Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/07c571a7-d3c1-3dd8-a983-c0969938741d.roa
File:                     07c571a7-d3c1-3dd8-a983-c0969938741d.roa (raw, json)
Hash identifier:          OBsZXH0+pB/YBulrZhk/i1r+r1y6u39Vhbk86ydImzs=
Subject key identifier:   FC:93:3E:65:A3:C5:EA:0B:39:9E:E6:D5:A9:DD:72:4C:E2:BA:84:2C
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A6DBB593D49D3789CF6D07E80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/07c571a7-d3c1-3dd8-a983-c0969938741d.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     18779
IP address blocks:        142.111.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:59:3d:49:d3:78:9c:f6:d0:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=bed8fada-ad59-407a-a4d1-16871dbcb4ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cf:c2:be:6f:34:0b:f0:2a:64:c4:c5:8f:a2:
                    48:9f:b1:4f:b6:9b:42:5e:98:6e:12:b4:d5:0c:87:
                    5a:fc:4a:2f:15:f4:05:cb:5a:00:f9:6f:64:d5:bf:
                    e7:96:c5:75:ef:9d:c7:26:a4:f2:d9:af:aa:48:4a:
                    bd:fc:0c:cf:c8:2e:59:20:46:2e:87:e6:03:b4:91:
                    ea:b5:c6:53:51:4b:e2:db:f8:73:92:d0:22:61:61:
                    6e:8c:7c:fe:a3:7b:a0:8f:21:ea:8b:8b:fa:b5:89:
                    b2:70:dd:b4:4c:2d:b9:e1:b2:a6:50:a0:f7:e8:24:
                    fc:a0:f0:e6:87:80:28:fc:ae:aa:14:d0:b6:42:56:
                    3e:27:3f:ad:83:9c:40:53:ad:20:44:9f:bd:0b:15:
                    c6:36:d7:01:63:5a:61:d8:26:44:5e:9c:95:94:01:
                    7d:43:0f:f1:99:a5:07:c9:b8:55:4b:56:c5:8c:9e:
                    34:4f:41:da:ad:85:b4:71:c0:99:f2:0e:f2:b4:cb:
                    21:1c:50:05:21:a3:84:44:7e:1d:6a:90:b3:bb:0f:
                    d6:7e:b1:9e:dd:0e:ab:8b:15:3d:d2:c0:cb:2d:39:
                    45:e1:72:50:e0:fd:9d:33:1e:a8:b2:aa:14:59:0c:
                    20:36:e7:e1:c3:56:44:d1:f2:df:38:7c:d8:83:1f:
                    1e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:93:3E:65:A3:C5:EA:0B:39:9E:E6:D5:A9:DD:72:4C:E2:BA:84:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/07c571a7-d3c1-3dd8-a983-c0969938741d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:d0:22:7c:15:c3:6d:c6:1b:e3:52:92:c3:05:ff:21:d3:a8:
         9d:75:3a:eb:d9:2c:6d:25:ff:e9:4c:e6:53:3f:ea:52:ce:b7:
         b6:c2:82:ee:66:35:1e:09:c1:b0:44:19:39:43:db:38:1b:ab:
         e3:cb:b7:2c:86:53:79:69:97:c3:5b:d4:f8:24:1c:21:14:6f:
         7e:5f:ef:64:83:60:1f:99:25:0f:2b:97:7c:22:87:9c:8e:88:
         c4:b2:bc:8e:f7:6d:ad:5a:37:b3:c7:b0:50:a1:f8:5b:93:ce:
         45:03:13:0d:e9:19:41:c9:18:e5:a3:5e:bf:ff:c4:1c:ed:13:
         3f:48:5a:d5:16:75:13:b0:2e:d2:8b:db:cb:59:5e:96:46:40:
         e7:3c:ba:f9:ec:5c:24:ac:b2:36:ec:0c:db:86:20:51:89:d5:
         14:cc:f0:22:9c:38:fe:a4:f0:d0:a3:c8:42:17:d2:5e:b1:95:
         2a:12:ab:c6:c1:02:37:2e:82:ff:ac:3d:c3:cf:9b:88:38:24:
         a7:c7:6a:ab:63:f5:fd:28:94:7e:36:fc:a8:f4:34:7b:10:2a:
         d0:d8:4c:ca:24:f2:7e:60:eb:2e:11:f7:45:f1:73:97:01:3f:
         5c:4d:d1:ef:c2:b7:b8:31:2e:27:74:a6:da:f6:d5:4d:a8:e4:
         c7:21:dd:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 19:13:07 2025 by rpki-client