Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a7aa276b-2b88-34a4-806d-8e88c12d6f7a.roa
File:                     a7aa276b-2b88-34a4-806d-8e88c12d6f7a.roa (raw, json)
Hash identifier:          1IwJvcoKUXGGoKbRJmUAfwkgsyOMlzECWb3YOhVQImw=
Subject key identifier:   95:06:A0:A8:3B:0F:FE:A3:56:EA:3D:D1:64:D4:A1:D4:4E:F9:FB:E2
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848D6411CAA4BEA3BEA774D8940
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a7aa276b-2b88-34a4-806d-8e88c12d6f7a.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     7018
IP address blocks:        142.111.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:1c:aa:4b:ea:3b:ea:77:4d:89:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=7ef78440-10ee-4487-be56-47d588ba9d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9e:0b:b5:5a:49:5a:10:53:df:2e:be:cc:9d:
                    93:9c:cd:12:02:0b:01:b9:b9:e8:0c:ee:41:ae:56:
                    84:7e:ad:bf:fd:e6:14:c9:b6:7d:29:6e:88:a8:bc:
                    d8:ab:1a:ac:29:80:c1:59:eb:e5:26:9a:17:fa:a4:
                    d7:74:8f:c0:ab:46:b1:ab:f8:c0:e2:b2:a1:f3:fe:
                    43:a9:00:2c:2e:b6:f9:24:f9:a9:16:b5:9c:02:8c:
                    c7:77:64:d4:74:97:99:86:db:c4:5d:42:ea:f9:71:
                    fe:fd:96:34:a9:e6:8d:61:4b:83:7d:36:ae:a3:46:
                    5d:09:db:38:e0:d9:65:2f:13:fa:6b:99:02:68:7b:
                    9c:b5:9a:7e:83:fa:93:3a:39:28:65:90:60:86:be:
                    48:5d:c6:e2:32:23:0e:25:70:15:ef:5d:58:9d:ec:
                    e4:1c:b7:6a:5a:94:98:bf:27:8c:cc:11:dd:ac:9a:
                    6f:95:99:8c:ab:0a:a3:8a:6e:7b:ef:2d:37:a7:c8:
                    8b:e5:89:3b:c4:ab:aa:be:8c:f3:97:08:89:30:f0:
                    56:5e:ab:03:3a:be:eb:8e:14:98:2c:f0:b7:18:85:
                    f3:41:fd:1b:45:4b:f9:3e:8b:b9:26:73:48:c0:5d:
                    db:7c:f6:c8:95:e1:3b:73:50:fd:68:d0:61:21:44:
                    78:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:06:A0:A8:3B:0F:FE:A3:56:EA:3D:D1:64:D4:A1:D4:4E:F9:FB:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a7aa276b-2b88-34a4-806d-8e88c12d6f7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:2e:1e:f4:be:c8:23:e9:79:e4:b2:5e:9c:ce:ce:a3:4c:4d:
         ac:6b:11:fc:e7:70:50:d6:58:cb:9b:77:d7:b8:9f:a6:f6:86:
         5b:91:0b:72:3e:52:36:46:ee:eb:f0:2e:0b:23:54:e0:eb:0e:
         58:9f:62:43:74:5c:cd:50:65:49:66:25:c1:99:14:2f:fc:bb:
         1e:be:1f:04:a9:96:64:9f:0e:87:e1:a6:88:67:1d:d5:f3:2d:
         06:3d:4f:0b:4e:fe:e3:a5:ea:f1:b7:f4:47:f4:3d:bb:eb:39:
         dc:53:11:09:1d:de:52:a1:d1:92:80:8b:c6:6d:3b:03:e2:4f:
         38:4b:97:63:ec:a3:f5:28:74:0c:03:18:ee:10:01:05:91:57:
         60:83:4c:02:5e:4d:23:83:ae:e6:e4:69:0d:fc:22:9e:fb:58:
         00:b9:40:c1:a6:9e:68:27:bc:41:7e:5a:cd:0f:31:a3:5d:1f:
         b4:db:41:75:f4:c6:88:be:05:77:ff:e1:cc:38:c6:01:49:d9:
         44:0b:ff:94:66:83:5e:53:b0:a2:7b:3e:64:c3:6a:24:32:5f:
         6d:1a:7f:73:b4:90:ae:19:bc:ca:e0:d0:26:05:a7:20:42:84:
         b1:1a:da:83:a0:59:ea:1a:0e:96:a3:c3:a8:12:8e:fe:15:40:
         84:12:75:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQRyqS+o76ndNiUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk
N2VmNzg0NDAtMTBlZS00NDg3LWJlNTYtNDdkNTg4YmE5ZDMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ4LtVpJWhBT3y6+zJ2TnM0SAgsBubnoDO5B
rlaEfq2//eYUybZ9KW6IqLzYqxqsKYDBWevlJpoX+qTXdI/Aq0axq/jA4rKh8/5D
qQAsLrb5JPmpFrWcAozHd2TUdJeZhtvEXULq+XH+/ZY0qeaNYUuDfTauo0ZdCds4
4NllLxP6a5kCaHuctZp+g/qTOjkoZZBghr5IXcbiMiMOJXAV711YnezkHLdqWpSY
vyeMzBHdrJpvlZmMqwqjim577y03p8iL5Yk7xKuqvozzlwiJMPBWXqsDOr7rjhSY
LPC3GIXzQf0bRUv5Pou5JnNIwF3bfPbIleE7c1D9aNBhIUR4bwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJUGoKg7D/6jVuo90WTUodRO+fviMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTdhYTI3NmItMmI4OC0z
NGE0LTgwNmQtOGU4OGMxMmQ2ZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm9aMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEguHvS+yCPpeeSyXpzOzqNMTaxrEfzncFDWWMubd9e4n6b2hluRC3I+
UjZG7uvwLgsjVODrDlifYkN0XM1QZUlmJcGZFC/8ux6+HwSplmSfDofhpohnHdXz
LQY9TwtO/uOl6vG39Ef0PbvrOdxTEQkd3lKh0ZKAi8ZtOwPiTzhLl2Pso/UodAwD
GO4QAQWRV2CDTAJeTSODrubkaQ38Ip77WAC5QMGmnmgnvEF+Ws0PMaNdH7TbQXX0
xoi+BXf/4cw4xgFJ2UQL/5Rmg15TsKJ7PmTDaiQyX20af3O0kK4ZvMrg0CYFpyBC
hLEa2oOgWeoaDpajw6gSjv4VQIQSdYA=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:09 2025 by rpki-client