Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/baed8ba7-87a0-3d51-94ca-2f5d67d2bffb.roa
File:                     baed8ba7-87a0-3d51-94ca-2f5d67d2bffb.roa (raw, json)
Hash identifier:          oeCcSRflK8FbJS3fKky2ga6qLUd0CguOxtY7tR8jv2U=
Subject key identifier:   55:07:88:B9:8B:69:17:22:E6:27:E3:52:87:94:37:66:13:34:8D:89
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858497F09AABEEE4A98A0F7DC5E80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/baed8ba7-87a0-3d51-94ca-2f5d67d2bffb.roa
Signing time:             Sat 12 Apr 2025 01:00:48 +0000
ROA not before:           Sat 12 Apr 2025 01:00:48 +0000
ROA not after:            Fri 11 Jul 2025 01:00:48 +0000
asID:                     7018
IP address blocks:        142.111.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7f:09:aa:be:ee:4a:98:a0:f7:dc:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 12 01:00:48 2025 GMT
            Not After : Jul 11 01:00:48 2025 GMT
        Subject: CN=4e6c45bf-5e8a-4faf-b7e7-d97b7dcf553d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5b:11:ef:87:14:0b:bc:e1:45:5d:a3:57:d0:
                    30:d6:9e:99:d7:c1:9e:9d:d5:05:28:c2:73:e4:29:
                    50:15:00:75:f0:19:ef:de:83:94:d9:e9:cf:48:3b:
                    13:b3:5e:55:0c:c6:d2:b4:da:21:1b:c7:df:33:f1:
                    2f:f0:d2:63:4e:2c:01:d6:f1:32:dc:b5:c8:c5:72:
                    f2:f3:3d:36:ea:10:f2:2c:0d:10:87:38:66:76:ca:
                    5f:6f:15:f8:c6:e5:d6:04:9f:9c:fd:92:c7:9e:64:
                    c3:68:ee:ee:ca:88:19:11:01:de:b7:fc:14:48:7e:
                    3a:d9:a5:bd:9e:94:62:94:98:ac:44:7c:4d:13:b2:
                    dd:62:3e:9d:ed:54:df:54:bb:32:a6:69:0f:8a:fe:
                    0f:d6:66:5b:0d:d2:07:70:4d:f8:40:31:31:1e:4d:
                    50:1b:ee:f4:b1:5e:1b:33:e1:e1:09:55:19:15:50:
                    b4:81:0a:34:4e:da:7e:f4:28:66:c3:d5:a8:79:2a:
                    86:fe:1e:bf:0c:9d:57:f0:89:73:9c:c0:60:25:26:
                    e4:1c:4d:6e:65:1f:fb:5f:ec:2d:06:93:d2:4c:75:
                    e7:09:4a:eb:2d:7c:d4:1a:fd:33:e7:4e:ad:8a:37:
                    10:db:90:8f:f5:68:7c:47:93:aa:5b:06:84:ed:fd:
                    87:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:07:88:B9:8B:69:17:22:E6:27:E3:52:87:94:37:66:13:34:8D:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/baed8ba7-87a0-3d51-94ca-2f5d67d2bffb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:d0:39:e6:6d:ea:50:9c:51:04:72:5d:c8:97:21:98:f8:1b:
         b3:86:dc:dd:c9:43:8a:d6:f3:89:eb:c1:80:46:8e:2a:c4:f8:
         b7:3b:34:4e:1e:ea:8c:eb:91:75:99:36:c6:60:d6:42:75:50:
         99:77:fb:d9:70:7f:0a:86:72:c9:ce:63:af:e5:5e:af:8d:32:
         71:3b:9e:ab:48:a0:1f:f5:0f:d3:ef:27:02:14:93:d0:4d:de:
         16:8d:71:37:e6:9d:4e:fe:ed:7e:36:c7:f5:14:3f:ad:b5:f7:
         8a:ea:82:75:1b:f6:64:04:5d:18:24:79:13:0e:b3:96:c7:35:
         f4:dd:35:38:46:8a:0c:ac:23:4b:b6:19:70:99:32:6b:0f:32:
         20:63:ad:56:3d:a6:12:a9:32:38:4d:62:df:88:05:95:e0:fe:
         2f:14:7b:b4:df:03:a3:22:e0:68:d2:5b:6e:e2:e9:2e:50:63:
         39:b8:d0:42:cd:7f:dc:e6:36:d3:6d:45:da:1c:a5:d9:e3:16:
         cb:2e:c3:5a:a0:d0:a0:20:ad:2d:23:1b:c5:eb:16:3c:92:ec:
         c4:17:41:0e:4b:11:75:87:ab:3a:b9:6e:62:13:70:0f:d9:1c:
         e6:65:bf:df:17:f5:21:d4:56:07:21:dc:c9:42:8b:cc:fb:5e:
         b3:40:90:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl/Caq+7kqYoPfcXoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDQxMjAxMDA0OFoXDTI1MDcxMTAxMDA0OFowLzEtMCsGA1UEAxMk
NGU2YzQ1YmYtNWU4YS00ZmFmLWI3ZTctZDk3YjdkY2Y1NTNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVsR74cUC7zhRV2jV9Aw1p6Z18GendUFKMJz
5ClQFQB18Bnv3oOU2enPSDsTs15VDMbStNohG8ffM/Ev8NJjTiwB1vEy3LXIxXLy
8z026hDyLA0QhzhmdspfbxX4xuXWBJ+c/ZLHnmTDaO7uyogZEQHet/wUSH462aW9
npRilJisRHxNE7LdYj6d7VTfVLsypmkPiv4P1mZbDdIHcE34QDExHk1QG+70sV4b
M+HhCVUZFVC0gQo0Ttp+9Chmw9WoeSqG/h6/DJ1X8IlznMBgJSbkHE1uZR/7X+wt
BpPSTHXnCUrrLXzUGv0z506tijcQ25CP9Wh8R5OqWwaE7f2HkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFUHiLmLaRci5ifjUoeUN2YTNI2JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYmFlZDhiYTctODdhMC0z
ZDUxLTk0Y2EtMmY1ZDY3ZDJiZmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm9yMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABnQOeZt6lCcUQRyXciXIZj4G7OG3N3JQ4rW84nrwYBGjirE+Lc7NE4e
6ozrkXWZNsZg1kJ1UJl3+9lwfwqGcsnOY6/lXq+NMnE7nqtIoB/1D9PvJwIUk9BN
3haNcTfmnU7+7X42x/UUP62194rqgnUb9mQEXRgkeRMOs5bHNfTdNThGigysI0u2
GXCZMmsPMiBjrVY9phKpMjhNYt+IBZXg/i8Ue7TfA6Mi4GjSW27i6S5QYzm40ELN
f9zmNtNtRdocpdnjFssuw1qg0KAgrS0jG8XrFjyS7MQXQQ5LEXWHqzq5bmITcA/Z
HOZlv98X9SHUVgch3MlCi8z7XrNAkDU=
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:04:44 2025 by rpki-client