Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c0d644ed-3d56-3130-9b9a-b1b82d00adbe.roa
File:                     c0d644ed-3d56-3130-9b9a-b1b82d00adbe.roa (raw, json)
Hash identifier:          NajggntDGUpy7josw5goI7Q0rM2WKrDJXP1fRYu4Klg=
Subject key identifier:   EF:24:67:22:B4:5E:1C:EC:C9:74:B9:72:FD:C6:89:2B:48:AD:FA:EE
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858499294AD8F9BB2D38B0EC79EC0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c0d644ed-3d56-3130-9b9a-b1b82d00adbe.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     209854
IP address blocks:        142.111.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:ad:8f:9b:b2:d3:8b:0e:c7:9e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=128f61ed-055a-44cd-882c-ca160218cd0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:23:21:c6:cd:8f:ce:ec:76:e0:48:85:5b:ca:
                    fa:a5:44:bc:50:48:68:89:10:f2:7a:51:35:3b:89:
                    ba:95:75:fd:8b:06:55:46:6b:5c:ea:19:b0:af:e1:
                    e0:11:32:d8:dd:3f:27:1a:d9:a9:96:ec:9a:b8:e0:
                    5c:f9:02:60:dd:bd:bd:81:9f:8a:13:f4:5c:c6:e4:
                    ef:d0:4f:b9:44:51:86:df:95:c0:75:aa:cd:76:14:
                    0f:90:10:c3:01:61:78:04:3d:70:26:51:a1:12:5b:
                    55:37:0f:95:17:0e:18:81:71:88:02:8c:34:53:93:
                    a6:c5:b3:80:9a:f0:2e:41:bd:37:af:7e:93:7e:cd:
                    91:3d:33:fd:1c:57:c1:c8:00:a1:02:63:7a:0b:97:
                    1f:79:6e:bd:69:8f:a0:6c:b3:69:a6:43:91:11:55:
                    dc:3a:dd:6f:b6:f5:47:23:ff:66:da:82:40:9b:9b:
                    e2:53:02:78:ec:b7:80:be:4a:4d:23:89:0b:37:78:
                    29:a3:47:4a:c6:4f:0f:32:dd:c4:01:0c:4a:79:d0:
                    3a:42:e3:40:06:3d:f8:21:12:74:05:ce:c4:6a:67:
                    68:ca:ca:4e:58:98:19:46:fd:52:0d:f9:0b:44:be:
                    fd:2b:aa:b3:44:d4:ec:04:c8:a3:00:4e:99:4c:95:
                    3c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:24:67:22:B4:5E:1C:EC:C9:74:B9:72:FD:C6:89:2B:48:AD:FA:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c0d644ed-3d56-3130-9b9a-b1b82d00adbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:38:f9:61:13:0d:ba:22:49:cd:0f:30:32:30:53:cf:c9:bc:
         a6:43:4a:ee:31:0d:b4:38:d9:32:cb:3b:f2:fd:0d:d1:47:61:
         63:a7:2b:8f:c4:bf:ea:4a:d2:f8:be:12:24:fa:f2:ec:fc:98:
         69:0b:c2:eb:b1:b3:70:17:ca:01:5e:e3:66:10:16:78:c7:ab:
         ae:f4:ef:93:e1:cf:1f:c5:27:a1:9c:cd:77:59:3c:f1:dc:0d:
         ae:ed:57:18:87:fb:4a:74:43:bb:ff:05:d4:e9:c1:36:0b:45:
         10:36:31:8e:ac:60:3b:3a:a5:fa:3d:67:70:27:fa:a4:4c:6a:
         b1:b0:92:39:3d:b5:33:85:fa:68:ba:05:60:2f:dc:9b:87:b1:
         3e:30:be:d8:c6:9e:a3:ab:d5:55:d1:61:2e:c7:11:54:45:2d:
         e7:ee:5a:2e:28:69:d6:c6:08:ce:fd:67:11:c9:4d:e3:00:ca:
         5b:7d:07:40:e3:ae:76:51:6f:a2:c9:e7:be:3a:d7:64:1a:8c:
         d2:b8:07:7b:4b:fd:cb:94:97:34:1b:58:9f:4c:49:ba:fd:1e:
         92:11:4f:48:a4:49:6a:31:b0:86:da:5e:39:55:a3:bf:6c:7c:
         37:03:11:7f:c3:68:9b:7d:79:b3:92:78:aa:e7:ac:ba:b5:b6:
         25:9a:5b:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlK2Pm7LTiw7HnsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk
MTI4ZjYxZWQtMDU1YS00NGNkLTg4MmMtY2ExNjAyMThjZDBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCMhxs2Pzux24EiFW8r6pUS8UEhoiRDyelE1
O4m6lXX9iwZVRmtc6hmwr+HgETLY3T8nGtmpluyauOBc+QJg3b29gZ+KE/RcxuTv
0E+5RFGG35XAdarNdhQPkBDDAWF4BD1wJlGhEltVNw+VFw4YgXGIAow0U5OmxbOA
mvAuQb03r36Tfs2RPTP9HFfByAChAmN6C5cfeW69aY+gbLNppkOREVXcOt1vtvVH
I/9m2oJAm5viUwJ47LeAvkpNI4kLN3gpo0dKxk8PMt3EAQxKedA6QuNABj34IRJ0
Bc7EamdoyspOWJgZRv1SDfkLRL79K6qzRNTsBMijAE6ZTJU8WwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO8kZyK0XhzsyXS5cv3GiStIrfruMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYzBkNjQ0ZWQtM2Q1Ni0z
MTMwLTliOWEtYjFiODJkMDBhZGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm8YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFg4+WETDboiSc0PMDIwU8/JvKZDSu4xDbQ42TLLO/L9DdFHYWOnK4/E
v+pK0vi+EiT68uz8mGkLwuuxs3AXygFe42YQFnjHq67075Phzx/FJ6GczXdZPPHc
Da7tVxiH+0p0Q7v/BdTpwTYLRRA2MY6sYDs6pfo9Z3An+qRMarGwkjk9tTOF+mi6
BWAv3JuHsT4wvtjGnqOr1VXRYS7HEVRFLefuWi4oadbGCM79ZxHJTeMAylt9B0Dj
rnZRb6LJ574612QajNK4B3tL/cuUlzQbWJ9MSbr9HpIRT0ikSWoxsIbaXjlVo79s
fDcDEX/DaJt9ebOSeKrnrLq1tiWaW40=
-----END CERTIFICATE-----
Generated at Sat May 10 10:55:29 2025 by rpki-client