Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d349f1b5-4392-3e90-923c-6cb7da6ecfcc.roa
File:                     d349f1b5-4392-3e90-923c-6cb7da6ecfcc.roa (raw, json)
Hash identifier:          gLRrHsntmhOJnxwIumPK66rPAs5tBh2zL2AjsKLZcVM=
Subject key identifier:   06:D7:0E:0F:D5:3D:8B:0F:F3:64:1A:C5:AD:C6:58:5D:0E:AA:8B:0B
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A6DBB5D471337EFD937D75300
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d349f1b5-4392-3e90-923c-6cb7da6ecfcc.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     18779
IP address blocks:        142.111.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:5d:47:13:37:ef:d9:37:d7:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=e9e2d4da-a08b-4c0c-8681-783c9cca3383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bf:01:9e:ab:92:7a:92:57:9f:5d:ab:d4:8a:
                    99:d4:4e:c5:b8:5e:c0:54:81:e9:3e:45:c9:0d:48:
                    e1:ce:d2:19:58:1d:2c:36:8f:c0:d6:4a:c1:d9:e5:
                    a7:c4:c2:e2:7d:65:80:14:a6:c0:d7:64:ac:98:24:
                    14:f7:f0:de:fe:6c:3f:ba:da:87:de:f9:9a:34:39:
                    5a:fa:e1:3f:07:a6:91:e1:1a:25:80:53:12:b7:84:
                    a3:23:42:a8:58:8f:9e:5b:5d:77:ff:32:35:2d:30:
                    29:e2:a8:a5:58:85:70:74:72:82:50:b5:8d:58:69:
                    d1:d9:5d:34:e6:29:88:7a:87:7d:eb:1c:c3:64:b9:
                    f4:d1:27:62:db:6b:62:1b:cc:f0:29:f9:31:4f:b5:
                    2f:de:c3:15:cb:53:70:ba:88:75:fd:80:f7:20:47:
                    b3:42:9c:e1:a8:94:38:45:75:8c:2f:36:30:5e:3d:
                    4e:f1:07:09:dc:32:c8:26:97:f6:1b:00:72:ff:c0:
                    20:40:72:f0:b3:cf:6c:90:31:ac:ec:3a:d4:36:39:
                    8a:70:b1:ae:b1:ce:e6:df:09:c8:06:11:92:18:b2:
                    82:4d:d1:f8:96:51:53:32:ee:d9:69:2b:be:a6:f3:
                    76:da:d8:fd:4b:e9:fc:e1:1d:85:2e:97:d1:b2:77:
                    2d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D7:0E:0F:D5:3D:8B:0F:F3:64:1A:C5:AD:C6:58:5D:0E:AA:8B:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d349f1b5-4392-3e90-923c-6cb7da6ecfcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:8f:92:df:65:ef:76:2d:1a:27:b5:f8:ee:4b:bf:b8:db:f7:
         f3:0a:eb:cc:a1:03:71:9e:1c:1d:14:80:20:55:62:54:97:d0:
         f3:bc:d4:0c:50:94:0b:11:10:17:51:a7:8d:3e:33:b4:57:a8:
         b8:94:8a:f3:1d:72:12:63:39:36:57:d7:bb:b7:03:0b:c4:79:
         89:3a:be:06:45:26:9d:60:80:c4:a3:6d:a0:0b:77:93:72:2a:
         77:c2:30:cb:62:c8:00:00:77:e5:06:bf:25:7f:cb:d2:a2:d3:
         ab:f2:17:f3:23:d7:e8:25:e2:6c:c8:a6:5f:16:9f:68:c1:4c:
         e6:d6:5b:de:a1:27:86:38:65:e7:24:17:97:8c:18:05:aa:6c:
         1b:bc:33:af:48:60:fb:97:4c:08:6c:8a:15:d3:7d:d5:06:a3:
         46:bc:65:4b:d4:40:42:2a:81:64:8e:3c:ca:5f:76:6e:47:34:
         0a:87:41:93:1b:14:d9:ee:92:7e:05:65:bb:ae:b1:fc:94:53:
         7a:54:ce:38:b7:1a:0b:af:69:5f:a0:19:96:2a:2f:55:56:b8:
         fa:90:1a:7f:57:34:0d:c3:c5:fc:1e:d7:27:76:40:1b:cb:50:
         19:a6:2c:69:e8:98:7a:c8:b1:c2:e5:ec:81:99:0d:f3:ba:b0:
         cb:30:fe:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 18:42:17 2025 by rpki-client