Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8be453a1-95b8-3dca-8f60-c08971255bf0.roa
File:                     8be453a1-95b8-3dca-8f60-c08971255bf0.roa (raw, json)
Hash identifier:          znF0VGPaWXh1g0wVs5qnG2zAYIFF2XYHIPQcpU1/GVA=
Subject key identifier:   5E:5A:66:37:A1:8B:08:21:32:D6:53:81:D0:AE:ED:BF:43:3A:AA:F6
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A71EB59A3C8594391DDA90B60
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8be453a1-95b8-3dca-8f60-c08971255bf0.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     209854
IP address blocks:        142.111.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:59:a3:c8:59:43:91:dd:a9:0b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=934a9481-a347-4275-99f3-bcc37bb41938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0b:07:5c:65:14:a6:c4:a5:ad:c6:51:98:71:
                    c3:57:2b:13:a2:a4:f3:f1:6d:0b:ce:20:06:ec:4e:
                    8d:59:af:aa:fd:3e:79:45:c0:0e:cf:57:64:96:8c:
                    d4:99:b6:25:95:81:32:8d:7d:cf:4a:65:41:6b:db:
                    da:36:00:48:0a:1e:e3:ca:19:0a:4a:7f:c7:d5:58:
                    a9:6c:0a:e0:5f:7d:3f:c4:9e:e5:c3:d6:56:f8:dc:
                    c0:92:5d:b7:45:51:79:b0:7b:fa:f7:d7:0f:4e:99:
                    24:bb:47:2f:05:f9:1a:95:00:7a:95:c8:ad:b1:fb:
                    a5:9e:91:11:23:17:e3:d5:5a:20:87:5f:3e:38:72:
                    f0:9c:be:1c:a5:b9:46:74:b4:06:83:cd:59:50:01:
                    2a:e2:ea:c1:29:61:24:0a:07:d8:60:a2:4d:cc:b1:
                    8e:b2:b2:d2:ed:09:e4:1d:1e:5f:ea:13:1a:6f:1d:
                    c5:2b:7c:6e:b4:cf:0e:ec:6b:80:a8:b6:7d:f6:fb:
                    6c:76:50:c2:49:b5:50:c1:b7:af:97:a0:af:0e:61:
                    71:02:13:72:fd:e2:cc:5e:6a:27:dd:8d:dd:00:d9:
                    cb:0d:df:bf:18:2a:ae:51:16:da:a1:c4:6d:e8:9f:
                    00:97:a0:bc:81:88:73:56:dc:fb:57:f0:72:e4:0b:
                    13:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:5A:66:37:A1:8B:08:21:32:D6:53:81:D0:AE:ED:BF:43:3A:AA:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8be453a1-95b8-3dca-8f60-c08971255bf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:75:d2:4e:2e:b4:8a:00:d7:0d:83:1b:02:a6:c4:54:c9:35:
         fe:3c:f4:c2:cf:4c:6f:19:e0:0b:10:23:9d:59:67:27:8f:43:
         d5:c7:86:0d:d4:57:e6:50:3c:c5:3e:01:93:18:3b:7e:85:90:
         1b:3f:70:de:28:8c:46:d1:a0:2b:67:90:3b:9d:93:08:6a:be:
         14:fe:75:94:aa:53:1c:81:8e:66:cb:26:a2:49:19:03:e9:54:
         e9:a9:7b:f5:fc:d3:51:cd:48:79:ab:91:bd:22:7a:b9:33:3a:
         5e:32:ed:0a:8b:2b:aa:f6:2b:d0:12:64:9a:01:f6:6d:38:6b:
         03:08:cc:f0:23:d0:bc:4c:6b:1d:31:ba:d1:b3:51:27:3f:71:
         4c:ed:b8:18:19:9f:a8:cb:8b:27:c3:d5:c0:fd:75:5f:7e:2c:
         39:3e:36:16:d8:71:a4:27:76:2e:57:a7:ff:01:0e:c8:5f:69:
         05:0b:e0:4b:f0:53:1b:e3:93:6a:17:56:61:94:42:8f:7f:ed:
         f7:45:c6:43:f7:46:a6:22:f7:70:94:6f:25:e2:aa:70:ea:77:
         34:eb:70:1a:3d:a5:f9:9f:da:c8:37:36:89:35:09:e6:75:40:
         d6:dd:f4:b3:b8:27:aa:b7:7b:4b:62:c0:71:ae:e5:f8:88:f4:
         67:fb:f6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 19:34:40 2025 by rpki-client