Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/95e7cb0e-590d-309d-9bc5-3cde69b6e037.roa
File:                     95e7cb0e-590d-309d-9bc5-3cde69b6e037.roa (raw, json)
Hash identifier:          ELA/OcPqtF+EHlWk03y3bDIjBsUiMR0zDwuVWiqrIwQ=
Subject key identifier:   A4:F8:EB:54:95:64:EC:EB:D4:B2:FB:C2:10:B4:60:C4:C4:E3:71:CE
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A6DBB591FFCD146091BFB3100
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/95e7cb0e-590d-309d-9bc5-3cde69b6e037.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     18779
IP address blocks:        142.111.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:59:1f:fc:d1:46:09:1b:fb:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=73ad75ab-23f3-443e-8990-91a87edca9a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:17:65:c5:a5:16:9f:3a:61:39:91:ab:69:fb:
                    5d:86:b8:22:04:80:f3:c1:83:8a:97:69:87:90:0f:
                    2b:91:f4:00:f1:ca:52:17:b4:20:2d:e9:a9:10:8d:
                    bd:ac:80:ea:e9:2e:74:1e:18:4e:b0:c5:dc:d5:c8:
                    f9:d6:b6:09:75:43:83:53:b6:54:1f:68:7a:26:84:
                    d9:8f:46:2f:91:21:c4:42:35:3c:bd:7c:a4:c0:c1:
                    ea:8f:d6:44:c2:f3:8f:47:c0:84:f9:96:00:a7:5d:
                    e6:fe:cf:41:dc:d1:3d:31:29:ae:f6:fe:e0:70:f3:
                    5d:10:d4:0d:eb:5e:c4:b5:e8:7a:fb:3f:6a:42:2f:
                    70:9d:0a:27:55:e8:1a:5b:1a:cc:ff:07:0e:6f:94:
                    38:81:60:c3:9e:67:d7:58:d6:ce:83:e8:86:03:99:
                    c8:5d:42:42:42:49:4e:47:0f:d6:75:3a:44:1b:18:
                    2e:08:40:d3:e5:df:a6:c4:7d:d7:8c:f6:d0:68:56:
                    a5:e8:93:14:7d:e6:4e:89:37:2e:5e:a8:41:29:ee:
                    ca:14:8f:aa:14:ad:4f:60:8b:f8:49:6b:9b:22:fb:
                    9c:14:62:b4:2b:cd:44:6b:13:d9:68:14:3d:ca:58:
                    54:04:ca:ac:b7:4c:70:c6:e1:22:15:8a:23:fd:b6:
                    29:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F8:EB:54:95:64:EC:EB:D4:B2:FB:C2:10:B4:60:C4:C4:E3:71:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/95e7cb0e-590d-309d-9bc5-3cde69b6e037.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:7f:d6:0a:da:b9:a5:dc:25:e2:2d:db:dc:1c:05:48:28:54:
         31:c1:1c:72:77:ee:1c:7c:81:59:82:03:d1:f7:27:ca:1a:9b:
         4a:b9:be:8b:d7:7c:06:45:d8:72:c7:87:d1:42:e2:52:58:e1:
         8b:3e:89:ae:3d:d8:0c:d6:d3:44:0b:26:31:d9:5b:30:5c:6f:
         58:33:43:8e:89:5f:43:08:8d:4c:15:0b:5c:ca:c5:74:26:48:
         75:ff:55:6d:3f:79:be:bb:da:d4:2e:55:b1:fe:fc:a6:93:7a:
         70:4b:3a:2e:20:bc:33:6f:34:cf:37:99:45:10:ad:d0:ab:a6:
         b4:d0:fd:38:e2:1c:71:89:02:56:03:b9:ac:7a:02:d6:32:69:
         81:2a:de:ef:a0:6e:0d:7b:33:cb:f2:d4:1f:a4:94:48:78:cb:
         3a:ea:72:12:4f:eb:4e:a2:58:bc:7d:61:92:42:45:82:9e:66:
         13:1a:dc:d4:e3:58:09:64:41:9f:cb:63:a7:3f:85:cc:17:c1:
         26:81:2c:df:df:73:ff:78:02:2d:0b:06:1a:be:93:66:95:d8:
         08:ef:e0:6e:28:59:50:62:30:ea:af:90:7e:13:7a:82:25:ce:
         31:af:7b:5e:dc:f2:3a:94:ae:b2:21:19:1c:a3:cb:e7:7f:7d:
         fb:7f:0f:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptu1kf/NFGCRv7MQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk
NzNhZDc1YWItMjNmMy00NDNlLTg5OTAtOTFhODdlZGNhOWE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+RdlxaUWnzphOZGraftdhrgiBIDzwYOKl2mH
kA8rkfQA8cpSF7QgLempEI29rIDq6S50HhhOsMXc1cj51rYJdUODU7ZUH2h6JoTZ
j0YvkSHEQjU8vXykwMHqj9ZEwvOPR8CE+ZYAp13m/s9B3NE9MSmu9v7gcPNdENQN
617Eteh6+z9qQi9wnQonVegaWxrM/wcOb5Q4gWDDnmfXWNbOg+iGA5nIXUJCQklO
Rw/WdTpEGxguCEDT5d+mxH3XjPbQaFal6JMUfeZOiTcuXqhBKe7KFI+qFK1PYIv4
SWubIvucFGK0K81EaxPZaBQ9ylhUBMqst0xwxuEiFYoj/bYp+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKT461SVZOzr1LL7whC0YMTE43HOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOTVlN2NiMGUtNTkwZC0z
MDlkLTliYzUtM2NkZTY5YjZlMDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/XMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKZ/1grauaXcJeIt29wcBUgoVDHBHHJ37hx8gVmCA9H3J8oam0q5vovX
fAZF2HLHh9FC4lJY4Ys+ia492AzW00QLJjHZWzBcb1gzQ46JX0MIjUwVC1zKxXQm
SHX/VW0/eb672tQuVbH+/KaTenBLOi4gvDNvNM83mUUQrdCrprTQ/TjiHHGJAlYD
uax6AtYyaYEq3u+gbg17M8vy1B+klEh4yzrqchJP606iWLx9YZJCRYKeZhMa3NTj
WAlkQZ/LY6c/hcwXwSaBLN/fc/94Ai0LBhq+k2aV2Ajv4G4oWVBiMOqvkH4TeoIl
zjGve17c8jqUrrIhGRyjy+d/fft/D0E=
-----END CERTIFICATE-----
Generated at Thu Jul 10 16:43:49 2025 by rpki-client