Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4903d412-e2e7-3258-87af-90e5fb04c5d0.roa
File:                     4903d412-e2e7-3258-87af-90e5fb04c5d0.roa (raw, json)
Hash identifier:          mEWpd2KaNiAvyCzYIFl9unpVMclhSuypWQABuNorc8k=
Subject key identifier:   19:99:43:9C:5D:89:04:A3:20:95:BE:A6:EA:63:EA:E7:82:76:00:80
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A5292F3BFE609F9BFA635A600
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4903d412-e2e7-3258-87af-90e5fb04c5d0.roa
Signing time:             Thu 26 Jun 2025 19:33:08 +0000
ROA not before:           Thu 26 Jun 2025 19:33:08 +0000
ROA not after:            Wed 24 Sep 2025 19:33:08 +0000
asID:                     11404
IP address blocks:        142.111.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:52:92:f3:bf:e6:09:f9:bf:a6:35:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun 26 19:33:08 2025 GMT
            Not After : Sep 24 19:33:08 2025 GMT
        Subject: CN=8915398b-1e08-4c33-a720-4ecf77df798c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ec:cb:2a:22:cf:01:f4:9d:e7:fd:13:ea:33:
                    1f:64:fe:d5:66:45:b5:c2:e7:90:56:87:c6:6d:1a:
                    c3:31:93:bb:c1:a0:e1:62:c0:90:ff:9e:a7:bc:d8:
                    50:f4:4f:c3:4b:ad:4b:6f:3a:af:2f:eb:e8:ab:d6:
                    80:e3:26:9e:24:2e:67:25:60:cb:8f:44:44:dd:5e:
                    f8:7f:01:81:12:4a:05:7c:78:a2:32:06:d6:6a:a9:
                    1c:41:8b:c7:ac:c4:f1:64:ec:61:e8:c4:c8:dc:6e:
                    71:5f:86:17:20:ab:55:a8:aa:d3:58:aa:b2:ed:8c:
                    bf:a5:69:fb:72:29:a9:4f:02:64:80:7f:5e:b4:73:
                    e5:a8:47:0d:b7:8e:b9:bd:1f:fc:0e:a6:ea:48:91:
                    bd:dc:c5:4c:4a:e5:8b:3f:81:0d:87:6d:82:4b:c4:
                    4e:5f:31:51:d7:43:a2:0c:91:81:93:ad:50:8d:40:
                    2c:2b:80:d4:ed:30:f2:af:17:8f:a8:93:f5:3c:7c:
                    6e:20:8e:b3:f3:b6:e0:10:40:d0:f0:ae:14:9d:ba:
                    a6:4a:34:82:2e:19:a8:45:35:b5:85:c3:8e:1a:83:
                    60:d2:68:91:72:83:b5:f3:53:4b:e3:91:97:dd:f5:
                    52:2c:6a:f9:48:b4:01:75:d3:80:5c:95:b5:18:50:
                    10:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:99:43:9C:5D:89:04:A3:20:95:BE:A6:EA:63:EA:E7:82:76:00:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4903d412-e2e7-3258-87af-90e5fb04c5d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:d1:13:94:89:a1:67:8b:48:f8:e5:2f:25:77:43:32:38:6e:
         5d:9d:ac:f4:e6:b3:d8:f7:93:07:3d:a7:ee:4a:ef:8d:47:a5:
         0a:50:d5:8a:12:0f:6d:1f:cc:04:cf:71:c4:d5:68:8c:56:78:
         fd:23:09:87:f1:2a:6a:d9:99:59:e6:e5:14:50:03:ee:e7:77:
         32:3f:73:ba:7a:37:80:6f:53:29:11:eb:58:2f:70:b2:bd:23:
         cc:b6:20:b7:81:ac:b6:9a:b9:49:3a:0b:37:8e:9f:53:96:6e:
         28:b1:e3:f0:fc:ab:50:b2:66:f6:e6:61:d9:a3:10:77:48:9a:
         5e:75:7b:05:86:96:d6:43:f7:1a:3e:31:cb:eb:00:9e:5f:68:
         06:ad:b0:de:a8:2f:eb:96:67:0b:59:9d:a0:9b:ee:15:a6:7a:
         f7:f9:4c:15:3d:37:71:61:2e:8a:4f:04:c3:99:13:46:4b:88:
         2e:b3:b8:55:f2:2a:45:68:b8:1e:9c:75:09:5b:b4:2f:85:7f:
         01:a4:eb:05:27:db:03:12:f1:9c:d4:24:cc:dc:00:37:4e:eb:
         1a:27:32:ae:63:49:f5:3c:7e:32:51:bc:22:2c:78:0c:74:09:
         95:48:87:8f:9d:dd:e2:d2:44:d8:c6:8c:05:6e:4a:49:7d:7a:
         98:3f:27:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpSkvO/5gn5v6Y1pgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDYyNjE5MzMwOFoXDTI1MDkyNDE5MzMwOFowLzEtMCsGA1UEAxMk
ODkxNTM5OGItMWUwOC00YzMzLWE3MjAtNGVjZjc3ZGY3OThjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgezLKiLPAfSd5/0T6jMfZP7VZkW1wueQVofG
bRrDMZO7waDhYsCQ/56nvNhQ9E/DS61LbzqvL+voq9aA4yaeJC5nJWDLj0RE3V74
fwGBEkoFfHiiMgbWaqkcQYvHrMTxZOxh6MTI3G5xX4YXIKtVqKrTWKqy7Yy/pWn7
cimpTwJkgH9etHPlqEcNt465vR/8DqbqSJG93MVMSuWLP4ENh22CS8ROXzFR10Oi
DJGBk61QjUAsK4DU7TDyrxePqJP1PHxuII6z87bgEEDQ8K4UnbqmSjSCLhmoRTW1
hcOOGoNg0miRcoO181NL45GX3fVSLGr5SLQBddOAXJW1GFAQ/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBmZQ5xdiQSjIJW+pupj6ueCdgCAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNDkwM2Q0MTItZTJlNy0z
MjU4LTg3YWYtOTBlNWZiMDRjNWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm94MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAELRE5SJoWeLSPjlLyV3QzI4bl2drPTms9j3kwc9p+5K741HpQpQ1YoS
D20fzATPccTVaIxWeP0jCYfxKmrZmVnm5RRQA+7ndzI/c7p6N4BvUykR61gvcLK9
I8y2ILeBrLaauUk6CzeOn1OWbiix4/D8q1CyZvbmYdmjEHdIml51ewWGltZD9xo+
McvrAJ5faAatsN6oL+uWZwtZnaCb7hWmevf5TBU9N3FhLopPBMOZE0ZLiC6zuFXy
KkVouB6cdQlbtC+FfwGk6wUn2wMS8ZzUJMzcADdO6xonMq5jSfU8fjJRvCIseAx0
CZVIh4+d3eLSRNjGjAVuSkl9epg/J0o=
-----END CERTIFICATE-----
Generated at Sun Jun 29 20:18:55 2025 by rpki-client