Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/54c1ea89-a72d-3a00-9261-07083c5c4146.roa
File:                     54c1ea89-a72d-3a00-9261-07083c5c4146.roa (raw, json)
Hash identifier:          9pFQoznKeN8u/xvy1PyOo/Cmg4/A2ghm1uAsrnlFBS4=
Subject key identifier:   F2:F0:B7:81:F9:8E:A4:22:9F:58:93:B9:C3:D0:7B:B7:22:57:5D:AD
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F43285848E2D10BE8E9B193B170EE2E00
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/54c1ea89-a72d-3a00-9261-07083c5c4146.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     11537
IP address blocks:        64.57.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:0b:e8:e9:b1:93:b1:70:ee:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=86037bda-8a3b-4415-9406-b55f53ae4395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7c:ef:df:4b:53:1a:a2:6d:20:39:55:8c:5a:
                    74:a7:98:f3:aa:ae:55:59:65:51:ab:db:1c:70:fc:
                    7a:cf:ee:2b:d4:74:bd:52:77:3d:f7:e5:14:35:a0:
                    da:59:54:d9:9d:98:ca:60:9a:98:e4:ba:1e:90:ab:
                    b1:ab:6b:17:fb:0b:f7:d4:b9:37:0e:30:4d:eb:ae:
                    6a:0c:32:54:b8:41:f0:da:0b:ce:01:5e:37:92:ee:
                    0a:36:11:ea:73:43:21:29:7e:fa:90:38:e7:35:9a:
                    0b:0d:e2:83:ce:84:8b:bf:9a:5b:19:9f:71:e4:8c:
                    69:20:01:6e:30:93:6d:2b:8e:f1:9f:91:a0:a2:1a:
                    de:47:a5:7c:df:b5:3d:ee:4d:f9:4e:21:fa:84:7e:
                    49:4b:7e:a4:61:53:67:ef:8e:18:40:2b:4c:2d:14:
                    a0:82:91:66:a2:03:a8:00:c7:00:ce:5e:f7:ba:74:
                    50:98:57:b5:0e:b8:30:a3:22:63:ba:81:8b:f5:63:
                    f0:72:11:6a:88:3f:40:d4:0e:bf:68:82:37:ee:d0:
                    b6:9f:13:61:8a:9d:7d:32:80:41:ff:43:e7:24:58:
                    c6:2b:b1:a2:32:b2:1c:76:74:0e:9a:9d:ce:ee:3b:
                    a3:fe:37:da:4b:fd:81:08:0a:4c:3b:e5:c2:fd:f5:
                    34:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F0:B7:81:F9:8E:A4:22:9F:58:93:B9:C3:D0:7B:B7:22:57:5D:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/54c1ea89-a72d-3a00-9261-07083c5c4146.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:02:14:c1:62:1c:0b:8d:7f:dd:5b:23:6e:bd:15:9d:bc:52:
         0e:38:cf:ef:da:0c:63:01:c4:bf:91:16:8c:96:72:60:93:4b:
         83:45:fb:d5:12:92:23:1f:84:45:fd:b8:2d:51:51:c6:b5:41:
         03:9a:da:35:37:19:26:71:63:ca:1e:6f:14:59:09:4b:f3:51:
         56:c2:19:d5:c0:eb:8a:37:1e:1f:00:46:e9:4f:a4:ca:aa:1d:
         ab:e5:fe:77:97:b9:c0:d5:d5:35:b5:d5:ba:f3:f9:c0:7a:e0:
         43:65:9d:ed:6b:d0:3e:9a:e9:17:fa:d7:5b:81:3e:76:57:79:
         4c:0e:7d:9e:bc:02:05:77:90:9c:1d:be:58:46:37:55:32:19:
         ea:fa:86:70:7a:77:85:b6:ad:85:22:63:6a:52:b5:fe:b5:93:
         74:85:41:bc:ce:dc:88:bc:8f:74:fb:58:0b:4a:40:e4:1f:96:
         41:49:18:ca:1f:cf:e0:6d:86:f8:e0:a4:59:82:de:66:4b:80:
         ff:cb:4b:6c:0f:77:5f:9e:12:19:6c:af:bf:7a:ff:fb:81:72:
         a7:7a:1a:2c:b7:ed:e2:20:fd:d9:aa:6f:dd:25:ca:77:56:94:
         22:6f:cc:7a:6c:52:95:1f:65:fb:e4:a3:66:47:7e:ee:4f:6c:
         f1:5f:1e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:04:37 2025 by rpki-client