Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/1dfb0410-c853-3b79-abaa-0f67acc343b1.roa
File:                     1dfb0410-c853-3b79-abaa-0f67acc343b1.roa (raw, json)
Hash identifier:          DLMBKHrkQRAGIKDttRooxWEBsBE3lFFXhi0KIiFTY80=
Subject key identifier:   36:2B:C5:45:52:DE:AA:0E:FF:33:2D:00:14:C5:D3:2E:53:73:F0:45
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584AA160CD25167A8159771CDF60
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/1dfb0410-c853-3b79-abaa-0f67acc343b1.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     11537
IP address blocks:        64.57.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:cd:25:16:7a:81:59:77:1c:df:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=ead249db-0950-4c8d-aae0-31e7409266b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3e:9a:9c:1b:40:27:5b:96:e9:10:cd:c9:51:
                    82:fa:24:65:0c:bf:82:83:ca:ba:1a:39:0f:89:50:
                    86:ac:ba:a3:32:6e:80:a8:e7:bc:b2:b2:27:77:0d:
                    ed:bf:66:b7:30:73:58:f7:35:56:b4:97:a6:db:0b:
                    0c:e4:9a:ed:35:13:ec:23:5b:72:55:a0:8d:8e:c3:
                    27:dc:b6:7e:81:13:f6:ac:ce:6e:65:2b:ff:16:9d:
                    a9:51:29:58:b0:41:2f:15:5d:c6:58:c2:e6:25:ae:
                    8a:6f:5e:b9:d0:a6:8f:9d:05:fd:78:89:2b:c5:e5:
                    2b:37:5d:a6:38:ed:8f:36:54:87:31:45:cf:34:21:
                    e2:5b:81:ac:c2:b5:03:e3:27:84:0b:00:65:83:fd:
                    46:00:7f:48:d7:b7:b2:95:fc:c9:43:14:b6:a0:2c:
                    6c:33:0b:d6:ea:16:5d:13:2f:f9:a3:59:f8:b3:74:
                    94:a5:b1:95:50:e2:e1:cd:5e:10:66:ad:65:f7:2a:
                    04:03:29:8a:60:8d:a5:bc:06:e8:e9:2a:8c:4b:b2:
                    28:02:21:4c:7d:dc:89:e4:20:61:d1:3f:45:d0:86:
                    77:c8:c5:c6:7f:6c:e7:c2:45:40:1c:8e:0e:f3:90:
                    34:4b:16:00:44:71:74:b7:30:55:c1:d6:51:c3:b9:
                    5e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:2B:C5:45:52:DE:AA:0E:FF:33:2D:00:14:C5:D3:2E:53:73:F0:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/1dfb0410-c853-3b79-abaa-0f67acc343b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:de:47:27:cd:ca:ed:df:ae:fb:15:1e:73:d3:3c:d2:00:5e:
         b7:37:12:d6:07:ca:7e:a2:27:1a:7c:31:5c:f8:0d:ce:62:a3:
         54:08:e4:66:18:3e:52:48:38:a2:1b:f9:5f:3a:d1:00:76:79:
         83:2f:94:c0:1a:1c:60:dc:c9:a3:74:0a:55:81:e2:66:b4:4e:
         78:0d:fb:5d:bc:d2:ac:e7:03:fc:ee:a6:7a:4b:20:f9:90:16:
         a7:6a:5d:23:3a:05:13:ca:2b:79:56:99:6a:d8:b4:db:4b:f2:
         ce:9f:07:ae:1e:87:a4:68:da:94:44:df:d3:e7:d8:54:91:88:
         0a:37:22:e8:db:62:38:e3:d8:2f:09:d3:e3:82:58:2a:e2:d7:
         c0:d4:b9:24:2a:db:9c:c8:a1:ad:66:c9:ae:be:a5:a3:f6:b7:
         15:0c:7a:1d:19:9f:e4:9b:84:ae:54:dd:ee:6b:d0:db:63:d7:
         85:27:a9:0f:a2:bc:7d:ee:2d:7d:fb:86:ea:5f:e1:cb:43:90:
         22:19:5d:50:db:5e:95:c7:fc:b1:64:99:91:60:b4:b0:6d:ce:
         7c:9a:88:71:2b:b3:f4:17:b4:36:00:05:dc:66:16:ad:ac:69:
         62:71:e1:6d:3c:a5:19:51:ee:50:b8:80:20:a0:1a:49:ed:65:
         ea:42:cc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:04:54 2025 by rpki-client