Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/baca26c9-9c31-3dd4-bf79-012a78beed73.roa
File:                     baca26c9-9c31-3dd4-bf79-012a78beed73.roa (raw, json)
Hash identifier:          +dN1Xg9VSOFm5eX2AT9vry+bxMjT911F9jA53FcFlYE=
Subject key identifier:   46:50:40:2C:A9:2A:27:36:A5:20:2F:33:A4:34:23:EC:6E:FA:2A:7C
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848CB164730231B6DCD0ABE3F00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/baca26c9-9c31-3dd4-bf79-012a78beed73.roa
Signing time:             Thu 06 Feb 2025 14:00:52 +0000
ROA not before:           Thu 06 Feb 2025 14:00:52 +0000
ROA not after:            Wed 07 May 2025 13:00:52 +0000
asID:                     26383
IP address blocks:        142.111.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cb:16:47:30:23:1b:6d:cd:0a:be:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb  6 14:00:52 2025 GMT
            Not After : May  7 13:00:52 2025 GMT
        Subject: CN=52ec0fdc-ae9c-4778-9750-74fc1a0292cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d5:24:a1:e0:b4:02:5d:f9:93:ba:4c:c5:f8:
                    c9:ab:d4:05:0b:11:a8:2c:30:4d:ce:d3:b4:05:05:
                    dd:2c:a0:98:03:ac:51:ab:34:b1:76:db:73:dc:77:
                    fc:8c:01:f6:e7:9f:70:26:5b:8d:bc:34:cb:a4:e7:
                    8e:a8:ca:e9:74:16:16:76:88:aa:e0:d6:fb:52:d9:
                    7c:ea:f4:cb:d3:04:c2:0f:f1:af:03:ca:fb:e3:8d:
                    1e:b5:da:4a:29:e2:08:65:d9:0b:c9:ba:4d:37:21:
                    d1:49:04:5a:9b:74:52:bc:d4:1f:18:03:81:49:8c:
                    54:43:62:4d:e6:76:af:d5:6d:21:94:58:23:af:1e:
                    85:a5:00:d4:27:f3:ba:ab:b2:e7:f6:6c:bd:29:87:
                    d0:12:2e:bd:88:6a:d5:26:60:ba:c8:4f:d3:99:09:
                    1b:3c:5a:41:3b:18:b8:04:fe:30:6c:5f:a9:e5:3b:
                    0e:03:7b:55:9c:8d:18:3e:ba:10:e3:97:d3:5c:6a:
                    fa:90:36:42:07:75:34:e0:3e:a0:44:c2:37:8a:23:
                    0b:17:de:76:c1:58:82:c4:6d:11:bd:71:83:0a:2a:
                    98:8b:ee:79:83:75:73:b7:7a:e9:09:0f:8c:3a:f8:
                    04:bf:ab:70:25:c9:f3:e4:f4:5f:81:99:7b:fc:33:
                    e1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:50:40:2C:A9:2A:27:36:A5:20:2F:33:A4:34:23:EC:6E:FA:2A:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/baca26c9-9c31-3dd4-bf79-012a78beed73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:c4:75:23:25:61:72:ed:fd:3b:70:5a:e9:dc:93:31:2a:df:
         78:c5:43:35:8f:c6:d5:00:a6:b2:60:54:bc:eb:80:66:ee:81:
         ad:42:20:f9:7e:d4:a8:73:70:c7:8a:cb:bd:90:a4:dd:23:b0:
         76:3c:8b:69:c2:4e:03:36:0a:86:21:df:4e:0f:26:8d:50:42:
         f5:db:fb:d2:86:47:61:ba:93:c0:f1:eb:ea:28:30:41:22:0d:
         2c:79:bd:1b:ef:3e:15:2c:51:4b:9b:cc:6b:92:57:19:1a:ca:
         8d:36:ab:32:0f:6e:65:09:0b:3c:9d:77:a8:62:6b:58:77:32:
         62:a9:39:b4:dd:b1:e5:8d:a8:4f:65:39:9e:f7:64:12:6f:77:
         fb:f5:63:7c:52:76:09:fd:31:2e:7d:f8:f7:10:cd:7b:a2:6c:
         ab:20:52:cc:c4:fa:1c:0a:23:ee:9e:d5:8a:9c:f3:27:46:98:
         3e:52:ed:18:03:98:38:87:8e:80:87:bb:c4:9e:67:5f:b7:3d:
         a1:c8:86:15:90:b6:7d:8e:ba:b9:68:d9:78:2f:1c:93:5f:f0:
         ed:e0:28:f3:32:cf:de:b8:1a:97:86:f1:72:b1:e1:5f:22:4d:
         2f:7b:47:1e:71:2b:cf:21:f3:b0:ef:79:77:e6:a6:8a:d2:b5:
         1d:87:dd:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:33:43 2025 by rpki-client