Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/00ed33f2-07f3-3bac-9b41-149775c6ccf5.roa
File:                     00ed33f2-07f3-3bac-9b41-149775c6ccf5.roa (raw, json)
Hash identifier:          N5yDXo6DrI2vz6ilzIonc5QxX7fKCT3YQHXP1C61ZE4=
Subject key identifier:   58:71:4F:46:84:B5:6E:98:4B:E5:5E:67:2F:09:7D:8E:C3:58:35:7B
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A5292F39369E4923CBFFE4F00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/00ed33f2-07f3-3bac-9b41-149775c6ccf5.roa
Signing time:             Thu 26 Jun 2025 19:33:08 +0000
ROA not before:           Thu 26 Jun 2025 19:33:08 +0000
ROA not after:            Wed 24 Sep 2025 19:33:08 +0000
asID:                     11404
IP address blocks:        142.111.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:52:92:f3:93:69:e4:92:3c:bf:fe:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun 26 19:33:08 2025 GMT
            Not After : Sep 24 19:33:08 2025 GMT
        Subject: CN=d10cd836-4339-4704-bd25-308d9a610fb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c2:3e:f2:4c:8f:e4:8a:71:de:70:94:63:ba:
                    b5:88:aa:0b:b2:87:c8:32:9e:95:aa:01:47:e2:aa:
                    b5:72:7e:f0:be:8b:fe:20:61:77:f9:3d:0b:5c:e6:
                    bd:a2:7b:5c:9e:85:e1:16:da:5a:56:3a:05:a1:ce:
                    18:20:73:9d:1b:c6:05:36:c8:48:4d:78:01:4b:ef:
                    c7:f4:a3:fc:98:06:2f:5e:b4:ae:43:59:a6:ac:01:
                    54:1c:c2:c1:b6:5a:69:96:39:ec:ea:08:94:e3:f4:
                    66:c8:e4:14:ac:18:8d:43:16:03:94:30:66:1f:bb:
                    a0:c8:8c:e6:6c:51:94:6e:99:b7:a5:94:96:ff:66:
                    e0:1e:bc:70:e6:5c:4e:34:da:ff:e1:cb:03:8c:ca:
                    55:a9:ac:24:76:67:43:e0:b0:3a:93:7e:32:0c:72:
                    52:84:9d:5e:be:79:87:94:06:6e:1d:b0:46:55:14:
                    c9:f4:84:a3:83:cb:f9:9a:8e:21:75:76:9f:93:84:
                    9d:de:31:50:9a:ba:2c:2b:76:e5:c5:fb:bd:20:84:
                    31:3a:5d:fb:88:9b:83:68:16:cb:b9:b8:ff:c9:c5:
                    f3:d6:21:f8:94:20:0f:b3:a4:4f:ae:5e:ea:78:e8:
                    3d:61:8e:c5:dc:7c:8d:e4:a1:0a:0e:d3:9d:6e:bd:
                    a1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:71:4F:46:84:B5:6E:98:4B:E5:5E:67:2F:09:7D:8E:C3:58:35:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/00ed33f2-07f3-3bac-9b41-149775c6ccf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:c4:35:cc:c8:d5:5e:ef:9f:15:1f:6f:31:07:ee:2d:e1:89:
         5e:50:a8:b6:0b:fd:02:9d:fe:33:05:72:06:c6:f5:be:85:6e:
         98:4e:92:94:9f:6a:06:fc:71:67:e8:18:e3:46:5e:6a:2a:9a:
         51:d1:15:07:be:06:f6:fc:89:a9:a4:f4:cd:13:cd:b0:85:48:
         70:2b:50:03:73:82:3e:61:60:a0:42:10:72:30:93:c9:96:ec:
         98:de:77:ec:d9:28:1c:81:1c:72:74:d5:37:66:c3:45:a7:f7:
         6d:c5:33:c9:97:a8:db:19:25:05:85:6b:28:27:0b:80:94:df:
         20:c5:e8:9d:05:85:0d:90:74:2b:f0:f0:8e:ee:6c:7a:ce:e6:
         91:99:77:88:b0:31:8c:6d:95:72:81:bc:cb:5e:28:fe:c0:96:
         8d:dc:6f:27:f3:21:3f:76:4e:d9:69:b0:55:e7:33:7d:ca:36:
         f5:d1:d5:45:2b:45:e4:a4:52:d8:f0:49:2f:c8:d0:e9:cd:33:
         9a:c6:70:08:12:58:1b:05:15:fa:e5:48:a3:8e:be:9a:dd:45:
         47:a0:a5:32:1e:3d:1d:5a:fb:c2:90:16:9f:a6:b3:f6:4c:3e:
         d4:14:91:af:24:ee:7f:2a:35:e5:86:34:b2:d4:2c:0f:25:96:
         c8:39:8b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 17:10:24 2025 by rpki-client