Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/54c1ea89-a72d-3a00-9261-07083c5c4146.roa
File:                     54c1ea89-a72d-3a00-9261-07083c5c4146.roa (raw, json)
Hash identifier:          P/Tuv+D5rhDQ9AJwGPGKe41QLi2gl1MArpfcrPki4Lw=
Subject key identifier:   1B:BB:98:63:DA:BB:83:EB:1C:6D:EA:A3:E3:5D:E1:B0:DF:08:14:D1
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584AA160CD5A38F12D1704F9C940
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/54c1ea89-a72d-3a00-9261-07083c5c4146.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     11537
IP address blocks:        64.57.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:cd:5a:38:f1:2d:17:04:f9:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=0b11330d-3e89-4300-9e10-4cbaf89d3694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ac:5c:b0:0a:d0:14:0d:3f:e7:01:92:f1:88:
                    ba:a1:6a:e0:5d:b3:f5:08:5b:50:ab:00:f2:06:11:
                    db:a3:d8:51:57:75:07:e6:c5:e4:14:fb:5e:e2:28:
                    c0:c2:4a:8b:03:12:d7:60:36:24:5c:9b:f1:c6:61:
                    c5:41:99:3e:7f:00:04:94:8e:38:4a:02:5a:a0:c3:
                    22:58:e1:b2:84:f0:f0:a5:b1:b7:2a:89:52:4e:38:
                    13:a0:57:a1:37:59:97:95:a2:98:bd:d2:5f:84:c3:
                    c3:f8:1e:d3:88:57:64:5f:c4:4c:85:21:2c:48:82:
                    b7:9c:7f:a3:e2:ee:75:75:d3:cd:4b:91:cd:af:8f:
                    c2:78:88:74:79:ee:f6:d2:e5:12:0f:ee:35:8f:d3:
                    ab:f3:8f:c8:4a:ef:74:4c:db:3f:58:30:51:24:c6:
                    67:45:34:95:2e:ba:a0:04:94:ee:df:ca:97:31:d0:
                    06:1c:b0:19:eb:6f:79:ff:a1:bb:99:48:ae:0b:9a:
                    5a:bc:b7:fd:7e:1e:ae:17:33:cd:c0:9d:11:6d:1f:
                    05:9d:7e:3b:76:68:ee:a5:cf:4a:fd:74:0b:a0:2e:
                    2d:ee:fc:b8:1e:2c:c6:29:22:48:fa:7f:a4:8c:d2:
                    57:d0:04:85:4e:61:96:39:07:97:a5:04:8f:7b:c5:
                    d6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:BB:98:63:DA:BB:83:EB:1C:6D:EA:A3:E3:5D:E1:B0:DF:08:14:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/54c1ea89-a72d-3a00-9261-07083c5c4146.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:92:16:4d:99:fc:36:5d:d3:c6:e7:41:b5:6f:6d:10:e7:09:
         04:74:d4:e1:73:04:bb:ab:ac:9a:ab:52:92:1c:f0:ab:0d:39:
         33:ed:a5:0c:8d:b4:de:2c:4f:10:41:35:8a:9a:01:da:e2:61:
         47:66:fb:ef:51:d8:db:cb:9c:86:2e:05:2e:ba:53:dd:6a:ba:
         47:3c:53:f0:c5:ef:fd:1e:69:61:1c:6e:10:3c:86:69:87:4a:
         5e:68:70:ea:62:2c:0f:96:9f:b1:a4:2e:3b:31:99:9e:a2:2e:
         e8:4e:61:63:71:86:e6:cf:e4:6e:05:a0:75:f7:06:a4:fb:aa:
         67:14:98:f1:a4:87:c2:f8:5f:0d:d5:fc:2f:35:b7:c9:e0:dc:
         b0:e7:41:56:04:70:90:e1:63:89:e7:38:5c:df:f4:44:e8:2f:
         13:f7:bc:e4:2f:90:89:55:bc:2a:23:a6:df:e3:0f:9d:0a:d2:
         da:5d:8f:6f:46:3a:ca:ef:97:01:91:98:c4:77:64:99:44:7a:
         56:ea:52:0a:b9:06:d1:4d:00:f2:0c:49:d1:a5:34:29:66:e9:
         8f:4c:f1:fe:be:d0:a8:22:5f:80:88:e8:17:e9:68:bd:26:2b:
         09:73:ed:54:96:70:9d:39:28:2f:35:fc:26:f6:e1:3a:d4:1e:
         2a:43:92:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYM1aOPEtFwT5yUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy
ZjgyMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk
MGIxMTMzMGQtM2U4OS00MzAwLTllMTAtNGNiYWY4OWQzNjk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qxcsArQFA0/5wGS8Yi6oWrgXbP1CFtQqwDy
BhHbo9hRV3UH5sXkFPte4ijAwkqLAxLXYDYkXJvxxmHFQZk+fwAElI44SgJaoMMi
WOGyhPDwpbG3KolSTjgToFehN1mXlaKYvdJfhMPD+B7TiFdkX8RMhSEsSIK3nH+j
4u51ddPNS5HNr4/CeIh0ee720uUSD+41j9Or84/ISu90TNs/WDBRJMZnRTSVLrqg
BJTu38qXMdAGHLAZ6295/6G7mUiuC5pavLf9fh6uFzPNwJ0RbR8FnX47dmjupc9K
/XQLoC4t7vy4HizGKSJI+n+kjNJX0ASFTmGWOQeXpQSPe8XWQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBu7mGPau4PrHG3qo+Nd4bDfCBTRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl
MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvNTRjMWVhODktYTcyZC0z
YTAwLTkyNjEtMDcwODNjNWM0MTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5
MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2
MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4
YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQDkfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGSSFk2Z/DZd08bnQbVvbRDnCQR01OFzBLurrJqrUpIc8KsNOTPtpQyN
tN4sTxBBNYqaAdriYUdm++9R2NvLnIYuBS66U91qukc8U/DF7/0eaWEcbhA8hmmH
Sl5ocOpiLA+Wn7GkLjsxmZ6iLuhOYWNxhubP5G4FoHX3BqT7qmcUmPGkh8L4Xw3V
/C81t8ng3LDnQVYEcJDhY4nnOFzf9EToLxP3vOQvkIlVvCojpt/jD50K0tpdj29G
OsrvlwGRmMR3ZJlEelbqUgq5BtFNAPIMSdGlNClm6Y9M8f6+0KgiX4CI6BfpaL0m
Kwlz7VSWcJ05KC81/Cb24TrUHipDkik=
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:14:02 2025 by rpki-client