Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/98197dae-7855-3289-900a-fd7841db2114.roa
File:                     98197dae-7855-3289-900a-fd7841db2114.roa (raw, json)
Hash identifier:          7W23AaZ1n+NkIHLHki3M1iQWs5kUaV+NfctYoOulTr4=
Subject key identifier:   7C:B9:89:AC:45:1A:B7:EA:08:E1:06:0D:2D:EB:C9:BC:9A:59:B0:0B
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848FBF12846C7C0BB2A22049040
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/98197dae-7855-3289-900a-fd7841db2114.roa
Signing time:             Mon 24 Feb 2025 02:00:38 +0000
ROA not before:           Mon 24 Feb 2025 02:00:38 +0000
ROA not after:            Sun 25 May 2025 01:00:38 +0000
asID:                     134351
IP address blocks:        142.111.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fb:f1:28:46:c7:c0:bb:2a:22:04:90:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb 24 02:00:38 2025 GMT
            Not After : May 25 01:00:38 2025 GMT
        Subject: CN=148216a3-9228-4637-a958-1f9e55eb9aaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:80:6a:be:ec:13:32:97:0a:51:7b:4c:78:ea:
                    2f:f4:82:34:8f:88:9e:fa:d5:2f:3a:d3:95:49:d6:
                    9f:bf:d7:3c:f9:51:78:25:d6:ec:b8:97:7e:b3:79:
                    35:f8:86:79:b0:43:71:bb:42:1e:26:69:80:d1:ca:
                    9d:ad:39:71:b3:4c:cc:12:6d:c0:fd:09:42:3e:45:
                    f6:bd:83:c1:8c:ac:88:4e:e2:36:7e:87:d4:ba:16:
                    6f:5f:f4:2f:de:c8:af:88:f6:19:49:77:d2:28:54:
                    ab:a1:62:20:7a:c9:fc:db:63:03:aa:a3:db:79:36:
                    f6:af:87:0b:ff:7b:05:b5:45:68:a3:12:c3:bd:53:
                    df:14:94:a1:73:6d:0b:65:17:88:d2:a5:cc:43:6a:
                    03:08:86:93:4f:e7:6a:dc:82:18:ea:bb:d1:a6:0d:
                    1f:c5:bc:df:92:8f:37:50:28:dc:e9:be:b7:02:85:
                    1b:76:a9:b8:45:40:3c:1c:ae:f3:27:71:88:e4:d9:
                    3c:d5:08:54:c0:4f:fc:2b:4a:cb:bd:00:b4:c6:1b:
                    d0:95:4c:46:d9:7e:17:3b:0a:4a:b3:2a:28:d0:ef:
                    80:90:80:5a:05:27:7c:fc:16:51:aa:e8:81:1b:73:
                    dc:9e:ee:42:df:34:7d:7c:e5:86:fa:6d:81:71:89:
                    ef:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B9:89:AC:45:1A:B7:EA:08:E1:06:0D:2D:EB:C9:BC:9A:59:B0:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/98197dae-7855-3289-900a-fd7841db2114.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:57:7b:57:72:26:b3:30:34:20:92:e8:3f:87:2f:54:16:8f:
         62:95:0b:c5:1a:0e:80:c0:63:cb:3f:a5:8e:f5:46:40:ef:7a:
         eb:b6:87:83:3f:05:cf:ce:c0:49:40:53:35:13:87:71:e1:12:
         70:d0:5f:9e:bd:bd:d4:79:32:09:6b:78:e7:6a:d9:de:5c:8f:
         e2:e8:51:ad:89:39:cc:5e:ac:ad:92:8b:4d:37:d7:ad:e8:d6:
         9b:51:7a:3f:2e:34:0a:20:1e:f2:f5:7a:3e:13:49:bd:4f:da:
         94:8c:c1:29:c8:66:ed:e8:bd:6d:cd:b1:c5:33:6e:28:0a:3a:
         b9:5b:da:82:db:c4:c3:c7:91:51:e7:28:cf:e1:af:1c:c3:b7:
         2c:62:d2:5e:f7:e4:93:f0:b5:aa:cb:a1:73:86:2a:ed:24:ed:
         23:bf:7a:46:09:c9:a6:0c:73:b5:9a:7b:5f:f1:e0:73:4c:60:
         12:0e:03:ec:2d:d3:1d:9f:c7:2e:1a:ad:dc:1f:6c:83:b0:c4:
         26:6c:a7:de:4a:d5:6b:00:bd:0e:b0:fa:19:df:64:8f:7f:09:
         2c:37:24:67:67:3c:60:31:b7:f2:eb:79:d4:57:f3:ce:8e:0a:
         f9:a5:50:5e:33:29:08:8e:9a:98:b4:e8:76:ab:24:c2:a2:de:
         c6:aa:ee:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:04:20 2025 by rpki-client