Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e3503f2e-6354-31b0-bc3a-9365a9fd4f3f.roa
File:                     e3503f2e-6354-31b0-bc3a-9365a9fd4f3f.roa (raw, json)
Hash identifier:          AEDEiCxSPfwH3k9pBQglxmmBpWt4lbbABwbjGYRaXCg=
Subject key identifier:   5A:02:0B:0F:AA:94:19:2B:64:CA:F6:6F:36:81:2F:78:63:7B:C1:29
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A71EB59CFB257E4D03EB89200
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e3503f2e-6354-31b0-bc3a-9365a9fd4f3f.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     209854
IP address blocks:        142.111.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:59:cf:b2:57:e4:d0:3e:b8:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=ea0bbd35-1d97-4582-acf2-c60ae27d6319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:05:b1:cd:94:a2:fd:43:66:53:7f:49:48:3b:
                    3b:cf:32:18:bb:d4:fe:27:20:85:04:3b:a3:93:80:
                    c7:dc:37:22:8b:9d:7f:86:9e:cb:c3:b4:06:38:aa:
                    09:79:85:10:05:76:b3:3f:da:67:da:95:75:5c:0b:
                    0a:e9:33:3f:05:0f:b1:f8:5b:ba:5e:52:66:f6:b2:
                    db:41:4a:e8:df:25:f5:e3:3c:7e:8a:56:61:2c:ad:
                    2f:15:c2:4a:4f:fa:15:23:78:18:7e:4d:fb:3c:8e:
                    86:b5:fb:da:18:65:8f:23:04:03:e1:d5:0b:31:08:
                    e8:3e:e5:9e:a4:5d:22:6f:7a:af:ce:23:dc:57:2f:
                    51:37:cd:a4:73:87:f6:aa:32:a9:17:9b:7c:e4:40:
                    f1:9a:9c:5f:e1:5a:c1:76:ef:ab:92:26:16:71:bc:
                    c8:58:c7:c0:83:65:7a:08:41:fc:e4:91:3b:bf:c5:
                    ef:bb:14:3a:3a:18:11:c6:7c:2a:dd:b5:70:3f:9b:
                    46:5d:8d:25:63:6b:fb:e0:6c:e7:1f:9b:45:21:95:
                    e8:e9:05:b5:46:5f:5b:4e:7d:0f:a7:88:5a:5d:67:
                    0d:54:d3:9d:ad:b0:ec:ec:37:f1:9c:82:2a:59:90:
                    85:ab:5b:38:71:8c:db:5c:fa:96:45:64:68:bb:f8:
                    35:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:02:0B:0F:AA:94:19:2B:64:CA:F6:6F:36:81:2F:78:63:7B:C1:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e3503f2e-6354-31b0-bc3a-9365a9fd4f3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:01:9b:c3:45:1a:f2:65:b9:07:a4:ad:0c:0c:05:0b:aa:0a:
         74:6d:08:f1:ef:44:2a:62:fd:c1:ff:d3:dd:82:43:b9:92:99:
         d5:29:95:6c:20:c0:a5:9b:d8:7c:19:f4:0f:2c:03:a8:af:ab:
         14:78:62:44:e0:aa:c2:42:1e:07:32:33:e7:be:fb:ea:6d:9c:
         a3:67:8d:99:18:1a:c8:f4:e2:99:f1:7e:4e:1a:ec:c3:ea:00:
         5c:ff:f1:ee:09:48:d3:91:b4:fc:11:bd:86:fb:bc:7b:cd:d8:
         7f:74:16:d2:8f:52:87:aa:10:30:ad:e9:4b:3b:f3:fc:04:1f:
         6d:83:71:c2:95:45:bc:3e:e4:75:a9:7c:1d:bd:64:fa:20:73:
         3b:a2:82:35:a7:84:d3:9c:4b:56:1f:80:ab:f3:4c:06:6f:84:
         2e:ff:04:b4:bc:e3:73:23:03:9c:fc:65:1b:88:16:b4:8f:d6:
         c8:66:9d:90:4c:85:82:4d:10:9e:ca:a0:41:14:b1:78:fd:eb:
         95:17:be:d9:dc:12:84:cf:9a:9b:1f:ee:1c:75:c5:28:9c:ce:
         ca:c2:8e:8f:ad:ef:55:4f:96:26:fa:8a:52:2b:a2:ae:55:46:
         5b:39:f3:a3:9e:20:65:0b:32:cf:54:fc:e9:c1:13:77:4b:84:
         d3:4f:ea:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 19:54:36 2025 by rpki-client