Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bd34d4d8-bb8b-3c87-ab4e-319d8dd900c5.roa
File:                     bd34d4d8-bb8b-3c87-ab4e-319d8dd900c5.roa (raw, json)
Hash identifier:          r9u3USFtc/8UBdLROAgCBNi1T4zp5VxeerqZBSEnpp0=
Subject key identifier:   E8:EC:5E:CE:41:F7:5F:54:A4:72:11:B9:C9:2B:8F:0A:90:39:D3:8D
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858492E13CA2A7D2E7D78AE35F900
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bd34d4d8-bb8b-3c87-ab4e-319d8dd900c5.roa
Signing time:             Fri 14 Mar 2025 01:00:39 +0000
ROA not before:           Fri 14 Mar 2025 01:00:39 +0000
ROA not after:            Thu 12 Jun 2025 01:00:39 +0000
asID:                     27411
IP address blocks:        142.111.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:13:ca:2a:7d:2e:7d:78:ae:35:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar 14 01:00:39 2025 GMT
            Not After : Jun 12 01:00:39 2025 GMT
        Subject: CN=63829c11-b761-4314-aad1-09a7aca185c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cf:6d:aa:9e:68:a3:30:62:ee:14:57:c6:0b:
                    be:c1:8b:69:11:16:76:34:b4:c5:85:64:55:21:4f:
                    a5:66:59:8c:c9:f7:71:32:85:6a:4a:4e:67:17:ad:
                    f2:5a:30:04:f5:18:ac:28:d8:8c:38:9a:40:c4:b1:
                    17:05:e0:88:93:d4:f7:59:a6:17:f4:d7:f2:00:2c:
                    b5:9d:f9:6a:04:e7:4b:d0:5a:5d:9b:85:69:28:9d:
                    68:33:5b:42:81:73:9e:f6:70:be:63:c7:ec:6d:d3:
                    05:40:0f:09:0d:6c:43:49:6d:82:bc:69:62:a5:c4:
                    98:04:bf:4c:7b:bb:6c:45:35:72:ff:7b:d9:98:e4:
                    3d:19:1a:49:a3:d1:c5:bd:51:c5:fe:6c:a4:56:84:
                    c0:88:9e:80:e5:b5:67:42:77:61:59:6d:60:1b:30:
                    03:09:5e:0f:30:ea:63:7d:9c:4c:bf:62:41:83:15:
                    8c:db:19:6f:e5:d5:1c:55:87:60:1d:ab:41:a1:e7:
                    f4:9f:e0:2e:7f:7c:4b:2c:4c:e9:07:2c:ce:7d:b7:
                    52:d1:a8:8e:b1:24:48:6d:3b:1e:9a:40:9a:ad:aa:
                    e6:63:5f:08:69:1a:be:39:5d:53:d9:0d:e5:cf:af:
                    91:f2:e8:e3:a0:50:0c:ab:d5:b5:3f:72:9f:99:dd:
                    a0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:EC:5E:CE:41:F7:5F:54:A4:72:11:B9:C9:2B:8F:0A:90:39:D3:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bd34d4d8-bb8b-3c87-ab4e-319d8dd900c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:97:3f:ac:03:87:d9:08:90:93:bb:e7:fe:ef:ee:62:4a:6e:
         7f:1a:1a:9d:dd:e6:77:cc:f8:a7:49:19:f0:bb:3e:e8:52:2e:
         4e:78:bf:93:92:a1:52:21:fb:91:ad:93:14:c0:2c:9b:fb:42:
         3c:1c:1f:cc:83:ad:7f:ba:63:a6:fc:58:57:c0:54:9d:a6:fe:
         2a:61:da:75:25:24:6d:a1:ca:6c:21:0b:0a:cf:85:b9:75:7c:
         ce:4d:71:4a:71:36:52:58:5a:75:d1:2a:74:f5:d9:f7:2b:9b:
         2b:94:82:ea:a8:3d:63:82:85:a1:db:60:17:96:a2:4a:3d:eb:
         4c:41:7a:63:00:0a:50:4d:7e:5f:2f:8a:cc:ae:9e:77:5e:21:
         43:16:96:bc:83:93:38:04:84:81:da:4a:11:53:a7:32:f0:3b:
         c8:33:da:b9:ae:5e:09:17:21:df:31:3a:be:43:47:b0:8a:76:
         64:99:04:c8:bf:ec:7c:4c:d7:09:93:db:4e:63:d4:2a:99:48:
         17:3f:c7:db:56:1e:36:ad:d0:1d:ff:62:9f:10:4f:de:9c:0d:
         8f:dc:35:77:60:37:58:71:00:ed:9c:c8:6e:51:0d:ec:61:b4:
         ed:fa:1f:45:70:0d:61:b3:7d:cd:3b:a3:aa:89:8d:b4:3e:e6:
         a3:1c:8b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:58:01 2025 by rpki-client