Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/663afc38-4dcf-3478-b3cf-370fc7b774d9.roa
File:                     663afc38-4dcf-3478-b3cf-370fc7b774d9.roa (raw, json)
Hash identifier:          cpenkxnbF/mU3fa4p7flp52eDpKiN6lYE6CdIzNkQ6k=
Subject key identifier:   15:33:C6:5F:06:F5:AB:CC:E5:47:94:FB:03:2B:AE:A2:F0:65:37:C8
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A761B65532C9AC2261A0DEB00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/663afc38-4dcf-3478-b3cf-370fc7b774d9.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     3561
IP address blocks:        142.111.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:65:53:2c:9a:c2:26:1a:0d:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=d765177f-fa39-484a-9b25-2b20fd3f0e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b2:d0:64:0b:4b:da:b7:52:44:92:62:ad:c1:
                    32:b3:ea:a6:33:3d:09:ee:cd:c1:03:b4:59:3c:e5:
                    94:ad:c6:6f:2b:c0:f8:b1:8e:2f:23:64:2f:4c:1d:
                    b0:d3:d6:23:0e:2a:04:c6:9d:9d:26:8e:a7:a2:40:
                    60:7d:f8:3d:2c:fc:e9:8f:84:d5:f1:dc:ff:d4:0b:
                    5c:94:2d:d7:f1:33:82:98:47:19:4d:d7:db:a4:92:
                    4a:43:4d:9d:46:55:a9:8d:77:ec:cc:27:b4:59:cb:
                    20:e4:89:42:1e:58:cb:3d:8d:b5:ad:12:cd:08:d5:
                    fe:5a:ca:22:cc:e4:99:7b:08:47:0f:a5:f8:dd:8c:
                    6a:ab:89:07:77:95:86:47:55:31:04:e1:22:ce:e6:
                    be:86:2f:b5:52:25:bf:0c:56:3b:ca:e7:dc:a6:a5:
                    13:3e:d1:64:62:f7:ec:c7:b0:14:3f:47:a6:94:b3:
                    31:84:24:a7:b0:a8:4f:ca:5b:01:66:94:93:1b:ef:
                    62:a4:77:91:65:e1:1e:a5:0f:a7:03:82:57:3e:fc:
                    3d:b4:d3:2d:27:65:72:f0:ed:2b:27:68:6d:69:df:
                    81:de:24:51:e7:51:33:a5:3f:67:3a:0c:8c:d0:53:
                    cb:a5:59:9e:76:3d:d4:8e:72:a6:8e:2d:83:53:bf:
                    a5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:33:C6:5F:06:F5:AB:CC:E5:47:94:FB:03:2B:AE:A2:F0:65:37:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/663afc38-4dcf-3478-b3cf-370fc7b774d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:aa:eb:98:d8:3b:86:f9:75:fb:b2:0c:64:35:92:4d:2e:99:
         1d:ed:c3:f5:09:7f:0f:38:6b:29:56:06:2c:e2:c9:2e:fe:5c:
         b5:59:c7:32:de:02:1a:d0:ae:69:bb:dd:8d:1e:e8:19:70:22:
         18:a7:9b:8e:64:c5:5a:8c:4e:ae:d3:dd:47:14:79:6b:ad:6b:
         1b:96:87:40:59:14:67:98:e2:7a:16:d9:09:3f:34:99:7b:d0:
         d5:2d:ce:91:4a:a9:0b:79:53:08:03:69:36:22:84:34:ec:84:
         54:a7:c1:01:87:f8:0f:94:78:7a:25:bb:ed:72:a0:d3:2d:f5:
         27:b5:ac:03:8d:65:f5:71:79:1d:4b:ff:d0:e8:84:c3:e5:39:
         0a:a6:39:cd:20:9f:c1:6d:a4:6d:95:6a:37:06:f4:95:9a:d8:
         42:39:b2:70:c5:5d:e6:3d:12:14:92:4f:b0:1e:7d:0e:59:c6:
         67:88:fd:7e:94:2b:c6:ea:ac:6b:45:65:ae:d8:ce:17:06:f4:
         68:4a:51:9d:1b:e0:3e:71:86:ef:e1:e7:b3:80:80:f9:16:8a:
         9e:ea:68:1f:82:cc:a4:64:9a:70:3e:1c:34:64:fe:1a:71:ae:
         cd:9d:ed:97:d2:65:24:eb:75:19:be:a9:e8:62:04:4b:ce:cc:
         c1:cb:ec:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 17:15:05 2025 by rpki-client