Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d57e62da-a629-30aa-89c2-03aeac4923de.roa
File:                     d57e62da-a629-30aa-89c2-03aeac4923de.roa (raw, json)
Hash identifier:          t0jriTqWKxAKPqujuzMP4DqCNQ2wCZ0Qk/vHY8IYee8=
Subject key identifier:   E0:FE:07:87:81:86:F7:B0:B6:A0:ED:FE:D0:C9:F9:1C:75:8F:43:6C
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A6DBB5CAF49EDBFCA187C5080
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d57e62da-a629-30aa-89c2-03aeac4923de.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     18779
IP address blocks:        142.111.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:5c:af:49:ed:bf:ca:18:7c:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=6d709af0-a9de-48d1-bf26-81029abac83a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c8:84:e5:f7:bd:bf:64:44:bd:51:63:02:ca:
                    3d:1d:ab:e1:e9:13:b9:b2:f6:42:e2:ad:19:e3:63:
                    d4:7c:1f:d0:3c:63:c0:d4:c4:c6:80:b1:54:c3:b4:
                    46:18:6f:88:a8:ad:6b:20:f4:18:b5:7b:75:ca:bc:
                    c8:54:6b:0c:8a:5a:96:07:06:1a:9f:46:8e:5b:ca:
                    9c:27:2c:0c:3f:e7:83:58:0d:e0:01:da:f9:e0:ed:
                    34:eb:ea:cc:21:dc:4f:4c:82:0e:2b:77:7a:12:56:
                    05:01:b6:28:fa:ac:9d:91:9d:27:c7:0c:cc:21:b4:
                    fb:a6:83:ae:e7:3a:53:4f:09:2e:06:5e:28:61:7d:
                    81:9f:c0:22:fa:ac:8a:58:e1:64:0b:37:4e:8b:9d:
                    20:70:b7:5b:18:65:23:d4:cf:cc:09:54:dc:bf:0c:
                    34:e6:0f:9b:56:4f:f2:93:2c:e3:43:3d:55:ab:e1:
                    af:07:ed:78:55:cb:83:92:30:df:c2:eb:97:11:07:
                    11:ab:f9:38:14:59:0b:81:23:af:91:98:3b:31:79:
                    09:dc:a0:4c:08:5a:f2:ea:74:f7:2f:83:31:d5:23:
                    e6:e7:8d:59:99:e6:7f:f7:30:da:d2:73:84:9d:4f:
                    4c:1f:7b:6a:11:b9:9f:83:8f:12:dd:f3:42:2b:bd:
                    db:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:FE:07:87:81:86:F7:B0:B6:A0:ED:FE:D0:C9:F9:1C:75:8F:43:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d57e62da-a629-30aa-89c2-03aeac4923de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:f6:77:25:76:f9:51:2b:a8:e5:eb:09:3e:ce:62:cf:81:f5:
         08:47:1a:a9:ef:03:36:5a:ad:6d:7e:49:45:22:63:e6:3e:70:
         51:c2:a5:57:7f:e9:30:f9:47:6f:26:b7:19:2b:5e:83:a5:b4:
         aa:a9:94:27:55:fe:d6:9f:54:a8:69:91:b9:d4:a9:eb:f8:dc:
         68:a6:99:e4:66:bb:f6:66:e4:11:15:c1:44:09:48:32:3e:fc:
         54:6c:ba:26:b0:ce:87:82:77:1a:0f:be:fb:01:02:71:c6:3f:
         33:a7:12:42:ba:28:0c:57:b4:ef:59:2e:1e:19:26:28:a0:2c:
         fd:9c:10:dd:aa:f3:25:02:07:1a:ec:2c:ae:e8:96:c5:7d:ca:
         1f:5a:8d:b4:b9:47:ae:1b:ea:6d:93:d9:63:af:39:f1:cc:fd:
         21:e8:fe:ac:95:0a:17:16:23:f8:9f:d0:2c:5b:4d:8e:fd:ab:
         6b:9a:f6:ef:af:11:db:7e:2e:e3:e1:05:ba:ea:3a:f1:02:f2:
         2e:ea:09:b3:24:ca:12:6f:88:6a:b0:d9:f3:1d:a4:a6:10:d0:
         09:e7:8a:03:b4:87:8a:c8:26:41:89:05:86:60:dc:fa:5d:ca:
         3f:9c:25:67:19:e3:55:f8:91:06:b7:16:72:64:f0:3e:57:36:
         1b:48:00:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:28:08 2025 by rpki-client