Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cae8c4f0-1476-3851-9565-a3dde3601149.roa
File:                     cae8c4f0-1476-3851-9565-a3dde3601149.roa (raw, json)
Hash identifier:          J7LyZA0JL1fZdaTLXyJSbcP3Dj+jgWrkfOefC23MxFI=
Subject key identifier:   41:C0:F2:EA:3A:F6:1A:1B:E6:CA:CF:D1:E5:D6:EE:4B:EA:42:CF:C8
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285849D8052424BDF98A544B2DEAA0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cae8c4f0-1476-3851-9565-a3dde3601149.roa
Signing time:             Tue 13 May 2025 21:58:47 +0000
ROA not before:           Tue 13 May 2025 21:58:47 +0000
ROA not after:            Mon 11 Aug 2025 21:58:47 +0000
asID:                     7385
IP address blocks:        142.111.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:05:24:24:bd:f9:8a:54:4b:2d:ea:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 13 21:58:47 2025 GMT
            Not After : Aug 11 21:58:47 2025 GMT
        Subject: CN=57fc57ae-f596-47ad-b1d8-0eebf8b11e84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f3:68:db:37:fc:f7:76:c6:f6:1c:59:5e:0d:
                    19:3b:6b:c3:ac:c5:e9:42:41:95:fd:69:03:b4:c1:
                    11:ef:7c:3c:0a:13:c5:56:1e:65:ca:3d:d4:8b:5c:
                    55:89:79:cd:63:d8:8e:6e:d1:27:5a:97:73:eb:53:
                    16:e2:9b:54:88:65:d1:0d:5e:5d:09:99:e7:68:03:
                    d9:0b:82:9d:d9:94:53:71:38:ac:56:f0:76:27:e6:
                    9a:78:26:24:fc:e7:fb:69:97:f9:65:ca:a6:20:b7:
                    ac:03:ab:1f:7c:76:de:76:15:ba:7b:d5:a1:43:2f:
                    13:9f:70:4a:03:46:c4:f0:28:07:b1:22:63:c8:c0:
                    40:fe:86:9f:34:35:f1:25:2b:a5:92:9f:7e:bd:fd:
                    00:ff:38:ab:b2:26:6e:f4:cc:40:83:48:eb:1f:d9:
                    f9:a0:93:0f:35:a5:ec:7f:6b:14:da:30:63:9d:a1:
                    df:41:f4:92:e1:5d:91:b9:94:cd:cb:8b:19:a3:d1:
                    fc:5d:d4:9c:55:cc:0f:52:aa:66:24:38:ee:90:78:
                    ff:23:77:11:3e:b0:74:29:f8:1a:68:b4:86:8b:cf:
                    9e:72:2c:24:80:1d:07:80:3b:ac:72:8a:13:ca:62:
                    cd:2a:f3:c0:e3:0c:7a:85:02:a1:7c:a2:d8:ea:37:
                    1c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C0:F2:EA:3A:F6:1A:1B:E6:CA:CF:D1:E5:D6:EE:4B:EA:42:CF:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cae8c4f0-1476-3851-9565-a3dde3601149.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:d4:4b:3e:bd:3c:2e:d6:d5:82:9e:90:9b:8d:9c:63:9d:79:
         0a:15:ff:f4:ca:4e:98:ca:7d:36:41:4e:59:e7:6c:64:29:78:
         60:6f:f7:2d:4b:54:b5:7a:a0:02:5e:3a:e9:c8:af:6a:d5:ef:
         ff:c9:82:49:46:4e:8b:26:b5:76:af:a2:4e:7f:86:94:b1:36:
         0e:be:11:12:ca:39:df:39:15:41:5a:13:ed:a8:73:25:ea:4b:
         13:86:97:a9:f3:1e:72:e6:0c:e0:b7:32:90:9d:15:ff:30:16:
         b1:d2:de:51:1b:b9:03:84:2f:ba:91:4b:b5:5d:76:2d:4f:34:
         91:d4:c7:8b:aa:a4:02:e6:e5:fe:1a:d7:f6:aa:69:c5:27:ce:
         ca:10:c0:77:f6:d7:16:4f:68:24:85:d2:08:2f:5b:40:68:9c:
         90:4d:49:98:12:8e:9f:39:96:af:b4:c6:41:09:83:08:cb:a8:
         26:bd:a5:ae:85:48:90:12:24:23:96:f9:aa:52:57:b6:82:ec:
         dc:9e:53:03:51:52:95:28:82:9c:cf:43:aa:21:16:7d:74:cf:
         da:8e:cd:90:b0:3b:b8:bb:32:b7:49:86:3e:57:99:93:75:26:
         e8:6d:62:9d:6e:06:20:7c:f9:94:94:99:de:df:ea:17:1a:9e:
         4e:44:79:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYBSQkvfmKVEst6qAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDUxMzIxNTg0N1oXDTI1MDgxMTIxNTg0N1owLzEtMCsGA1UEAxMk
NTdmYzU3YWUtZjU5Ni00N2FkLWIxZDgtMGVlYmY4YjExZTg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvNo2zf893bG9hxZXg0ZO2vDrMXpQkGV/WkD
tMER73w8ChPFVh5lyj3Ui1xViXnNY9iObtEnWpdz61MW4ptUiGXRDV5dCZnnaAPZ
C4Kd2ZRTcTisVvB2J+aaeCYk/Of7aZf5ZcqmILesA6sffHbedhW6e9WhQy8Tn3BK
A0bE8CgHsSJjyMBA/oafNDXxJSulkp9+vf0A/zirsiZu9MxAg0jrH9n5oJMPNaXs
f2sU2jBjnaHfQfSS4V2RuZTNy4sZo9H8XdScVcwPUqpmJDjukHj/I3cRPrB0Kfga
aLSGi8+eciwkgB0HgDuscooTymLNKvPA4wx6hQKhfKLY6jcc+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEHA8uo69hob5srP0eXW7kvqQs/IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvY2FlOGM0ZjAtMTQ3Ni0z
ODUxLTk1NjUtYTNkZGUzNjAxMTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm87MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHnUSz69PC7W1YKekJuNnGOdeQoV//TKTpjKfTZBTlnnbGQpeGBv9y1L
VLV6oAJeOunIr2rV7//JgklGTosmtXavok5/hpSxNg6+ERLKOd85FUFaE+2ocyXq
SxOGl6nzHnLmDOC3MpCdFf8wFrHS3lEbuQOEL7qRS7Vddi1PNJHUx4uqpALm5f4a
1/aqacUnzsoQwHf21xZPaCSF0ggvW0BonJBNSZgSjp85lq+0xkEJgwjLqCa9pa6F
SJASJCOW+apSV7aC7NyeUwNRUpUogpzPQ6ohFn10z9qOzZCwO7i7MrdJhj5XmZN1
JuhtYp1uBiB8+ZSUmd7f6hcank5EeVs=
-----END CERTIFICATE-----
Generated at Tue Jun 17 11:48:34 2025 by rpki-client