Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b6776291-7f7a-36c4-8151-36df52f2f649.roa
File:                     b6776291-7f7a-36c4-8151-36df52f2f649.roa (raw, json)
Hash identifier:          0RenJmOBrQfBlHxa/ZqSMNP0Nz4PhWILBqkyD1hRrvM=
Subject key identifier:   85:71:DD:81:A7:E3:50:5C:0A:DE:6E:0C:ED:90:EF:8D:74:3D:2E:00
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285849D805240CE44D8D06F38406E0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b6776291-7f7a-36c4-8151-36df52f2f649.roa
Signing time:             Tue 13 May 2025 21:58:47 +0000
ROA not before:           Tue 13 May 2025 21:58:47 +0000
ROA not after:            Mon 11 Aug 2025 21:58:47 +0000
asID:                     7385
IP address blocks:        142.111.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:05:24:0c:e4:4d:8d:06:f3:84:06:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 13 21:58:47 2025 GMT
            Not After : Aug 11 21:58:47 2025 GMT
        Subject: CN=8b0db93c-9490-4823-a285-3162284a3492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a1:d8:61:2a:8a:89:5b:ec:bf:19:9d:d0:6c:
                    99:cd:f5:9d:e8:85:1c:84:9a:e7:55:6f:1b:f1:7e:
                    d7:99:6a:a8:6c:78:21:f8:1f:7a:06:16:53:44:44:
                    3e:21:9a:15:56:09:ac:1a:e2:a8:f5:e2:50:6f:a3:
                    04:71:97:36:f4:b5:ef:50:9d:05:b2:21:f7:3e:b1:
                    8d:09:8c:0a:8f:fb:ce:aa:28:9b:f6:99:93:97:29:
                    b7:67:06:c3:26:f1:3f:a1:76:9e:98:4e:23:43:e0:
                    99:27:56:a3:31:b9:d3:6f:cb:f1:0e:cb:90:eb:98:
                    e2:da:56:19:b6:cc:3f:be:17:6e:b5:45:13:81:a3:
                    79:9d:18:a5:5a:35:65:64:50:42:52:19:55:1a:7c:
                    6b:86:d9:78:80:78:21:22:fc:27:7a:00:df:4b:08:
                    6c:0c:36:20:af:5b:c4:3d:c0:2d:99:2f:df:a9:66:
                    da:55:cd:bf:f2:aa:e1:a1:f9:01:6f:d5:d5:b8:b1:
                    22:f0:11:20:01:61:e0:4b:45:7c:f2:86:82:50:a6:
                    62:77:fd:eb:a9:89:fc:80:94:50:84:32:0b:a8:1d:
                    13:70:24:c7:58:ca:57:ee:85:06:e6:1a:cb:0d:74:
                    57:90:e7:63:6d:c5:34:b3:48:24:57:0c:04:42:d7:
                    47:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:71:DD:81:A7:E3:50:5C:0A:DE:6E:0C:ED:90:EF:8D:74:3D:2E:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b6776291-7f7a-36c4-8151-36df52f2f649.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:6e:76:61:4d:ce:d1:6d:75:6c:84:6d:e3:22:08:b1:fa:1b:
         ad:e8:6d:b7:16:a7:92:19:f4:46:44:48:24:19:ad:a7:f3:9c:
         60:9a:ed:ae:1a:c4:19:52:6f:a6:00:ad:33:a5:b4:5d:9b:a3:
         43:cc:48:32:1b:8b:ce:2f:f9:ce:4a:44:3a:3c:10:f2:a7:e1:
         84:96:7c:a9:11:a1:b4:be:59:f7:93:58:18:59:fd:5f:22:a2:
         80:f7:54:61:24:35:1f:d2:6b:17:37:fd:d2:31:ea:33:5d:cd:
         8e:6b:3e:e2:be:0c:f0:9e:08:ed:b1:cf:47:e5:c6:ea:d0:f5:
         0e:06:41:a3:d9:6d:fb:3e:89:22:17:c8:2c:47:da:33:ab:c2:
         4e:2b:6b:af:61:d5:0f:37:e2:c3:53:3a:70:3f:78:c0:cb:4f:
         46:42:ef:44:ae:e8:36:31:f0:df:2b:1b:03:f9:a3:72:d7:cc:
         0e:1c:23:62:04:95:85:dd:be:a4:4d:a5:9e:0a:3e:b0:3c:8a:
         90:4a:4d:ad:a7:60:ff:7e:e9:ac:40:48:59:a7:dc:bc:4e:13:
         03:48:dc:2c:6f:70:54:10:e8:d1:17:ea:3d:ec:a8:75:fb:d5:
         d1:e2:29:bb:9d:9e:7b:3d:91:ad:e4:f5:b7:45:0c:54:f4:2d:
         9c:fc:9d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:32:41 2025 by rpki-client