Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2d9943a0-631a-3820-a892-77df70fc08aa.roa
File:                     2d9943a0-631a-3820-a892-77df70fc08aa.roa (raw, json)
Hash identifier:          iY2OCaK5gI0l0UH97LAsNuA7bzJPnlaaWMzEtixqI4A=
Subject key identifier:   F1:96:09:2F:43:54:0F:20:C1:B8:01:86:CC:FD:88:46:B4:96:25:41
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848D6411C9C3E409CD472ECE200
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2d9943a0-631a-3820-a892-77df70fc08aa.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     7018
IP address blocks:        142.111.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:1c:9c:3e:40:9c:d4:72:ec:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=6411a2b6-65ce-40ec-a4ce-d2e27fb5f1ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8d:fa:c0:25:4e:b8:c3:2a:0d:30:28:d9:b0:
                    0a:41:8c:a6:94:01:52:e9:5b:91:d2:85:86:32:05:
                    63:f3:78:5b:cf:78:00:0e:ca:a3:9d:7f:72:55:86:
                    b5:1a:e4:74:67:ca:67:fc:2a:8e:49:f8:1c:da:12:
                    09:7d:3b:02:e7:5b:1f:ac:f6:fa:c7:36:d5:06:ef:
                    da:6c:6e:d6:d8:b4:ef:13:88:79:df:a5:b9:2f:45:
                    47:93:c4:78:b5:60:f5:51:9e:0d:df:fc:bc:c6:df:
                    e0:e0:4d:fd:11:c3:ac:42:96:b4:e1:ca:86:9d:96:
                    92:91:02:18:62:ef:06:15:54:db:89:d7:f9:b2:93:
                    3f:64:ee:76:b7:27:45:d3:42:83:cc:7c:f3:75:fe:
                    bd:03:d7:60:57:f4:bc:47:64:50:04:36:20:84:43:
                    0a:ee:99:1f:4e:22:d6:cc:03:83:56:fe:4c:d3:d8:
                    6d:75:9e:e0:c6:50:70:1f:47:90:82:e3:e2:cb:e4:
                    d0:df:9d:3f:7f:b8:19:14:d0:2f:b6:c6:1c:d4:0e:
                    be:71:36:a8:11:76:23:c2:fa:2a:4c:d4:0e:14:5a:
                    ff:d3:e8:17:c6:99:95:8a:f3:54:44:a8:59:bd:3f:
                    d9:16:01:84:de:18:c0:08:b5:07:a0:2a:51:01:c9:
                    d4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:96:09:2F:43:54:0F:20:C1:B8:01:86:CC:FD:88:46:B4:96:25:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2d9943a0-631a-3820-a892-77df70fc08aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:67:ad:23:c0:75:03:ce:60:7e:c2:e2:38:8a:16:6b:9b:44:
         7f:eb:0e:d0:e5:ee:58:5f:d5:3d:6c:c1:b7:8b:f2:ff:66:23:
         62:6c:20:78:75:18:62:c4:10:c4:fa:b5:7f:b8:8b:07:cd:11:
         8e:cd:ff:23:1d:a8:e1:9b:23:36:a9:6c:67:4c:5e:bd:93:b7:
         b7:e4:6b:f2:75:7d:c1:7b:c2:f9:74:8c:8e:3f:67:94:ad:75:
         e2:fc:18:cf:9e:b4:84:de:6a:a2:33:19:b0:df:9b:23:72:ce:
         20:75:58:67:c6:4a:5d:e8:f9:16:0d:25:97:d6:67:47:94:e7:
         fd:e0:33:20:45:8f:66:52:40:77:b5:66:4e:d7:f4:bd:e7:57:
         5a:d7:93:dd:fd:b0:bf:f7:b8:ce:47:d9:55:9e:79:53:11:e0:
         4e:f4:d4:2f:11:e6:28:6d:32:94:e4:e4:f6:8b:72:08:1e:c7:
         12:85:8c:90:34:7c:9e:dd:41:97:8f:c5:78:2e:1d:5c:3f:c4:
         2c:d0:32:33:8e:db:58:a3:6d:ee:10:04:8d:ec:8e:e0:05:52:
         25:e9:9a:cb:ea:a0:40:18:f1:48:41:57:5b:75:a2:f9:af:b2:
         64:63:6e:0b:6f:fd:e3:29:b2:3c:1a:15:28:72:fc:39:aa:49:
         07:35:a9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:36 2025 by rpki-client