Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f90efa6b-abcf-3924-89e5-53ad6d788ed6.roa
File:                     f90efa6b-abcf-3924-89e5-53ad6d788ed6.roa (raw, json)
Hash identifier:          G/azPSdSdWi3nGJIPNhefHnGbiNJSzTwlvTE9U8fakw=
Subject key identifier:   F8:B3:6E:0F:08:01:93:79:49:21:BD:36:D5:34:B4:80:FE:FB:59:DA
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584908817D6F940481B10FFDF928
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f90efa6b-abcf-3924-89e5-53ad6d788ed6.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     393886
IP address blocks:        142.111.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:7d:6f:94:04:81:b1:0f:fd:f9:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=b4b89bc9-df46-4fe4-8112-e54f95d7f586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4b:0e:1d:71:75:36:fe:78:2e:18:f0:90:38:
                    fa:de:d8:68:31:e6:96:41:c1:af:59:3f:db:b3:91:
                    f3:2e:1c:26:e5:96:d7:6d:fd:8f:2f:d5:34:c2:f0:
                    68:bf:6e:78:b1:64:aa:fc:86:d9:3c:59:12:9e:7b:
                    b2:6c:48:3d:2f:cb:c6:02:fc:ea:33:fc:e9:2f:02:
                    11:f0:d7:ce:12:a0:ab:3c:08:8b:ad:cb:3e:38:92:
                    ad:d8:88:cd:e7:7f:40:7c:83:4e:7f:50:69:8f:0e:
                    b6:06:3d:b1:1d:29:62:f1:30:b0:2c:82:a2:fc:4d:
                    fb:e0:c3:ff:b3:41:b1:0a:d4:45:5b:e9:60:b7:4d:
                    a2:b4:e9:46:24:7f:a1:39:73:bb:66:a5:66:c1:12:
                    77:93:22:0f:84:b5:b8:0d:75:3d:d6:fc:72:95:55:
                    0b:a0:2a:b8:7a:9a:e7:21:b7:4b:11:55:48:d9:85:
                    18:0e:8e:71:a0:63:0b:09:f8:0c:fa:1d:7c:f6:d2:
                    d9:6a:e3:60:50:dd:89:0a:86:6e:58:b9:ed:a2:00:
                    c4:b4:f7:41:35:2c:61:19:1e:9a:8d:57:f8:b3:74:
                    30:8a:f7:bf:c7:5e:e3:6d:44:f1:d5:62:7a:e1:94:
                    31:bb:91:6b:09:f4:ed:c5:a0:96:b7:af:3c:dd:51:
                    49:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B3:6E:0F:08:01:93:79:49:21:BD:36:D5:34:B4:80:FE:FB:59:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f90efa6b-abcf-3924-89e5-53ad6d788ed6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:3d:c7:04:7a:9f:44:43:d9:15:d6:4b:76:50:7d:7b:8d:5e:
         b4:d2:e3:3b:83:43:fb:3a:ae:90:76:87:57:6e:05:84:7f:fe:
         b6:60:cd:37:5e:e1:46:48:b9:78:fe:52:e9:9b:1b:fa:8e:bd:
         dc:1b:be:24:b9:a0:0e:6d:75:77:f8:31:1c:44:f5:aa:cb:81:
         b3:3b:68:53:21:40:cf:05:c9:3e:6e:61:a4:f8:77:44:7f:91:
         4f:c6:61:c5:f3:15:6a:1c:59:49:e1:de:36:cf:b4:4d:2c:7d:
         70:d8:5e:52:bd:67:b4:7e:52:1b:de:19:0a:1e:b3:67:fa:9a:
         67:d7:1b:0d:75:cf:86:d8:bd:aa:8f:80:8a:4e:d4:db:aa:59:
         51:42:17:4b:f1:2c:f8:b3:12:aa:8f:b2:db:90:92:d7:1f:2e:
         05:30:20:bf:8f:ce:fa:ea:16:0a:d5:f3:19:60:6b:da:e8:31:
         c2:23:0e:35:3b:4f:2b:3a:e8:58:ba:1b:7a:ac:4c:a5:f7:38:
         be:80:4e:63:f7:79:a5:39:00:81:02:45:98:bd:08:4d:fe:f6:
         16:0b:65:62:18:3e:18:c1:4a:c6:5d:30:17:ec:13:ee:b6:c2:
         94:f8:cd:27:6e:02:31:bf:c9:98:e9:ee:23:03:08:cb:ab:89:
         f8:9e:a4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:07:17 2025 by rpki-client