Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b5ad165a-44f2-3c04-842b-0842c295e9b6.roa
File:                     b5ad165a-44f2-3c04-842b-0842c295e9b6.roa (raw, json)
Hash identifier:          u/LNO/UMCN01D/Lv8m8DAJyVOrR5d9pnro2wGW5voAY=
Subject key identifier:   4D:30:4B:37:E6:96:E2:F6:24:82:4C:6C:70:F0:6F:2A:54:9F:0A:42
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584AA160D4361FE4186359158180
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b5ad165a-44f2-3c04-842b-0842c295e9b6.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     11537
IP address blocks:        64.57.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:d4:36:1f:e4:18:63:59:15:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=0d5ad85f-1bf2-4983-9dfc-b63d00369a5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:78:9f:f7:05:ae:2c:7c:3d:06:0f:f6:4f:0c:
                    9e:e8:92:3b:04:84:6a:48:88:a6:f0:14:c7:4a:88:
                    c0:14:af:f0:82:8b:68:dc:f2:01:7e:85:23:32:c7:
                    3c:e6:17:0c:98:de:f2:15:64:b5:46:1a:fa:ad:0a:
                    9c:1d:0e:fe:fe:4c:1d:f1:26:0b:bb:d1:c3:87:d1:
                    ce:4e:be:99:6f:e6:8e:85:6e:2d:e4:67:1e:f9:aa:
                    40:a2:6c:7a:1a:38:54:fd:20:c4:2a:eb:57:67:d4:
                    0c:92:32:f8:fd:f6:72:84:c0:ba:26:ca:8c:a4:5c:
                    9d:8d:55:98:b9:20:4c:41:e1:be:c0:9f:19:fd:db:
                    e4:54:81:0c:79:f7:b7:4a:3f:78:d6:ca:36:7f:8d:
                    9b:63:e3:94:f4:fd:2d:a3:a5:b3:d0:a8:1b:2d:c4:
                    1d:b7:f7:59:f7:8a:6a:27:31:d6:ca:c2:bb:d2:41:
                    cf:0b:d1:24:84:e1:da:49:59:e6:19:37:d7:90:a4:
                    14:84:f5:a9:c8:98:86:94:dc:87:52:43:e0:06:02:
                    3c:94:f0:13:92:4e:bc:0b:ab:5c:2d:7b:75:96:43:
                    a6:05:ae:f9:58:ef:f7:40:5c:ea:c4:ff:b9:32:b9:
                    b5:65:89:1b:a9:08:1c:6c:1f:1f:e1:e8:12:dd:2e:
                    ba:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:30:4B:37:E6:96:E2:F6:24:82:4C:6C:70:F0:6F:2A:54:9F:0A:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b5ad165a-44f2-3c04-842b-0842c295e9b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:c2:7f:39:28:de:65:5b:4d:37:8d:42:68:27:05:a6:05:8d:
         44:aa:71:39:15:15:0d:63:16:47:48:25:a4:7e:cd:9a:68:3a:
         b0:ce:c6:fb:2f:c6:bd:36:9f:21:7b:04:f6:7d:35:3f:42:e2:
         b9:85:a3:d5:cb:23:76:d8:36:26:d6:b7:b0:e3:00:e3:db:63:
         e0:f7:72:75:09:ef:08:36:2b:9c:63:5c:2a:6f:21:31:9a:fd:
         d1:ce:6d:52:d3:b6:e4:34:f4:e6:67:4d:e0:3a:7e:c6:93:f6:
         be:29:8c:be:8f:fb:74:a9:25:91:b4:04:21:0b:16:d5:60:9e:
         d8:10:64:01:30:73:fe:ed:79:45:24:4f:cf:47:27:b2:e9:92:
         cb:ee:3b:8e:c2:09:29:de:dd:73:f5:15:03:2b:bf:b3:f8:ba:
         28:eb:68:8f:ef:d9:44:34:da:8d:7e:1d:5e:17:00:47:0d:13:
         08:7c:72:2c:19:3a:53:9a:b8:f6:d0:86:1c:e6:aa:29:a9:b6:
         d2:d4:b4:6b:40:0d:46:b7:f9:52:7a:2d:45:a2:51:28:e5:10:
         6b:f1:5b:81:f4:d6:82:98:bd:4d:da:c0:18:68:56:d4:bb:e0:
         89:9f:0e:0f:19:d6:9e:64:56:5f:70:cb:cb:36:b8:0c:b8:dc:
         68:38:bf:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:06:49 2025 by rpki-client