Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/71ed636d-ca99-38b7-8575-b121878fe45b.roa
File:                     71ed636d-ca99-38b7-8575-b121878fe45b.roa (raw, json)
Hash identifier:          g+PzhzfHG9q9Wk9G8zA7A4jI4PukTk1bhJEmD/YURNM=
Subject key identifier:   A5:C6:C8:9E:55:63:F8:7B:49:E7:AB:49:E3:43:4A:37:EE:75:B5:24
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848D6411FE58D2DB1C21F14FD00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/71ed636d-ca99-38b7-8575-b121878fe45b.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     62240
IP address blocks:        142.252.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:1f:e5:8d:2d:b1:c2:1f:14:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=2ba05054-00c5-4e51-8d54-0cf9169e3d35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4c:11:68:a5:ad:8b:0e:03:79:af:5f:57:7e:
                    7f:b4:c9:37:25:c1:d5:06:25:42:5d:9e:72:2a:08:
                    12:6d:5f:3e:dc:29:d6:87:ad:31:4a:81:05:78:23:
                    ad:00:34:91:20:93:09:82:30:1e:45:c8:7e:7f:bc:
                    56:3b:14:39:3f:c6:4c:a7:fb:47:8d:1d:fb:bb:0b:
                    26:68:16:8b:6d:ad:b0:1d:5f:a4:70:d3:8f:bc:c3:
                    7f:42:45:59:d0:b0:df:ae:e6:4f:b1:00:a9:a7:f8:
                    50:9c:ea:1f:76:5e:c7:75:8d:57:5d:7c:76:7d:59:
                    e4:14:37:e7:38:0b:8f:71:33:81:31:ea:a5:c9:d6:
                    e0:22:c3:92:29:82:93:cf:03:ab:bb:20:bd:71:2b:
                    00:8b:69:a5:17:fb:38:71:26:e1:32:e5:d0:59:76:
                    77:70:70:4d:90:fe:2a:92:ed:4f:3f:ef:3b:f3:d7:
                    69:2b:ae:ec:da:60:87:dc:8e:a8:e2:7e:89:b7:f6:
                    b0:f9:be:b1:e1:71:22:47:72:80:63:b2:d9:72:0d:
                    a3:fc:9f:39:95:b2:e0:da:77:6f:63:ed:d0:aa:0b:
                    8b:0b:4b:03:d9:fa:e2:d9:80:61:20:cd:5c:d8:d5:
                    95:8a:4d:a9:d0:f6:ea:cf:e7:f5:88:64:b4:e2:b8:
                    61:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C6:C8:9E:55:63:F8:7B:49:E7:AB:49:E3:43:4A:37:EE:75:B5:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/71ed636d-ca99-38b7-8575-b121878fe45b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:6b:cc:63:5e:77:a2:09:e9:f4:ec:f1:0b:78:43:f8:5d:ec:
         c0:e7:34:25:cd:dd:c7:f0:f4:f8:76:13:11:b8:1d:e4:f5:31:
         f4:96:56:b8:7c:a9:bb:ed:5a:e9:bf:3b:05:53:ce:e1:02:57:
         d7:26:9c:50:fd:60:28:f7:fb:2c:08:b5:e8:6e:00:c5:84:aa:
         de:19:83:fe:d1:f2:cd:88:64:a8:dd:3a:b7:30:33:95:7f:a8:
         29:99:f4:05:6e:6f:e4:e0:fa:f8:ad:71:5f:21:2c:72:34:e2:
         14:05:51:f8:82:bf:d0:4a:66:42:3c:0c:89:95:1d:e4:9f:93:
         cf:2c:a3:a5:75:40:10:0d:9d:c1:0b:3b:94:9b:ec:85:85:92:
         09:dd:0a:e4:4c:3d:72:86:30:04:b1:11:fd:99:73:3b:9d:39:
         5c:11:9f:5d:4c:cd:5c:50:1e:ce:09:7d:a6:96:2a:89:ea:f5:
         d5:6b:c8:ed:a9:1d:5f:4b:69:ed:a4:b8:27:4b:34:de:03:e6:
         19:e3:81:de:71:4f:60:d0:99:cd:f6:b9:60:24:97:97:cc:27:
         82:2b:ff:1a:78:2f:0b:d6:ef:e0:0d:ed:0f:eb:02:36:11:2e:
         14:bc:5c:3c:e5:01:56:3c:b6:da:dd:de:0b:d7:cb:55:1a:2e:
         8d:81:cd:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQR/ljS2xwh8U/QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk
MmJhMDUwNTQtMDBjNS00ZTUxLThkNTQtMGNmOTE2OWUzZDM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0wRaKWtiw4Dea9fV35/tMk3JcHVBiVCXZ5y
KggSbV8+3CnWh60xSoEFeCOtADSRIJMJgjAeRch+f7xWOxQ5P8ZMp/tHjR37uwsm
aBaLba2wHV+kcNOPvMN/QkVZ0LDfruZPsQCpp/hQnOofdl7HdY1XXXx2fVnkFDfn
OAuPcTOBMeqlydbgIsOSKYKTzwOruyC9cSsAi2mlF/s4cSbhMuXQWXZ3cHBNkP4q
ku1PP+8789dpK67s2mCH3I6o4n6Jt/aw+b6x4XEiR3KAY7LZcg2j/J85lbLg2ndv
Y+3QqguLC0sD2fri2YBhIM1c2NWVik2p0Pbqz+f1iGS04rhh3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKXGyJ5VY/h7SeerSeNDSjfudbUkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNzFlZDYzNmQtY2E5OS0z
OGI3LTg1NzUtYjEyMTg3OGZlNDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvxUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH9rzGNed6IJ6fTs8Qt4Q/hd7MDnNCXN3cfw9Ph2ExG4HeT1MfSWVrh8
qbvtWum/OwVTzuECV9cmnFD9YCj3+ywItehuAMWEqt4Zg/7R8s2IZKjdOrcwM5V/
qCmZ9AVub+Tg+vitcV8hLHI04hQFUfiCv9BKZkI8DImVHeSfk88so6V1QBANncEL
O5Sb7IWFkgndCuRMPXKGMASxEf2ZczudOVwRn11MzVxQHs4JfaaWKonq9dVryO2p
HV9Lae2kuCdLNN4D5hnjgd5xT2DQmc32uWAkl5fMJ4Ir/xp4LwvW7+AN7Q/rAjYR
LhS8XDzlAVY8ttrd3gvXy1UaLo2BzTM=
-----END CERTIFICATE-----
Generated at Thu Apr 3 22:27:56 2025 by rpki-client