Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2b8049a4-e2d4-30b9-896e-9da086378568.roa
File:                     2b8049a4-e2d4-30b9-896e-9da086378568.roa (raw, json)
Hash identifier:          hR78iRpIsBursl9lUbXGAolbUO8LtajuGq6NtfVdWQk=
Subject key identifier:   0C:78:D0:52:86:42:4D:13:09:BD:E8:69:8B:9C:5F:D7:9A:4C:F9:6B
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858484EDAC0FC8C4228968A4BCEA0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2b8049a4-e2d4-30b9-896e-9da086378568.roa
Signing time:             Tue 24 Dec 2024 02:00:38 +0000
ROA not before:           Tue 24 Dec 2024 02:00:38 +0000
ROA not after:            Mon 24 Mar 2025 01:00:38 +0000
asID:                     27411
IP address blocks:        142.111.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4e:da:c0:fc:8c:42:28:96:8a:4b:ce:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Dec 24 02:00:38 2024 GMT
            Not After : Mar 24 01:00:38 2025 GMT
        Subject: CN=0efc1bc8-5a46-445b-aa4a-2e11c8006dfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d7:e5:a4:14:a3:f1:19:34:4d:32:e8:88:29:
                    75:62:2f:14:bb:55:96:40:0e:02:ef:be:8d:91:cd:
                    18:9a:22:29:bf:a6:30:ce:92:b3:71:bb:d6:cb:3f:
                    51:63:b3:73:a0:11:a4:a1:f6:45:32:d3:14:e7:f1:
                    f5:64:22:eb:24:1e:ac:f5:60:d2:da:df:9b:ad:74:
                    6e:93:db:40:92:08:ce:a6:e3:af:25:97:24:00:73:
                    aa:e4:32:30:ed:1e:0f:be:7b:f3:73:58:5b:5a:d4:
                    06:af:b1:33:65:41:78:4a:52:5a:c7:2c:64:45:ab:
                    e3:1c:67:0a:fe:9c:9a:5a:cc:50:8f:b8:b1:e6:35:
                    f5:10:0b:e8:2a:93:65:30:86:ca:5b:d4:fa:91:fb:
                    e3:95:cb:33:3b:cb:fe:2a:6f:ee:95:d7:ae:1f:b3:
                    a8:b4:9a:19:7f:db:da:10:f3:f4:75:93:79:89:0d:
                    aa:16:b3:b6:63:ad:a5:5e:62:42:77:9e:d4:04:24:
                    80:bb:e9:c6:3f:af:db:3a:a7:7b:21:22:2c:75:ba:
                    7a:f7:21:95:e7:2b:3f:a0:8b:9c:b0:80:75:5f:a0:
                    9f:bd:05:0c:45:6c:6b:90:72:da:80:9e:a3:8c:87:
                    df:6f:5f:14:70:d5:ae:cc:a6:31:5f:62:e5:5a:dc:
                    b9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:78:D0:52:86:42:4D:13:09:BD:E8:69:8B:9C:5F:D7:9A:4C:F9:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2b8049a4-e2d4-30b9-896e-9da086378568.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:eb:60:ab:6d:a5:29:a0:5a:4d:b3:67:a1:5a:35:4d:87:de:
         ac:89:c3:59:f6:79:5f:b1:ec:16:8a:6b:f2:ec:14:9c:f0:41:
         30:fb:1f:ec:38:c3:e7:84:8a:62:68:98:c0:9d:c5:05:8f:63:
         7d:5b:2a:51:d2:8e:ed:92:7d:81:00:09:55:ba:4f:3b:1a:0d:
         52:d7:dd:e9:af:88:ec:c5:97:bd:84:72:a7:be:ac:00:8f:7c:
         e4:51:6e:84:39:c0:18:b4:bb:56:8d:f5:4f:5a:06:71:78:9a:
         f2:1f:23:9f:91:0e:fd:91:51:4c:41:f8:31:6d:68:b9:e3:35:
         4c:f2:09:4f:01:ad:e6:e1:86:88:87:21:1d:49:30:55:d3:b3:
         5b:83:72:12:f5:df:1b:c2:51:cc:2a:c9:26:5a:31:a6:89:5f:
         7a:91:95:c1:1c:a2:e4:a4:81:2b:cc:23:32:a0:cc:e9:b0:56:
         88:7d:7b:3b:eb:ba:77:67:ab:35:b8:47:98:ce:03:21:ff:4f:
         05:04:20:89:42:5d:fc:2d:7b:fc:d2:68:d4:e9:17:09:20:08:
         b9:e9:ba:cd:4d:a8:15:b1:16:1a:8e:6c:08:76:44:b5:5e:df:
         7c:c4:dc:7c:b5:2c:a3:e1:83:3d:ae:2c:80:0f:b6:7b:47:02:
         93:68:95:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhO2sD8jEIolopLzqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI0MTIyNDAyMDAzOFoXDTI1MDMyNDAxMDAzOFowLzEtMCsGA1UEAxMk
MGVmYzFiYzgtNWE0Ni00NDViLWFhNGEtMmUxMWM4MDA2ZGZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdflpBSj8Rk0TTLoiCl1Yi8Uu1WWQA4C776N
kc0YmiIpv6YwzpKzcbvWyz9RY7NzoBGkofZFMtMU5/H1ZCLrJB6s9WDS2t+brXRu
k9tAkgjOpuOvJZckAHOq5DIw7R4Pvnvzc1hbWtQGr7EzZUF4SlJaxyxkRavjHGcK
/pyaWsxQj7ix5jX1EAvoKpNlMIbKW9T6kfvjlcszO8v+Km/uldeuH7OotJoZf9va
EPP0dZN5iQ2qFrO2Y62lXmJCd57UBCSAu+nGP6/bOqd7ISIsdbp69yGV5ys/oIuc
sIB1X6CfvQUMRWxrkHLagJ6jjIffb18UcNWuzKYxX2LlWty5CQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAx40FKGQk0TCb3oaYucX9eaTPlrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMmI4MDQ5YTQtZTJkNC0z
MGI5LTg5NmUtOWRhMDg2Mzc4NTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm8sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ/rYKttpSmgWk2zZ6FaNU2H3qyJw1n2eV+x7BaKa/LsFJzwQTD7H+w4
w+eEimJomMCdxQWPY31bKlHSju2SfYEACVW6TzsaDVLX3emviOzFl72Ecqe+rACP
fORRboQ5wBi0u1aN9U9aBnF4mvIfI5+RDv2RUUxB+DFtaLnjNUzyCU8BrebhhoiH
IR1JMFXTs1uDchL13xvCUcwqySZaMaaJX3qRlcEcouSkgSvMIzKgzOmwVoh9ezvr
undnqzW4R5jOAyH/TwUEIIlCXfwte/zSaNTpFwkgCLnpus1NqBWxFhqObAh2RLVe
33zE3Hy1LKPhgz2uLIAPtntHApNolXQ=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:49 2025 by rpki-client