Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/1dfb0410-c853-3b79-abaa-0f67acc343b1.roa
File:                     1dfb0410-c853-3b79-abaa-0f67acc343b1.roa (raw, json)
Hash identifier:          BO0xRfl8PjdaQyDTOUR3qEngan1zTNdpFpfhbPSHatY=
Subject key identifier:   78:D6:04:0E:21:74:32:81:22:46:E8:79:29:72:ED:F2:36:43:2C:7C
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F43285848E2D10BB67FF4D62DF8588E80
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/1dfb0410-c853-3b79-abaa-0f67acc343b1.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     11537
IP address blocks:        64.57.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:0b:b6:7f:f4:d6:2d:f8:58:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=9d70bfa7-b13c-4561-98a4-68e97267cd6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bb:73:75:39:92:0e:87:2c:47:cb:16:37:81:
                    d9:f5:39:fc:5a:f6:7f:b8:28:b6:f5:e8:b2:c9:8f:
                    2f:4d:42:3e:8f:97:2d:dd:17:19:fd:f6:cd:79:30:
                    27:8f:5e:0b:bb:eb:7b:8c:b8:26:98:2b:ca:22:2f:
                    5a:52:df:cb:85:ae:3b:9c:ed:7c:15:92:35:13:4f:
                    a0:59:12:bc:8a:97:09:01:72:81:57:51:1a:ce:eb:
                    e2:50:fa:ad:79:f5:b8:5a:b4:5d:62:a8:ad:63:8c:
                    4f:33:da:87:8a:af:70:c2:4e:dc:46:49:7f:40:5d:
                    17:5f:8a:e9:cf:13:85:b4:05:34:7d:1f:65:4f:e7:
                    0d:00:67:4d:09:fc:96:19:2b:dd:69:3f:57:7d:65:
                    79:5b:bb:5a:86:30:f9:11:34:a1:92:f5:5f:a1:5a:
                    f3:3d:88:de:91:b7:b8:4f:d3:6e:79:f0:33:50:ad:
                    21:0e:45:a8:fb:9e:55:2e:2e:34:26:55:40:55:ce:
                    f7:62:3c:30:91:77:d3:2f:31:d5:9c:c0:ac:06:44:
                    71:f7:5f:cf:f3:b9:02:43:51:07:88:0f:da:05:a6:
                    48:2f:b7:0e:bf:71:c4:c7:ca:5a:d6:b2:a3:f9:ec:
                    d4:bb:42:98:c1:84:b2:5c:03:a0:43:a7:eb:c9:d2:
                    78:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D6:04:0E:21:74:32:81:22:46:E8:79:29:72:ED:F2:36:43:2C:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/1dfb0410-c853-3b79-abaa-0f67acc343b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:0d:39:6e:e6:15:00:55:08:78:0d:9c:84:f6:1d:9f:92:62:
         37:c9:fd:6c:7f:cd:a9:88:68:2a:2f:a0:79:13:81:ff:3a:b3:
         bc:b6:6d:4d:e5:59:cf:19:e6:54:71:87:c7:d5:8b:32:b2:ec:
         33:0e:7d:8d:22:8d:32:54:35:d0:b9:12:b9:14:85:50:1b:47:
         65:c4:a5:b4:5f:e2:39:f4:66:06:71:c1:25:73:2b:89:98:d0:
         bb:8a:30:d5:61:2c:cf:8d:55:c4:55:9d:95:90:ff:f8:0f:52:
         b4:18:07:3c:28:a6:4a:a0:f4:c1:1e:bb:3f:e8:67:04:eb:77:
         13:5a:db:69:cf:14:b4:45:38:45:41:1b:d8:6f:80:5e:9b:30:
         27:ab:bd:7b:cd:41:26:4c:91:76:6c:5f:34:f7:71:40:22:f4:
         3f:2a:64:ec:ff:09:0d:9a:9f:1c:ad:2c:bb:b9:0c:55:6b:36:
         ed:c5:2d:35:29:c2:0d:58:4c:9f:58:68:14:a3:65:eb:a1:79:
         d1:de:ea:f0:91:c2:8a:ae:3f:30:bb:02:0f:73:ad:10:d2:75:
         a5:dc:65:7a:e4:48:a2:4e:8d:8e:6e:46:4e:1c:0f:9d:98:23:
         af:8c:49:8b:16:83:12:44:81:41:e0:a0:d0:86:9c:ab:cc:64:
         55:98:22:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:44:39 2025 by rpki-client