Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2841e02d-4f74-3869-8f40-492629bb0549.roa
File:                     2841e02d-4f74-3869-8f40-492629bb0549.roa (raw, json)
Hash identifier:          g7Is6jt6vLWZIUe5v/6mvRIcfhNg3iZS8gkk/F+PT70=
Subject key identifier:   5E:3D:4B:6F:DF:EE:62:5C:9F:88:BE:F9:61:BC:B7:82:9B:EE:15:92
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848D0ABBB8EFDFEBA84BE8D3300
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2841e02d-4f74-3869-8f40-492629bb0549.roa
Signing time:             Sat 08 Feb 2025 14:00:52 +0000
ROA not before:           Sat 08 Feb 2025 14:00:52 +0000
ROA not after:            Fri 09 May 2025 13:00:52 +0000
asID:                     62240
IP address blocks:        142.111.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d0:ab:bb:8e:fd:fe:ba:84:be:8d:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb  8 14:00:52 2025 GMT
            Not After : May  9 13:00:52 2025 GMT
        Subject: CN=6f0677ed-50ef-4bf0-bbaf-175f6534e709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e7:7a:cf:b5:e8:4c:31:b5:a3:7d:a0:33:81:
                    8d:60:21:8b:ee:ca:21:f8:d2:3f:fb:20:27:8b:55:
                    ea:24:18:a6:2a:b9:2e:90:25:71:9c:d2:34:2a:97:
                    fc:03:d3:e3:7a:c5:1b:c0:13:f7:00:df:6d:13:15:
                    7c:32:2a:35:c5:91:ef:54:98:06:2e:09:c4:5b:bd:
                    ee:58:1b:1a:31:07:cb:c5:c0:c7:7b:33:b5:2b:cb:
                    4a:d3:2d:72:49:76:18:40:de:a7:b9:71:39:6d:fb:
                    70:19:75:2d:8a:9d:07:14:72:c2:ef:d6:4e:84:ab:
                    50:88:0f:9c:56:96:ed:fe:3d:68:03:19:46:29:f8:
                    b8:e3:40:12:0a:6b:31:f2:e9:9f:50:c4:c1:ff:4f:
                    91:b0:db:12:d2:fc:89:49:4f:03:64:a6:76:93:a8:
                    d5:66:1e:66:59:3e:93:ee:21:42:b0:d5:bc:58:e4:
                    9d:c0:6d:0f:03:a9:01:56:8d:98:13:6c:8b:0c:ea:
                    38:43:3d:9b:bf:91:97:ef:8f:5b:4b:04:d0:89:5e:
                    3e:e4:3c:98:2d:10:bf:3e:d2:2c:18:48:84:3c:1c:
                    99:d3:fb:48:3d:50:8d:43:0e:dc:43:0c:a6:77:f1:
                    dc:e6:c3:44:5c:a3:f8:f8:3f:1c:42:96:7c:fb:9b:
                    78:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:3D:4B:6F:DF:EE:62:5C:9F:88:BE:F9:61:BC:B7:82:9B:EE:15:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2841e02d-4f74-3869-8f40-492629bb0549.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:24:20:ff:8f:a6:31:26:bb:98:7c:2d:f5:a4:8d:cd:84:b6:
         69:52:fc:2f:a7:31:4b:d3:6f:62:e4:28:1b:be:49:8c:84:86:
         16:4a:20:9a:cf:2f:be:04:df:06:03:06:2e:1f:df:13:13:fd:
         76:e8:7c:4e:25:20:f8:05:71:97:6b:2d:77:44:88:ba:00:d9:
         5b:a5:76:81:79:04:39:25:e9:42:13:3d:b2:39:06:22:ff:a7:
         66:69:d7:4a:9f:ce:6f:66:79:64:b1:bf:2a:6e:94:19:e7:da:
         74:82:f1:b4:3a:cb:e1:30:3a:0a:d0:0a:a6:dd:99:67:c9:a4:
         df:3d:ef:aa:49:49:cf:07:b0:d7:41:f9:7c:e2:f9:34:3a:a8:
         e3:bc:18:bc:e5:f3:f5:53:7a:11:a4:a9:49:a8:11:e5:0f:af:
         63:fe:81:6d:48:62:f4:08:93:b3:8c:11:47:2c:d7:3c:49:b5:
         7f:0c:70:c1:fd:02:e3:1b:62:6f:c2:5d:08:38:32:a2:dc:70:
         2f:c1:dd:e3:37:f2:bc:29:52:6b:cf:7c:d2:ab:c5:6d:ef:0e:
         84:44:84:75:ca:64:d5:40:38:f5:9d:50:24:53:b6:be:4b:33:
         38:46:35:ab:17:a1:00:83:2b:0c:c4:f1:8d:5f:6e:7d:cb:2e:
         c5:ea:3f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:11:37 2025 by rpki-client