Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/85cb2f4a-46ea-3674-aaba-810b66276705.roa
File:                     85cb2f4a-46ea-3674-aaba-810b66276705.roa (raw, json)
Hash identifier:          ORtLGsIQPWCGil+6hTZaVXL+aHLUnHzB4RnATDFv3L4=
Subject key identifier:   06:41:01:3B:23:CA:26:96:BC:63:F2:DC:A5:99:72:48:58:93:72:FB
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285849B57A2FF4C5E9C052C6F6E880
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/85cb2f4a-46ea-3674-aaba-810b66276705.roa
Signing time:             Thu 01 May 2025 13:00:58 +0000
ROA not before:           Thu 01 May 2025 13:00:58 +0000
ROA not after:            Wed 30 Jul 2025 13:00:58 +0000
asID:                     7018
IP address blocks:        142.111.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:7a:2f:f4:c5:e9:c0:52:c6:f6:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May  1 13:00:58 2025 GMT
            Not After : Jul 30 13:00:58 2025 GMT
        Subject: CN=6f0e9b1b-e9aa-41b8-8bd4-59479d7cf055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:32:be:09:01:83:eb:ad:65:ba:b5:31:b6:f1:
                    0e:14:52:e6:55:f9:71:72:6c:3e:ee:ef:7e:79:80:
                    70:6c:05:9a:b7:de:1f:ee:55:2e:03:35:de:93:71:
                    77:3c:14:fa:9e:a5:bd:24:a7:51:30:f1:ee:77:73:
                    e4:0b:81:c6:43:f6:21:5f:d4:e1:cf:6f:30:b1:46:
                    4e:e3:d2:2d:a6:25:99:c7:9e:cb:35:8c:fe:08:5e:
                    bc:35:56:78:25:05:20:c7:86:ed:1c:17:94:48:27:
                    8a:9b:bc:9a:07:86:ba:21:ba:a0:a8:ef:2e:f9:86:
                    a6:b0:f3:94:41:12:27:8b:03:09:e3:af:c6:26:72:
                    5a:af:c5:84:4d:b3:52:04:c9:c8:8f:61:7f:25:5e:
                    99:b8:85:b8:5c:bd:1e:ba:aa:1d:f7:e4:3c:da:5a:
                    37:66:77:8d:2b:17:80:09:85:f0:82:0b:46:21:cb:
                    c4:02:86:26:f5:b5:69:ca:e9:e1:64:ca:a2:b1:77:
                    23:38:8d:40:fc:b9:70:fd:16:26:69:23:88:ee:49:
                    71:0b:76:96:be:5b:3a:0e:51:af:ff:f2:bd:10:05:
                    04:48:7d:d4:16:04:89:c4:74:55:2d:95:8f:f1:1f:
                    4d:2b:21:43:49:77:b5:80:da:91:48:1f:be:4f:8b:
                    84:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:41:01:3B:23:CA:26:96:BC:63:F2:DC:A5:99:72:48:58:93:72:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/85cb2f4a-46ea-3674-aaba-810b66276705.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:70:56:8c:5f:10:c2:1d:47:3f:40:96:77:89:b4:73:2d:26:
         88:e7:26:36:7b:52:6e:e7:90:a7:81:0a:ae:b5:8e:2c:60:3c:
         bc:21:64:63:01:f6:b6:3e:41:24:4c:13:5a:ed:2d:54:8d:2c:
         30:e5:2c:99:06:c6:6a:be:24:ee:a0:ac:95:0d:e0:22:8d:54:
         df:5f:97:40:9b:7b:cb:56:cf:e9:0f:ee:ec:c6:18:81:f1:28:
         c7:10:0d:af:58:03:81:da:fa:88:7c:34:66:3d:e4:75:5f:86:
         34:72:a2:6d:16:15:d2:7c:c7:b1:5c:46:7f:b6:ed:1e:02:e0:
         f5:6c:ed:d8:97:40:5a:af:9b:08:a7:b7:83:9d:8e:7e:27:47:
         f4:2f:5e:48:fe:0b:92:07:c2:c3:45:28:72:41:7f:85:f1:46:
         8c:f5:9a:f0:fd:7f:4c:36:93:13:ec:ff:b4:e0:4a:76:f1:d2:
         e6:46:36:72:ae:4e:21:f4:cf:68:cf:12:6b:95:a1:54:4f:2f:
         93:04:4b:79:b8:6e:d3:6c:4b:71:8a:da:26:d6:c4:51:e6:c0:
         4d:df:c2:95:1d:3e:88:9f:5d:c6:1e:ed:0a:71:d6:01:c0:df:
         b4:f4:45:dd:e3:4c:e9:c7:1e:96:0b:44:fa:1a:d2:26:7e:6d:
         c9:02:d2:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1ei/0xenAUsb26IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk
NmYwZTliMWItZTlhYS00MWI4LThiZDQtNTk0NzlkN2NmMDU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTK+CQGD661lurUxtvEOFFLmVflxcmw+7u9+
eYBwbAWat94f7lUuAzXek3F3PBT6nqW9JKdRMPHud3PkC4HGQ/YhX9Thz28wsUZO
49ItpiWZx57LNYz+CF68NVZ4JQUgx4btHBeUSCeKm7yaB4a6IbqgqO8u+YamsPOU
QRIniwMJ46/GJnJar8WETbNSBMnIj2F/JV6ZuIW4XL0euqod9+Q82lo3ZneNKxeA
CYXwggtGIcvEAoYm9bVpyunhZMqisXcjOI1A/Llw/RYmaSOI7klxC3aWvls6DlGv
//K9EAUESH3UFgSJxHRVLZWP8R9NKyFDSXe1gNqRSB++T4uEFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAZBATsjyiaWvGPy3KWZckhYk3L7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvODVjYjJmNGEtNDZlYS0z
Njc0LWFhYmEtODEwYjY2Mjc2NzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm9XMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAINwVoxfEMIdRz9AlneJtHMtJojnJjZ7Um7nkKeBCq61jixgPLwhZGMB
9rY+QSRME1rtLVSNLDDlLJkGxmq+JO6grJUN4CKNVN9fl0Cbe8tWz+kP7uzGGIHx
KMcQDa9YA4Ha+oh8NGY95HVfhjRyom0WFdJ8x7FcRn+27R4C4PVs7diXQFqvmwin
t4Odjn4nR/QvXkj+C5IHwsNFKHJBf4XxRoz1mvD9f0w2kxPs/7TgSnbx0uZGNnKu
TiH0z2jPEmuVoVRPL5MES3m4btNsS3GK2ibWxFHmwE3fwpUdPoifXcYe7Qpx1gHA
37T0Rd3jTOnHHpYLRPoa0iZ+bckC0lA=
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:17:32 2025 by rpki-client