Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/89284116-fae8-3d92-b383-e61a8eb20f38.roa
File:                     89284116-fae8-3d92-b383-e61a8eb20f38.roa (raw, json)
Hash identifier:          rWBxBbN2v14Z4hDMYDZ/kHm7Q9rbRK5x5PP0ehCUzV4=
Subject key identifier:   BD:7B:80:6D:03:91:3B:D0:B0:54:48:7B:BE:C2:75:16:ED:1D:89:1C
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584965E98225E047648E57042B00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/89284116-fae8-3d92-b383-e61a8eb20f38.roa
Signing time:             Thu 03 Apr 2025 01:00:46 +0000
ROA not before:           Thu 03 Apr 2025 01:00:46 +0000
ROA not after:            Wed 02 Jul 2025 01:00:46 +0000
asID:                     401152
IP address blocks:        142.111.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:e9:82:25:e0:47:64:8e:57:04:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr  3 01:00:46 2025 GMT
            Not After : Jul  2 01:00:46 2025 GMT
        Subject: CN=90d909d3-dcdc-45db-a24e-bf2297feed3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c7:6c:3f:31:22:9c:d7:12:68:70:99:93:ef:
                    a3:aa:2f:a2:8f:2e:06:ac:70:ba:51:64:6f:3d:d8:
                    c5:74:2b:e9:ec:45:49:ba:d7:77:44:10:2e:c9:86:
                    14:b5:2c:c3:77:4a:7e:5d:21:18:6d:32:1c:12:e9:
                    e4:e9:7a:5e:09:2d:9d:e6:74:88:08:3c:a0:c7:e0:
                    d3:0b:cb:36:f6:6a:31:68:4a:ea:e3:35:43:14:b5:
                    30:1b:c4:b9:fd:bc:83:73:29:98:2a:a2:69:8b:35:
                    92:56:ee:85:c2:b8:be:80:16:f2:1c:78:37:ca:08:
                    d3:4a:54:aa:c8:eb:ef:35:f4:ac:e6:df:d8:a8:fe:
                    a5:71:c0:77:96:bb:a8:62:df:d9:d0:9d:60:5c:d2:
                    10:f8:f5:cd:e1:83:d6:28:ed:ab:e6:d6:ce:aa:19:
                    a4:c3:8c:6d:56:eb:75:42:69:05:34:f6:73:60:77:
                    07:63:08:a9:94:3a:84:10:bd:49:22:92:8b:b8:45:
                    86:30:e5:ee:9d:1b:e0:26:a8:d0:97:44:9e:42:79:
                    52:ba:b9:a8:cb:bc:09:ab:a6:63:04:1e:09:1a:b4:
                    35:02:b2:ee:c5:e8:17:8d:80:54:24:b0:2a:83:dc:
                    03:19:86:ef:39:90:72:0e:26:de:54:b4:e6:1a:04:
                    74:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:7B:80:6D:03:91:3B:D0:B0:54:48:7B:BE:C2:75:16:ED:1D:89:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/89284116-fae8-3d92-b383-e61a8eb20f38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:11:f7:36:64:22:d0:08:ba:9c:cc:90:2b:10:f0:e5:15:c3:
         2c:01:84:1f:67:c4:da:a2:25:03:21:fc:7f:1c:0d:eb:f6:e6:
         38:5e:9f:1e:d9:86:02:ef:31:19:32:cb:25:eb:a3:2b:be:93:
         1e:78:0b:8d:2f:35:33:1f:39:a2:5a:9d:58:04:60:48:73:a0:
         38:9e:ee:91:49:9e:fc:a9:51:71:18:05:74:b9:d8:4a:bd:ba:
         65:24:00:ce:cf:83:23:8e:16:bb:1c:19:a6:4d:fc:3a:f7:1c:
         10:a8:fa:41:c0:c0:1b:ed:5c:f7:86:1a:d2:1a:24:91:c8:b9:
         18:36:04:6d:d4:8b:ab:4d:24:e5:ce:ce:71:f6:e2:70:db:47:
         bf:b3:26:b7:83:45:2d:f7:0e:0d:8b:82:79:af:91:30:ad:ea:
         b3:0c:2b:d6:f2:e9:91:bb:07:47:3d:2d:e7:07:21:16:5b:8e:
         d1:bb:07:df:0f:4c:5e:c9:6f:47:de:43:3a:ac:b1:da:3c:38:
         4e:ed:a1:bc:7d:d5:45:e6:9e:88:18:f9:a2:55:15:79:e8:8f:
         bd:67:ca:a4:9d:3e:13:e0:85:fa:04:12:f9:e9:b3:09:f6:f5:
         1d:e5:68:82:27:9a:95:d3:ea:05:15:03:41:bd:dc:39:4f:82:
         01:d9:1a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 03:21:11 2025 by rpki-client