Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cae8c4f0-1476-3851-9565-a3dde3601149.roa
File:                     cae8c4f0-1476-3851-9565-a3dde3601149.roa (raw, json)
Hash identifier:          dhm3bTKVYLLYZ+NtLY7Ibta8FBoziOOEtHJ2L+kRF9A=
Subject key identifier:   2F:C3:FF:AD:07:B8:45:8F:6F:D2:00:7E:58:88:07:C8:1A:D1:C2:FA
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584AB7B635B600DBD2F916438720
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cae8c4f0-1476-3851-9565-a3dde3601149.roa
Signing time:             Sat 02 Aug 2025 01:00:32 +0000
ROA not before:           Sat 02 Aug 2025 01:00:32 +0000
ROA not after:            Fri 31 Oct 2025 01:00:32 +0000
asID:                     7385
IP address blocks:        142.111.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b7:b6:35:b6:00:db:d2:f9:16:43:87:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug  2 01:00:32 2025 GMT
            Not After : Oct 31 01:00:32 2025 GMT
        Subject: CN=5831f343-7572-4eba-8d26-b4a965040c5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:76:0e:a3:8a:08:be:c0:ac:7f:fb:49:f8:c2:
                    6f:d6:d5:c0:c8:1b:ec:bc:d8:f9:88:d0:5c:19:91:
                    5c:de:e9:e6:66:7c:1a:c4:7c:2d:38:4a:1b:34:58:
                    28:89:24:86:13:95:e1:94:cd:86:a3:0f:17:ac:db:
                    bd:4c:a2:8f:4b:9b:84:4e:a3:b6:4f:f8:86:33:65:
                    e2:d5:dc:14:5f:7b:d9:bb:5b:16:99:ca:a7:b6:14:
                    c2:b0:17:9e:cd:80:0c:21:86:3c:52:80:86:6a:7c:
                    1c:07:60:78:2f:87:33:4c:de:4c:07:e1:98:38:91:
                    89:35:73:c8:73:97:4b:5e:f4:48:75:cd:d8:97:23:
                    07:b2:ba:0d:4a:4b:58:4b:ad:60:63:1d:ab:68:c6:
                    08:32:16:6a:d2:65:27:fc:20:e8:bd:c4:90:5d:c9:
                    24:84:79:eb:54:c9:90:c2:5e:53:13:98:1d:8d:66:
                    8e:7d:d9:d8:4e:04:d8:f0:ad:0e:db:6d:3c:3d:a4:
                    39:88:00:78:6d:65:31:a7:28:79:66:58:98:79:ba:
                    00:51:73:b3:01:bd:03:0d:e0:b0:47:b3:1d:a0:95:
                    d2:f6:83:a0:b4:a3:d3:76:de:04:d5:44:8c:79:85:
                    cc:be:d1:75:a0:b1:fe:62:50:61:74:da:75:cd:40:
                    44:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C3:FF:AD:07:B8:45:8F:6F:D2:00:7E:58:88:07:C8:1A:D1:C2:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cae8c4f0-1476-3851-9565-a3dde3601149.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:e1:03:7b:5b:75:30:dd:36:9e:7f:55:49:26:9f:f8:c3:b0:
         1a:0c:05:87:65:2d:14:39:8f:7b:68:96:de:27:f1:8d:03:40:
         d3:2b:5d:bf:d0:fb:44:a6:a3:08:2b:41:9e:65:b4:5c:da:1a:
         f7:66:89:f2:8f:85:4d:17:0e:d9:08:1d:13:f8:63:e8:9f:17:
         d9:e7:1e:fb:0e:f4:26:33:fc:22:b6:f5:22:6a:01:17:11:82:
         ac:a1:31:a3:97:53:56:c4:fb:da:27:0c:14:f4:1c:71:9d:55:
         92:b1:19:aa:70:ed:b5:10:c1:c9:aa:c9:0a:0f:6d:ad:ce:a9:
         dc:09:18:46:c2:f3:af:2a:b6:a6:0e:e5:6f:63:ee:c1:4f:eb:
         df:37:19:b8:3b:91:ed:74:5a:3a:41:26:dc:0c:24:44:ac:97:
         98:9a:23:cc:78:3d:81:5a:11:81:85:aa:e2:d8:2e:98:b3:8a:
         f4:79:7b:03:6f:7d:e8:c6:81:06:3c:7a:56:9f:43:ce:9e:29:
         9b:61:0e:1d:08:75:64:01:54:bc:f0:80:32:3a:c5:9e:6b:d5:
         2e:6c:0f:6c:cf:d3:93:f6:d7:6e:8a:2a:63:de:27:d3:4e:71:
         d3:b0:f3:66:7a:6b:fc:a0:aa:27:51:42:c8:82:cf:0b:d1:c4:
         11:dc:b7:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq3tjW2ANvS+RZDhyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk
NTgzMWYzNDMtNzU3Mi00ZWJhLThkMjYtYjRhOTY1MDQwYzVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXYOo4oIvsCsf/tJ+MJv1tXAyBvsvNj5iNBc
GZFc3unmZnwaxHwtOEobNFgoiSSGE5XhlM2Gow8XrNu9TKKPS5uETqO2T/iGM2Xi
1dwUX3vZu1sWmcqnthTCsBeezYAMIYY8UoCGanwcB2B4L4czTN5MB+GYOJGJNXPI
c5dLXvRIdc3YlyMHsroNSktYS61gYx2raMYIMhZq0mUn/CDovcSQXckkhHnrVMmQ
wl5TE5gdjWaOfdnYTgTY8K0O2208PaQ5iAB4bWUxpyh5ZliYeboAUXOzAb0DDeCw
R7MdoJXS9oOgtKPTdt4E1USMeYXMvtF1oLH+YlBhdNp1zUBE1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC/D/60HuEWPb9IAfliIB8ga0cL6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvY2FlOGM0ZjAtMTQ3Ni0z
ODUxLTk1NjUtYTNkZGUzNjAxMTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm87MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADvhA3tbdTDdNp5/VUkmn/jDsBoMBYdlLRQ5j3tolt4n8Y0DQNMrXb/Q
+0SmowgrQZ5ltFzaGvdmifKPhU0XDtkIHRP4Y+ifF9nnHvsO9CYz/CK29SJqARcR
gqyhMaOXU1bE+9onDBT0HHGdVZKxGapw7bUQwcmqyQoPba3OqdwJGEbC868qtqYO
5W9j7sFP6983Gbg7ke10WjpBJtwMJESsl5iaI8x4PYFaEYGFquLYLpizivR5ewNv
fejGgQY8elafQ86eKZthDh0IdWQBVLzwgDI6xZ5r1S5sD2zP05P2126KKmPeJ9NO
cdOw82Z6a/ygqidRQsiCzwvRxBHct3A=
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:01:51 2025 by rpki-client