c8:91:62:e6:0c:ab:14:53:
         57:52:6c:36:cf:f5:cf:a0:76:f2:4f:2b:ee:54:39:5c:84:17:
         93:6e:91:a4:a8:00:95:37:10:b8:67:c5:d1:60:3e:46:77:69:
         da:7f:63:f6:1c:46:33:01:64:4e:5c:9d:e3:69:6b:bd:21:13:
         bf:e1:11:bd:39:58:3e:9a:77:c5:ca:c7:62:a7:f4:c1:01:4b:
         d3:d5:54:ee:f8:4b:c4:1f:cf:8f:01:a6:d1:30:44:63:1d:a5:
         9f:bf:26:22:88:95:9b:3d:8c:ef:b2:c7:ff:52:fc:3b:0d:a0:
         64:8c:16:26:0e:ae:23:28:6f:3f:bf:1b:05:24:88:3f:f7:c1:
         9b:18:d8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:56:54 2025 by rpki-client