Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/795c9682-43d3-3361-bb0e-f4285988fcd0.roa
File:                     795c9682-43d3-3361-bb0e-f4285988fcd0.roa (raw, json)
Hash identifier:          xNS048dXjXmUFKYZgqQ+Q6kOWiEM1Wv8/K1fI4YoSYk=
Subject key identifier:   B8:72:77:8F:52:0C:14:72:66:E5:0B:7B:AC:8B:00:07:68:02:E4:FE
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A6DBB5732A77D468E9CD043E0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/795c9682-43d3-3361-bb0e-f4285988fcd0.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     18779
IP address blocks:        142.111.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:57:32:a7:7d:46:8e:9c:d0:43:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=e3618a17-0ce3-4084-bf3b-d93697e5098c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f4:9b:25:86:23:18:67:33:67:b1:c6:bb:2e:
                    8d:a8:6f:3a:59:3b:f0:47:f6:9e:eb:9e:be:c4:18:
                    8b:54:6d:cc:c4:1d:c7:6a:a1:a3:54:10:20:4f:78:
                    e4:86:21:7a:82:c3:74:1d:04:64:40:a1:f6:e4:2f:
                    7d:39:44:95:8b:01:0b:40:fd:36:1c:e8:f0:03:49:
                    e5:2e:75:ab:89:83:59:c9:ad:15:83:7b:7b:b6:db:
                    a8:05:f3:aa:58:aa:64:f0:4b:28:9f:09:6b:51:ec:
                    98:1f:2c:91:4b:b9:7a:4b:45:08:3c:c4:5c:6d:c7:
                    00:21:cc:34:c9:a3:76:bd:d1:00:56:1f:cb:ab:79:
                    16:a6:2f:e4:ae:65:75:91:49:cf:aa:fa:37:c0:c7:
                    f0:1e:6f:d2:69:32:c1:99:b4:db:36:8c:8a:7b:2e:
                    1f:ac:1a:b1:29:50:66:7a:04:de:05:ad:ba:f0:2c:
                    c6:a5:9c:27:c9:98:63:6e:6e:ac:0a:cb:fe:8e:07:
                    98:5e:36:9b:c4:c7:b8:24:4e:7f:72:3a:24:bf:94:
                    ea:ec:ea:45:68:d9:01:e7:fc:0f:c9:9d:12:de:27:
                    9a:0a:04:15:f2:ec:b7:1d:97:5a:48:3c:ae:fb:1a:
                    35:42:18:54:69:44:c3:dc:17:da:f8:74:42:1e:95:
                    20:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:72:77:8F:52:0C:14:72:66:E5:0B:7B:AC:8B:00:07:68:02:E4:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/795c9682-43d3-3361-bb0e-f4285988fcd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:2e:f1:be:92:ab:4e:52:6b:70:59:61:65:19:b0:15:89:cc:
         4f:2d:82:d2:e6:4d:4d:36:ff:62:21:47:fe:24:c9:a9:bf:25:
         e2:5f:79:72:26:63:48:0b:54:44:cf:8e:a2:7d:f2:5a:65:d6:
         7b:07:20:03:71:fb:c0:a3:06:09:01:72:79:f0:55:9e:ad:35:
         96:45:16:d1:ff:28:53:c6:5e:86:2a:5c:40:50:7c:ad:96:13:
         cb:75:e3:d3:b8:dc:81:79:8e:ca:6e:ae:79:ea:43:d1:3b:8a:
         a5:95:ec:07:7f:7d:97:0a:58:f6:a5:cf:cd:44:59:12:04:2e:
         f5:2b:04:92:b6:f4:b8:86:fc:9e:ba:79:00:ff:29:88:e9:af:
         6f:93:e6:c5:aa:ce:b8:71:d8:ca:cb:6c:a3:b2:fb:92:65:63:
         e0:ac:10:81:68:e1:b8:48:8c:5d:6a:31:8c:a2:fd:3a:d7:76:
         25:16:a3:02:5f:34:43:4e:e1:a4:73:d6:cf:0b:6a:b4:76:8f:
         0c:91:ba:f3:de:30:8f:07:c5:52:ec:ae:2d:0f:4d:6b:94:39:
         22:47:15:ab:5f:5e:12:a9:a7:29:ba:c7:3a:2b:09:5f:9d:69:
         b6:6a:c9:c1:3b:55:5e:ba:c9:fe:ab:26:c0:3d:24:9e:11:ba:
         02:28:9e:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptu1cyp31GjpzQQ+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk
ZTM2MThhMTctMGNlMy00MDg0LWJmM2ItZDkzNjk3ZTUwOThjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPSbJYYjGGczZ7HGuy6NqG86WTvwR/ae656+
xBiLVG3MxB3HaqGjVBAgT3jkhiF6gsN0HQRkQKH25C99OUSViwELQP02HOjwA0nl
LnWriYNZya0Vg3t7ttuoBfOqWKpk8EsonwlrUeyYHyyRS7l6S0UIPMRcbccAIcw0
yaN2vdEAVh/Lq3kWpi/krmV1kUnPqvo3wMfwHm/SaTLBmbTbNoyKey4frBqxKVBm
egTeBa268CzGpZwnyZhjbm6sCsv+jgeYXjabxMe4JE5/cjokv5Tq7OpFaNkB5/wP
yZ0S3ieaCgQV8uy3HZdaSDyu+xo1QhhUaUTD3Bfa+HRCHpUgcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLhyd49SDBRyZuULe6yLAAdoAuT+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNzk1Yzk2ODItNDNkMy0z
MzYxLWJiMGUtZjQyODU5ODhmY2QwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm+8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD4u8b6Sq05Sa3BZYWUZsBWJzE8tgtLmTU02/2IhR/4kyam/JeJfeXIm
Y0gLVETPjqJ98lpl1nsHIANx+8CjBgkBcnnwVZ6tNZZFFtH/KFPGXoYqXEBQfK2W
E8t149O43IF5jspurnnqQ9E7iqWV7Ad/fZcKWPalz81EWRIELvUrBJK29LiG/J66
eQD/KYjpr2+T5sWqzrhx2MrLbKOy+5JlY+CsEIFo4bhIjF1qMYyi/TrXdiUWowJf
NENO4aRz1s8LarR2jwyRuvPeMI8HxVLsri0PTWuUOSJHFatfXhKppym6xzorCV+d
abZqycE7VV66yf6rJsA9JJ4RugIonpE=
-----END CERTIFICATE-----
Generated at Thu Jul 10 17:12:14 2025 by rpki-client