Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6d0cc993-6cf7-3c1e-aad0-de40b29137a5.roa
File:                     6d0cc993-6cf7-3c1e-aad0-de40b29137a5.roa (raw, json)
Hash identifier:          bUndP1dNcmj7snAJUcCJLgNINX7Uuq5Oas6pgreYRTg=
Subject key identifier:   A6:41:33:22:3C:28:77:9C:0F:48:0E:71:F1:80:6E:82:60:2E:12:D4
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858493637E822E8A380EBF0380FB0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6d0cc993-6cf7-3c1e-aad0-de40b29137a5.roa
Signing time:             Sun 16 Mar 2025 23:00:07 +0000
ROA not before:           Sun 16 Mar 2025 23:00:07 +0000
ROA not after:            Sat 14 Jun 2025 23:00:07 +0000
asID:                     3561
IP address blocks:        142.111.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:36:37:e8:22:e8:a3:80:eb:f0:38:0f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar 16 23:00:07 2025 GMT
            Not After : Jun 14 23:00:07 2025 GMT
        Subject: CN=b78f22ff-ccc1-4855-bb50-b164748bf0d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2c:4b:a3:eb:47:a2:50:b6:c0:8d:ea:15:7a:
                    62:fa:42:df:7e:4a:dd:a5:77:6a:59:66:e8:17:19:
                    7d:8d:23:1c:23:fa:5f:fe:77:df:be:35:b6:53:1d:
                    5d:77:9f:70:eb:17:d6:71:28:c4:d1:b3:f3:0d:2d:
                    d5:0c:61:e1:98:43:16:6b:70:63:10:5d:61:2b:cd:
                    ff:08:c2:fd:06:ce:84:66:7c:6c:3d:2d:51:52:33:
                    a4:32:aa:5a:fe:19:74:eb:24:06:5d:23:59:37:7b:
                    26:c1:45:02:8c:33:d4:92:a4:ac:81:ea:3c:82:1c:
                    dd:f7:eb:39:2f:ce:61:c1:e3:5a:26:f1:05:48:51:
                    81:49:e9:8c:c9:64:3e:7b:a6:17:06:33:a7:c6:f7:
                    ce:07:55:a8:1d:57:37:2a:41:34:91:2d:b9:03:b8:
                    d4:80:eb:8f:09:54:41:e4:94:44:4e:c4:9a:05:48:
                    1c:30:e4:88:27:aa:f2:6b:07:ed:af:99:64:6a:bf:
                    24:26:56:7a:87:8d:14:d2:7e:21:d4:53:fc:26:5e:
                    0d:86:2d:a8:86:03:d2:b2:bc:18:cd:cf:37:24:6e:
                    e6:50:b1:d8:19:3f:5d:63:51:db:10:2c:06:92:b5:
                    19:f8:88:74:76:8b:bf:1a:4d:b6:87:78:15:16:27:
                    0d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:41:33:22:3C:28:77:9C:0F:48:0E:71:F1:80:6E:82:60:2E:12:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6d0cc993-6cf7-3c1e-aad0-de40b29137a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:5e:5e:bd:dc:35:0e:87:17:5f:8a:e8:6b:83:50:18:13:6d:
         34:95:c2:04:32:79:3b:58:04:43:04:fb:ab:ab:ed:d2:4b:57:
         15:be:34:33:64:9e:67:d4:8a:99:32:6f:c6:5e:26:02:ff:53:
         b7:41:5b:18:e0:07:ec:55:c3:f6:63:48:1d:4c:3c:62:d0:ce:
         b5:5c:ef:0c:bb:c7:79:ae:a8:b3:78:aa:75:17:8a:97:68:0a:
         33:b7:e7:4b:99:3f:dd:58:89:91:24:40:eb:5a:c6:36:ef:71:
         69:9b:99:5a:09:3e:8a:16:4e:14:ef:88:e7:bc:a0:81:35:55:
         f6:d7:0d:f0:24:07:21:01:ad:27:00:37:64:ae:fe:be:30:35:
         5f:23:9d:b6:a0:d3:72:6a:45:28:e9:52:67:aa:8a:6f:27:52:
         f4:b9:12:6d:bd:d8:66:01:d4:f4:60:bc:48:8b:ed:0d:8f:39:
         dc:0a:62:48:8f:b6:12:e3:8e:ea:c9:e1:86:02:70:be:dd:ee:
         ad:09:6f:1d:fd:da:1e:f8:58:d6:f6:9a:70:f0:6b:ce:15:dd:
         cd:5b:5a:5b:6c:e4:de:26:07:43:40:ad:45:77:f6:09:9f:c8:
         14:a9:0c:b8:ca:43:34:9a:3f:63:2a:80:17:fb:8b:15:7c:d4:
         2c:99:1e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:08:25 2025 by rpki-client