Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/487c58f1-2daa-3d39-8b06-f228c4c21190.roa
File:                     487c58f1-2daa-3d39-8b06-f228c4c21190.roa (raw, json)
Hash identifier:          m2KK2Loe1ZgjRMlAGN7nYTIPfyr+xJSgx7fcFTIwK4U=
Subject key identifier:   3F:BF:8D:DD:20:28:C7:33:C0:3B:50:63:15:D5:BA:AE:BE:06:70:A6
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584953C4216ACFE15034B8784380
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/487c58f1-2daa-3d39-8b06-f228c4c21190.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     9009
IP address blocks:        142.111.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:21:6a:cf:e1:50:34:b8:78:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=fea3efb5-76b6-4aca-8765-25fb556ccb89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:32:03:d0:ce:ef:30:39:3f:13:8d:55:be:b3:
                    ff:2e:82:22:b0:67:e6:8f:ed:37:cf:57:cc:bc:39:
                    77:a0:e0:8f:98:da:f9:5e:42:e4:44:8e:b7:83:d4:
                    f3:fa:37:cd:b0:65:be:6e:3b:db:ae:76:d5:16:f5:
                    71:e7:f6:af:52:4a:4d:77:42:c2:ce:3b:3f:5d:ee:
                    a2:5d:3a:07:e8:fb:96:0c:5e:08:c5:59:11:91:92:
                    35:98:34:86:30:b2:7e:ce:9b:a7:27:1d:e5:df:5a:
                    2f:02:77:47:c3:98:44:cb:43:66:f8:a1:ca:cb:b1:
                    3d:40:50:19:23:2c:b3:af:0c:65:fb:5d:ff:04:a9:
                    37:7d:c4:4c:88:e3:64:d5:38:b4:95:73:ef:1c:90:
                    44:22:1d:42:25:a5:48:6b:f3:cd:df:94:0b:80:c3:
                    78:66:08:f1:49:23:20:89:2c:95:ff:3f:bc:53:01:
                    89:ab:d5:60:a5:27:dd:2d:2a:84:fd:db:52:85:95:
                    3d:d4:75:55:af:21:8e:f1:63:eb:af:37:64:b6:cc:
                    ab:a5:f5:4e:17:7d:ee:bf:6b:b3:8c:34:d4:17:f1:
                    01:30:05:d2:c3:fe:f8:28:04:c4:ff:44:1e:68:b5:
                    d9:d7:47:73:6a:ac:b5:df:d8:47:a6:36:11:0d:34:
                    87:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:BF:8D:DD:20:28:C7:33:C0:3B:50:63:15:D5:BA:AE:BE:06:70:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/487c58f1-2daa-3d39-8b06-f228c4c21190.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:ae:45:7a:f3:cf:b3:c5:d4:f3:3d:7e:bc:6a:e1:a5:b7:85:
         39:f6:9e:43:4c:7f:20:b9:bb:4f:24:8f:9b:d7:be:2b:0d:52:
         52:a6:8c:5f:e9:0b:02:81:f1:ad:95:00:e4:fc:54:e2:a0:f7:
         16:69:d2:95:8c:19:52:f7:17:c6:15:f2:88:b0:e2:8b:d2:58:
         f4:65:bf:6a:c7:2d:49:5c:59:e9:3f:63:16:10:76:0b:78:98:
         f3:44:88:6a:1b:e8:31:fa:7f:8b:5a:22:e7:73:e5:23:e0:ad:
         c8:e9:0d:fb:80:50:60:be:81:a7:1a:f1:83:b2:6b:37:e4:01:
         11:6e:18:3a:17:01:a3:ba:69:e5:46:a6:23:3d:5d:fd:d9:1f:
         0f:a7:8d:6f:bb:cb:c2:cd:6d:bf:c8:f7:fc:9b:be:78:c1:fd:
         23:5f:cf:2f:48:48:ac:08:ff:07:15:d1:87:8f:aa:4c:9f:f6:
         5e:f4:cd:68:ef:aa:cf:84:91:d6:25:a9:a4:99:91:4c:fb:50:
         15:2e:ac:63:3f:e8:ad:47:b7:0e:ed:0b:ee:9c:7e:46:1a:01:
         27:66:8c:19:ed:d0:43:5f:cd:ba:30:c1:ba:52:fb:8b:ad:d3:
         cf:e8:30:64:85:b0:8d:6c:00:0d:c9:65:70:26:21:ec:ee:0a:
         19:eb:0e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:13 2025 by rpki-client