Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/88e0de2f-8486-32bb-818c-24bde2be3742.roa
File:                     88e0de2f-8486-32bb-818c-24bde2be3742.roa (raw, json)
Hash identifier:          /tksKuld8ubNKPhPkJ7aPeiHiuo//ODNgwiej8iyJu4=
Subject key identifier:   A2:7B:1A:57:DA:F0:59:89:F5:D1:61:2D:E4:1F:43:EC:97:11:99:97
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A87B8A960A27E66C6D423C3E0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/88e0de2f-8486-32bb-818c-24bde2be3742.roa
Signing time:             Tue 15 Jul 2025 20:26:58 +0000
ROA not before:           Tue 15 Jul 2025 20:26:58 +0000
ROA not after:            Mon 13 Oct 2025 20:26:58 +0000
asID:                     44559
IP address blocks:        142.111.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:87:b8:a9:60:a2:7e:66:c6:d4:23:c3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 15 20:26:58 2025 GMT
            Not After : Oct 13 20:26:58 2025 GMT
        Subject: CN=0f945c3c-5cd7-4c85-8497-7d3ff40b6879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a2:a8:d8:e9:88:17:5b:ae:54:02:7a:4a:f8:
                    bc:72:dd:60:bd:fa:c8:54:a2:4a:ef:9d:d7:b8:37:
                    02:39:0e:ed:05:ee:31:22:dc:11:b9:91:02:9d:59:
                    e0:d5:e7:a4:26:f5:de:a1:f8:06:f9:69:67:6c:bc:
                    2f:41:be:44:46:eb:ff:ee:72:88:20:71:6f:21:4a:
                    eb:1d:f2:df:74:8b:43:0e:a4:7c:cf:ed:0c:cb:10:
                    ef:c7:99:03:ba:9a:3b:f6:5d:f8:10:09:67:fb:ff:
                    9e:64:e7:55:25:b8:11:dc:0b:3e:23:8d:1a:37:19:
                    5a:73:52:21:89:f0:55:57:68:cd:0c:0e:f5:82:0a:
                    21:64:10:91:d3:3b:c8:a2:ef:fd:0f:25:b6:b9:87:
                    9d:9a:aa:39:c4:c1:de:78:ec:7b:84:dd:0e:ac:5b:
                    90:0b:ee:c8:04:71:5a:13:85:ca:a3:3b:ed:2b:9f:
                    44:c5:ab:b0:db:cd:4a:22:a6:82:6b:7c:1a:3d:76:
                    8f:11:18:a5:8b:b7:d8:d3:d1:e5:c4:b4:05:c6:8d:
                    08:21:1a:31:80:b6:b6:b8:73:8d:12:59:cc:d7:6d:
                    8a:38:12:5f:90:72:70:49:d3:17:45:c8:57:1c:b3:
                    8a:7e:8b:f2:72:85:4a:2d:66:61:ca:20:9a:fe:0c:
                    af:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:7B:1A:57:DA:F0:59:89:F5:D1:61:2D:E4:1F:43:EC:97:11:99:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/88e0de2f-8486-32bb-818c-24bde2be3742.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:eb:80:0f:fc:13:15:2e:fd:de:cc:8e:3a:bd:d7:14:d4:96:
         a6:83:1f:75:53:87:f5:05:49:0e:d3:bd:0c:b5:db:d0:9b:d2:
         85:50:38:c1:00:74:9b:9c:d6:d8:42:81:d6:ce:3e:a7:6e:76:
         79:97:fe:9a:f6:66:64:aa:7e:45:60:ab:a8:39:ac:9c:e5:91:
         35:3f:fa:dc:01:2d:db:65:86:82:00:c2:9d:ae:b6:37:07:dc:
         dd:e0:50:e9:75:27:18:d1:1a:3e:d8:ad:f9:4f:32:9c:29:0f:
         85:0c:ed:b9:47:1f:9b:07:f6:23:da:74:31:13:fa:48:cd:86:
         6d:37:53:be:8e:85:bc:1b:00:ec:3b:45:23:08:9c:c4:ca:5f:
         6e:30:f4:60:34:41:3d:3f:6a:f5:55:01:b9:c9:56:4c:86:a9:
         2e:a9:5f:f9:d6:47:b7:29:cd:be:17:5a:e1:b8:23:3b:a2:b8:
         0b:dc:86:bd:ca:eb:24:d8:56:cc:d7:a5:6e:10:34:f7:24:69:
         45:c4:6a:ef:c0:ae:54:de:00:48:6a:ca:22:f8:2d:46:5d:bf:
         53:92:4b:b6:8d:c4:aa:78:34:cd:c0:76:cd:16:6b:b4:19:cd:
         0c:5b:e5:81:df:3f:23:30:63:a6:fb:63:c0:1e:96:49:ad:70:
         c9:5a:6e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:12:23 2025 by rpki-client