Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/14833538-e490-3112-ab0f-e8a6bfecdcc8.roa
File:                     14833538-e490-3112-ab0f-e8a6bfecdcc8.roa (raw, json)
Hash identifier:          OcsW9OOGXnDx98KZeuq9LSXKYP/UAeydG8o5n1OxIJ4=
Subject key identifier:   DA:3F:2D:B4:22:A5:34:7B:05:83:ED:BF:D8:C2:B2:52:6B:22:07:2B
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A87B8AB102615D08BCD6E32A0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/14833538-e490-3112-ab0f-e8a6bfecdcc8.roa
Signing time:             Tue 15 Jul 2025 20:26:58 +0000
ROA not before:           Tue 15 Jul 2025 20:26:58 +0000
ROA not after:            Mon 13 Oct 2025 20:26:58 +0000
asID:                     44559
IP address blocks:        142.111.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:87:b8:ab:10:26:15:d0:8b:cd:6e:32:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 15 20:26:58 2025 GMT
            Not After : Oct 13 20:26:58 2025 GMT
        Subject: CN=7c185614-f668-4794-aec9-f9378ae8e357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fd:ae:56:6a:cb:81:60:be:26:be:5c:46:42:
                    be:07:c3:f1:90:3b:4d:82:3f:c9:30:c2:2c:fe:69:
                    8c:d8:26:76:ec:b9:d3:de:50:8c:6b:25:d7:7d:f3:
                    7a:db:2e:72:d4:6e:34:f1:8a:b8:17:6d:ce:f0:c7:
                    d0:39:82:66:22:c0:c3:18:52:94:0b:b8:5c:f0:c5:
                    67:4d:6a:b9:d3:14:7c:e8:c9:32:0f:eb:77:94:04:
                    76:67:c0:3e:b9:61:c5:6b:49:f8:b2:fe:99:a3:42:
                    7d:ed:25:99:71:11:db:ba:6c:98:c4:51:27:cc:5a:
                    f2:46:30:12:96:00:be:28:b7:2e:59:62:e4:41:9a:
                    d6:66:d2:fc:f2:87:0a:9e:b5:c2:68:14:06:3e:bc:
                    d3:6e:87:4f:97:79:a9:47:0b:cb:5a:4f:f0:c5:60:
                    11:2f:45:1d:a2:6d:15:a6:5e:06:b7:90:ca:25:f3:
                    0d:dd:bf:be:78:3f:04:43:2a:a5:8b:06:20:72:d3:
                    64:93:4b:db:99:2a:a3:f5:92:04:36:16:2e:3e:74:
                    75:a3:d3:72:96:7b:2d:41:3a:a6:4e:85:ac:4c:45:
                    88:ba:5e:c1:11:cb:5a:38:4a:fb:a3:e1:57:02:4c:
                    d0:00:c7:d0:24:0c:d1:eb:d6:52:41:a8:a4:35:d3:
                    6b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:3F:2D:B4:22:A5:34:7B:05:83:ED:BF:D8:C2:B2:52:6B:22:07:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/14833538-e490-3112-ab0f-e8a6bfecdcc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:67:44:94:65:a2:0b:97:e9:b8:c4:50:de:62:47:7f:7d:79:
         a2:f9:77:27:28:3e:0a:87:6c:da:a3:c1:a5:bb:4b:7c:a3:ab:
         75:dd:2e:25:23:c9:f8:08:29:6b:7b:a3:25:de:ba:c8:73:8b:
         b6:5b:1f:e0:4f:2a:b2:b6:ff:8d:89:e6:a1:aa:40:da:1b:82:
         15:61:46:a9:33:bf:1e:18:39:68:9b:33:09:72:13:25:28:7d:
         6a:d1:49:48:59:c7:05:0e:64:86:6d:ce:45:1e:08:12:06:d8:
         88:36:d5:98:81:8f:0d:b0:d1:6c:4b:88:52:af:be:fb:4b:fa:
         9f:c8:53:c1:56:72:3b:c5:57:0c:4e:7a:15:3f:94:29:15:99:
         6e:13:9d:24:7e:f8:97:39:aa:0d:79:6f:3a:5e:e0:f5:bb:00:
         d7:37:0c:36:e9:5d:6a:2d:fe:9c:dc:c2:42:61:96:58:fc:2e:
         f4:92:4b:26:ce:ed:d6:f2:1e:85:ef:95:e9:d6:89:1a:e6:c2:
         32:98:3b:a6:5c:d5:53:9e:47:93:2d:17:ee:58:6b:3f:fd:91:
         34:57:83:b7:ce:e3:b1:65:b6:ab:28:a9:8c:a6:b2:a5:28:85:
         fd:9d:6b:64:fa:73:07:93:41:8f:8c:71:64:0f:4a:1c:3c:db:
         0e:04:48:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqHuKsQJhXQi81uMqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDcxNTIwMjY1OFoXDTI1MTAxMzIwMjY1OFowLzEtMCsGA1UEAxMk
N2MxODU2MTQtZjY2OC00Nzk0LWFlYzktZjkzNzhhZThlMzU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3P2uVmrLgWC+Jr5cRkK+B8PxkDtNgj/JMMIs
/mmM2CZ27LnT3lCMayXXffN62y5y1G408Yq4F23O8MfQOYJmIsDDGFKUC7hc8MVn
TWq50xR86MkyD+t3lAR2Z8A+uWHFa0n4sv6Zo0J97SWZcRHbumyYxFEnzFryRjAS
lgC+KLcuWWLkQZrWZtL88ocKnrXCaBQGPrzTbodPl3mpRwvLWk/wxWARL0Udom0V
pl4Gt5DKJfMN3b++eD8EQyqliwYgctNkk0vbmSqj9ZIENhYuPnR1o9NylnstQTqm
ToWsTEWIul7BEctaOEr7o+FXAkzQAMfQJAzR69ZSQaikNdNrVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNo/LbQipTR7BYPtv9jCslJrIgcrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMTQ4MzM1MzgtZTQ5MC0z
MTEyLWFiMGYtZThhNmJmZWNkY2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/nMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ1nRJRloguX6bjEUN5iR399eaL5dycoPgqHbNqjwaW7S3yjq3XdLiUj
yfgIKWt7oyXeushzi7ZbH+BPKrK2/42J5qGqQNobghVhRqkzvx4YOWibMwlyEyUo
fWrRSUhZxwUOZIZtzkUeCBIG2Ig21ZiBjw2w0WxLiFKvvvtL+p/IU8FWcjvFVwxO
ehU/lCkVmW4TnSR++Jc5qg15bzpe4PW7ANc3DDbpXWot/pzcwkJhllj8LvSSSybO
7dbyHoXvlenWiRrmwjKYO6Zc1VOeR5MtF+5Yaz/9kTRXg7fO47FltqsoqYymsqUo
hf2da2T6cweTQY+McWQPShw82w4ESEE=
-----END CERTIFICATE-----
Generated at Mon Jul 21 08:55:07 2025 by rpki-client