Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0958ac1b-2426-3cc0-b674-db9f81b43b22.roa
File:                     0958ac1b-2426-3cc0-b674-db9f81b43b22.roa (raw, json)
Hash identifier:          oOhrPVRCRXe5HCeppqwqZPzWpP64YXc8rg3IjqiK3NU=
Subject key identifier:   DE:16:F1:5B:D0:A2:16:1D:32:80:CD:3F:D5:59:93:BF:1B:D5:25:E5
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858499294ADE87DD090827D2220D4
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0958ac1b-2426-3cc0-b674-db9f81b43b22.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     209854
IP address blocks:        142.111.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:ad:e8:7d:d0:90:82:7d:22:20:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=189abf76-b248-4cbe-a68a-e6e7de18a7a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b3:26:38:2f:31:4d:5a:25:34:22:c1:00:29:
                    04:29:36:12:48:94:ff:c4:60:0f:39:c3:a4:67:3b:
                    04:6d:74:6e:39:f0:a6:2b:ba:d9:63:91:ce:92:ee:
                    d5:39:ed:59:a4:05:45:4a:af:24:72:f5:f5:ed:72:
                    af:9a:14:8b:14:c9:c4:85:9c:13:5f:8e:6d:d2:55:
                    69:10:7c:e1:22:3a:ae:bb:7f:d3:da:28:c1:0a:d6:
                    54:f0:24:dc:a8:9e:0e:b7:10:bb:0e:96:bb:aa:ca:
                    fc:60:13:4e:b4:88:0f:fe:8a:b3:4f:e9:e6:f2:67:
                    eb:fd:76:8c:ba:2c:9e:c5:9d:fe:3c:4a:c6:1f:9b:
                    78:d0:01:d1:52:83:70:a2:9b:8a:4b:45:f2:47:f2:
                    e6:de:ee:8d:f2:e7:ff:a5:17:73:99:f1:67:93:1d:
                    94:5c:9e:5b:e2:2f:b5:40:0b:6a:d3:67:e5:6c:7e:
                    ea:96:e4:81:88:7f:1a:9c:3d:07:fe:67:57:e7:da:
                    ad:d6:23:ef:d0:8c:5c:2b:d4:c6:6f:76:17:b1:6c:
                    43:1a:61:d4:72:7d:31:40:4b:be:60:25:ef:dc:09:
                    44:f0:b4:53:2f:e8:07:eb:84:93:dc:6a:9f:4d:4e:
                    12:cf:4b:fb:5e:66:93:48:64:a5:34:7f:b8:6c:59:
                    a4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:16:F1:5B:D0:A2:16:1D:32:80:CD:3F:D5:59:93:BF:1B:D5:25:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0958ac1b-2426-3cc0-b674-db9f81b43b22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:25:fa:e1:7b:97:60:95:9f:6b:18:d1:48:36:26:7a:38:a7:
         ef:b9:59:9e:26:3e:ef:56:08:96:1d:d0:a7:56:9c:ce:43:09:
         1e:cc:5a:b1:98:6e:88:77:b6:c7:dc:29:21:74:f1:8c:cf:30:
         5e:ff:da:92:c4:30:09:cb:4f:c5:f6:84:44:2c:99:c9:b0:39:
         a1:99:c9:49:4c:18:c8:25:a1:10:de:d6:cf:59:13:b0:63:de:
         da:cc:b5:84:a4:99:5c:57:6a:d8:d6:dd:29:ee:fc:ab:99:55:
         e5:39:ae:1a:d7:8c:c1:84:c8:c0:17:8e:bc:91:c4:5c:fe:75:
         90:d6:ae:74:89:d3:4e:5f:bc:50:72:16:12:6f:eb:e1:4f:52:
         6d:ef:ce:8d:d5:00:9f:41:8d:4e:a8:22:e8:55:cb:46:e5:7b:
         30:60:d9:03:7a:1d:1b:d8:f5:8c:85:72:d4:ca:60:76:97:84:
         d9:e4:6d:7d:7e:eb:2e:8b:5f:01:a4:4f:db:f7:56:30:8d:38:
         5a:8f:af:d1:86:7b:c7:64:ab:cf:1e:ab:47:05:c9:18:0d:04:
         64:be:d7:1c:14:d8:c3:b5:da:ea:f9:09:62:03:4a:c5:52:00:
         70:cc:e0:b7:97:22:ac:ff:5f:b4:61:c5:2f:ef:cf:3e:e7:df:
         41:cb:fa:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 05:39:58 2025 by rpki-client