Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7cda7144-fefd-351d-b748-2fb1cb31e254.roa
File:                     7cda7144-fefd-351d-b748-2fb1cb31e254.roa (raw, json)
Hash identifier:          YfV0KNl6+rhDjYdWGHCmCJvcapLXpWSOEZG/1QagbGw=
Subject key identifier:   0B:45:24:9F:A7:BB:83:8F:47:BE:99:17:57:4D:07:1D:A3:51:3B:DE
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858489FD0A1F547021C6AACDBA298
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7cda7144-fefd-351d-b748-2fb1cb31e254.roa
Signing time:             Wed 22 Jan 2025 02:00:39 +0000
ROA not before:           Wed 22 Jan 2025 02:00:39 +0000
ROA not after:            Tue 22 Apr 2025 01:00:39 +0000
asID:                     7018
IP address blocks:        142.111.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9f:d0:a1:f5:47:02:1c:6a:ac:db:a2:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 22 02:00:39 2025 GMT
            Not After : Apr 22 01:00:39 2025 GMT
        Subject: CN=35bc51a7-1aff-46a5-8d9e-7023ad113791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c0:0c:e0:67:84:8d:4e:83:22:81:85:be:96:
                    93:60:08:07:54:a9:0f:eb:f5:01:54:cf:5c:09:8a:
                    44:d0:30:97:be:8b:62:7e:ac:4e:ee:b7:22:99:56:
                    c7:03:28:a4:fd:c6:a2:cc:8d:c8:6f:43:5c:50:88:
                    b5:ed:6e:b5:a1:8e:09:68:4a:be:52:6a:90:9b:ca:
                    ff:a6:5c:5d:6d:de:8e:fa:5e:5a:f7:05:4f:9f:42:
                    a5:19:3a:f0:38:56:4f:13:41:51:35:9f:0c:3c:f3:
                    b5:a3:b1:65:68:9c:34:c2:91:36:67:38:97:97:c1:
                    8c:46:bf:e6:14:e9:aa:07:7e:4a:a3:5c:ac:4d:78:
                    6d:aa:8a:48:76:f6:2e:c4:bf:e5:bf:be:b3:f6:4a:
                    35:f2:3d:be:6a:91:19:c2:23:b5:06:61:d3:c7:5b:
                    08:15:70:55:9a:dc:4b:bb:5b:3c:ab:64:c4:80:5d:
                    0d:b8:47:74:72:9b:01:24:be:76:23:16:e6:15:c5:
                    97:e5:46:d8:b3:cf:8b:0e:7b:c8:10:08:f1:15:64:
                    1e:e7:1f:f2:b6:6a:e4:73:1b:64:45:25:72:db:9f:
                    99:18:c1:bd:44:f3:1f:34:a6:08:1a:20:b5:5d:8f:
                    88:fd:c6:f7:19:29:5c:69:f8:3b:60:d3:36:55:70:
                    4f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:45:24:9F:A7:BB:83:8F:47:BE:99:17:57:4D:07:1D:A3:51:3B:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7cda7144-fefd-351d-b748-2fb1cb31e254.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:7e:82:57:9b:31:89:e3:66:57:f4:5a:b1:44:ff:17:d2:2a:
         a0:64:a2:28:f1:f9:d5:4d:12:96:d0:a9:e1:3f:2a:cd:cd:de:
         a6:b3:cd:f7:8c:02:a4:ab:50:4d:03:51:0b:52:54:a8:36:48:
         09:37:39:7f:c8:12:4f:ea:79:09:e5:ff:49:d0:bc:8b:c6:49:
         09:1b:e5:ca:ca:ba:9d:3b:8b:cb:a2:83:e3:e9:ba:6f:4b:76:
         14:3d:06:6c:1d:7b:3a:fd:fd:8f:12:86:22:05:ef:15:66:c1:
         0c:93:e4:3d:6d:4e:0d:c2:4b:52:83:5d:9d:66:42:a5:b3:23:
         4e:9c:fc:b6:db:a8:49:ba:aa:ef:2a:9f:20:b9:d8:c6:dd:a6:
         af:9f:da:32:3e:b0:f8:29:fd:02:50:e1:5c:b6:0c:b1:1d:7d:
         8b:a1:00:e6:67:68:12:9a:05:ba:19:c9:ec:a4:b2:11:63:62:
         d8:bb:b1:b3:0a:0f:39:a2:bc:52:7a:41:9a:7b:64:41:04:72:
         36:17:56:cb:e4:2c:52:0c:df:83:e2:f0:c7:12:dc:37:f6:58:
         47:fd:2d:b3:5c:d4:79:1e:04:48:3c:d2:3e:50:eb:b9:e5:65:
         a7:56:14:6d:5d:16:8f:37:08:84:9e:7a:0c:d0:44:ee:e4:73:
         2a:48:c7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:59:28 2025 by rpki-client