Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/237f4a5e-c6d6-3094-ae11-c0972a247ca5.roa
File:                     237f4a5e-c6d6-3094-ae11-c0972a247ca5.roa (raw, json)
Hash identifier:          DMTpPVu8OguZHpSOIJnpKxkv+VbPqmqQ8Z/hJCbjgPs=
Subject key identifier:   DD:EB:01:A6:C1:DA:D6:61:9B:F9:90:F5:1D:66:F2:F9:CD:3D:98:FC
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A454034CC2E67E18B36702880
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/237f4a5e-c6d6-3094-ae11-c0972a247ca5.roa
Signing time:             Sun 22 Jun 2025 01:00:50 +0000
ROA not before:           Sun 22 Jun 2025 01:00:50 +0000
ROA not after:            Sat 20 Sep 2025 01:00:50 +0000
asID:                     401152
IP address blocks:        142.111.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:45:40:34:cc:2e:67:e1:8b:36:70:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun 22 01:00:50 2025 GMT
            Not After : Sep 20 01:00:50 2025 GMT
        Subject: CN=8b243940-1052-45dc-a6fc-4b1a2d9381ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a0:75:36:43:b1:cc:2d:21:b9:50:c8:00:17:
                    b2:15:57:4e:59:d4:21:c4:23:87:d1:db:b4:f7:1f:
                    d5:4b:c3:15:79:b1:06:d8:12:21:66:12:7b:50:ed:
                    da:6a:e6:0d:b8:88:71:d6:81:76:88:b4:46:61:c8:
                    82:bd:51:e6:86:67:db:99:4f:19:6a:54:eb:cd:26:
                    12:de:d9:71:38:e5:09:b7:65:7e:31:0f:2c:d3:be:
                    93:79:a6:95:34:fb:d2:36:e9:6e:95:90:7c:de:9d:
                    23:9b:66:a9:21:1e:01:33:1c:b6:48:77:48:03:63:
                    a1:ae:e9:f4:6d:49:d7:3c:54:ef:71:f7:25:a0:83:
                    c9:ce:27:fe:26:d8:98:36:3d:69:0f:46:d2:62:84:
                    a8:7e:24:6c:1a:87:62:81:e2:9e:bd:00:6a:93:10:
                    17:d7:13:1b:7c:46:d0:fb:b3:6e:93:af:2a:53:e9:
                    4c:14:3b:83:80:a9:31:ba:3a:cb:39:f9:33:4c:a7:
                    4d:a1:22:8e:fc:a2:8b:83:f2:8a:ff:68:38:72:0b:
                    7a:c9:45:d7:9d:18:81:eb:53:ad:e1:56:b8:40:ee:
                    fc:db:6d:31:7e:37:40:8d:7b:1d:17:2e:37:08:ca:
                    74:d7:20:d0:07:76:46:16:2b:a0:b6:f0:f9:6f:b4:
                    72:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:EB:01:A6:C1:DA:D6:61:9B:F9:90:F5:1D:66:F2:F9:CD:3D:98:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/237f4a5e-c6d6-3094-ae11-c0972a247ca5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:e4:da:63:cf:c4:eb:59:3c:86:89:2e:7f:0f:44:64:b6:88:
         58:40:11:e6:23:fa:e9:dc:4a:10:c6:1f:32:e8:52:94:f1:09:
         3a:b9:74:55:74:93:ed:41:45:be:02:d8:57:d8:77:6d:25:0f:
         d2:9b:a9:8c:7f:d1:59:3f:f0:71:7b:10:b1:f5:80:fd:b0:62:
         fa:fd:3c:7d:1c:14:af:2f:a8:fb:39:f9:43:b2:7c:3c:58:73:
         01:71:e7:86:fb:f0:9b:8c:53:9e:4f:fa:a0:66:38:75:f1:3b:
         c7:64:67:63:47:2c:f3:46:bb:36:14:ec:eb:13:a0:b5:3f:1c:
         f8:25:75:b3:49:b2:f3:ae:02:d9:3c:a0:89:7b:45:c0:4e:3b:
         23:8d:31:f8:34:9f:61:ed:4e:f2:ff:10:9f:59:09:c9:bb:2a:
         80:a4:e9:79:95:d6:5a:a0:c8:67:32:30:87:d6:ec:88:52:67:
         08:98:61:d4:ed:f3:09:9f:1f:0d:41:31:1f:60:d4:45:c4:45:
         0c:ae:28:e8:d0:b0:93:31:0c:52:ce:84:df:92:83:22:43:4e:
         fc:20:ea:79:8f:ba:b3:39:5c:f3:39:8b:a1:24:ec:3e:c4:20:
         ac:d3:f7:18:8a:31:5c:37:3e:3b:17:d1:5e:57:7e:16:6b:84:
         d0:a8:74:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpFQDTMLmfhizZwKIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDYyMjAxMDA1MFoXDTI1MDkyMDAxMDA1MFowLzEtMCsGA1UEAxMk
OGIyNDM5NDAtMTA1Mi00NWRjLWE2ZmMtNGIxYTJkOTM4MWJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6B1NkOxzC0huVDIABeyFVdOWdQhxCOH0du0
9x/VS8MVebEG2BIhZhJ7UO3aauYNuIhx1oF2iLRGYciCvVHmhmfbmU8ZalTrzSYS
3tlxOOUJt2V+MQ8s076TeaaVNPvSNululZB83p0jm2apIR4BMxy2SHdIA2Ohrun0
bUnXPFTvcfcloIPJzif+JtiYNj1pD0bSYoSofiRsGodigeKevQBqkxAX1xMbfEbQ
+7Nuk68qU+lMFDuDgKkxujrLOfkzTKdNoSKO/KKLg/KK/2g4cgt6yUXXnRiB61Ot
4Va4QO78220xfjdAjXsdFy43CMp01yDQB3ZGFiugtvD5b7RydQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN3rAabB2tZhm/mQ9R1m8vnNPZj8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMjM3ZjRhNWUtYzZkNi0z
MDk0LWFlMTEtYzA5NzJhMjQ3Y2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/PMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADfk2mPPxOtZPIaJLn8PRGS2iFhAEeYj+uncShDGHzLoUpTxCTq5dFV0
k+1BRb4C2FfYd20lD9KbqYx/0Vk/8HF7ELH1gP2wYvr9PH0cFK8vqPs5+UOyfDxY
cwFx54b78JuMU55P+qBmOHXxO8dkZ2NHLPNGuzYU7OsToLU/HPgldbNJsvOuAtk8
oIl7RcBOOyONMfg0n2HtTvL/EJ9ZCcm7KoCk6XmV1lqgyGcyMIfW7IhSZwiYYdTt
8wmfHw1BMR9g1EXERQyuKOjQsJMxDFLOhN+SgyJDTvwg6nmPurM5XPM5i6Ek7D7E
IKzT9xiKMVw3PjsX0V5XfhZrhNCodHc=
-----END CERTIFICATE-----
Generated at Sun Jun 29 17:11:18 2025 by rpki-client