Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6d2979b8-4c56-3c2f-98b0-54903b0a18b4.roa
File:                     6d2979b8-4c56-3c2f-98b0-54903b0a18b4.roa (raw, json)
Hash identifier:          XMlZSgS4Y9a333xhYCeQuiuo0bwY/QXNft5ghSOsTiE=
Subject key identifier:   62:89:CA:9A:D9:0F:AE:37:05:A6:5C:A1:5D:9A:EC:8B:36:57:B7:76
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848B35B74CDC09BBE1641F00657
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6d2979b8-4c56-3c2f-98b0-54903b0a18b4.roa
Signing time:             Wed 29 Jan 2025 02:00:39 +0000
ROA not before:           Wed 29 Jan 2025 02:00:39 +0000
ROA not after:            Tue 29 Apr 2025 01:00:39 +0000
asID:                     209854
IP address blocks:        142.111.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b3:5b:74:cd:c0:9b:be:16:41:f0:06:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 29 02:00:39 2025 GMT
            Not After : Apr 29 01:00:39 2025 GMT
        Subject: CN=057a17cb-b388-4289-8070-7bf38d2e9591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b5:8d:b2:bc:f0:06:45:45:7e:75:01:6f:5c:
                    e0:95:e0:b2:be:65:16:04:7a:68:f0:58:51:b3:88:
                    a2:d2:12:82:7d:66:e8:01:81:5c:4c:42:32:9b:ec:
                    00:51:13:13:ce:61:cc:e2:f3:b3:bd:e6:46:a7:39:
                    1c:a8:87:12:98:2b:3d:66:25:9d:99:e7:ed:65:e7:
                    bd:d3:df:38:01:9f:db:04:15:65:bc:8d:f6:ec:9c:
                    7a:d6:65:bc:d7:08:2f:9e:71:f5:6d:49:08:eb:94:
                    fc:47:78:63:c8:b4:62:3c:94:f7:97:c6:14:04:11:
                    98:23:43:f5:47:08:be:82:1e:32:f8:7a:12:91:22:
                    50:be:25:64:b7:f2:5c:99:0c:3f:fb:dd:7f:54:8f:
                    af:fc:f4:55:cd:85:eb:b1:13:db:2f:79:b2:5c:63:
                    f8:c5:76:d7:0c:fb:55:77:85:41:57:0f:b7:23:08:
                    fa:76:bf:02:72:d7:be:6e:4b:2b:da:88:f2:7d:84:
                    d7:11:2d:ed:9e:af:ea:d1:85:d4:74:ac:a1:f8:06:
                    fc:c1:1a:6a:a5:fe:54:6e:0c:06:60:23:c1:6d:0a:
                    36:2b:c7:1c:21:69:ab:15:ee:1a:20:84:69:c6:13:
                    20:0d:00:e3:89:55:61:56:59:57:2b:40:92:1d:49:
                    f0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:89:CA:9A:D9:0F:AE:37:05:A6:5C:A1:5D:9A:EC:8B:36:57:B7:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6d2979b8-4c56-3c2f-98b0-54903b0a18b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:02:45:04:f9:d7:7a:6b:21:80:df:9e:d5:3a:02:2d:63:83:
         5b:f7:e0:ea:29:05:ed:7d:23:d6:81:4b:ab:70:95:9f:1d:c6:
         9c:bc:46:cc:12:91:ba:e5:bd:e8:4b:9b:c5:0f:86:5b:67:a7:
         7c:17:c7:95:fc:1a:f9:4b:7e:cc:0f:6c:b4:93:8f:98:cf:b3:
         e7:96:7e:64:69:2f:22:9c:f7:92:13:77:7e:17:62:99:d8:07:
         33:71:5f:75:d4:f2:de:c2:47:76:2c:5f:fd:ae:2a:78:92:d6:
         37:c7:4f:8a:69:88:cf:e5:16:88:df:09:f8:df:6d:6b:ab:e8:
         43:72:d0:5c:c3:c8:b9:82:b7:27:20:8e:a9:c3:9d:a7:3d:89:
         92:75:93:bb:f2:7f:81:a6:02:70:30:8e:62:18:cc:19:f8:ef:
         f4:ca:e0:64:47:e0:8e:9c:fa:58:7e:fe:97:b5:c8:32:32:65:
         ee:7c:90:5c:19:d0:75:08:7d:8c:d3:d4:7d:46:17:06:68:3f:
         b5:8c:52:9a:39:12:2e:6b:fb:7b:ed:a1:f6:db:36:6e:a6:20:
         c0:c9:e9:10:c2:49:cb:e3:a4:d1:d6:f4:59:a4:c9:fc:ae:83:
         0f:d4:2d:5c:35:77:da:f6:48:0a:fc:ac:5d:e7:a6:43:5d:ab:
         9c:51:dd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:51:58 2025 by rpki-client