Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/1dfb0410-c853-3b79-abaa-0f67acc343b1.roa
File:                     1dfb0410-c853-3b79-abaa-0f67acc343b1.roa (raw, json)
Hash identifier:          hJuV3zDz27dZRVr7fP43mkk1M9aXTRFPS+pYgvlcCNY=
Subject key identifier:   CE:61:59:79:B8:59:53:A7:6D:B3:DF:FA:5E:2E:08:A9:C3:12:A5:65
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584563F302C7FDF0167878CAD788
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/1dfb0410-c853-3b79-abaa-0f67acc343b1.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     11537
IP address blocks:        64.57.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f3:02:c7:fd:f0:16:78:78:ca:d7:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=cf47ec85-521b-4f85-8e0e-b88a2b6cc059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a6:23:9a:e5:ed:81:ed:75:13:85:5c:9b:41:
                    bf:6f:7f:61:f9:01:30:cc:35:94:f5:0a:50:45:57:
                    f7:16:e4:9a:fe:7c:4f:66:d7:7d:3a:84:ca:1e:bd:
                    5c:30:c9:cf:6c:1b:b8:22:c5:21:c2:24:6b:ad:33:
                    11:b9:27:27:ee:45:30:d3:66:aa:f6:a6:95:2e:b4:
                    a0:4b:54:db:6a:f3:68:40:96:29:27:78:5b:c4:55:
                    8c:bb:79:f5:6f:c7:e2:5d:96:a7:d0:9a:c1:69:a5:
                    ab:12:4a:73:b4:ca:76:9a:05:27:27:3f:51:51:ac:
                    7f:9b:dd:7e:c6:82:28:bf:06:42:cf:9f:a0:5a:1b:
                    81:1c:1d:b4:70:77:96:ec:fb:35:6e:c2:37:3e:eb:
                    3c:fc:a3:68:65:95:65:82:01:20:26:74:33:f2:bf:
                    0b:fb:19:49:05:b1:0e:38:04:fc:37:a9:bf:88:f7:
                    4e:c8:9b:37:7d:fb:f7:1e:55:c7:a9:3f:71:d5:89:
                    dd:d4:8c:17:db:9a:4a:6d:21:09:d9:f2:50:5a:ce:
                    65:91:f9:c0:a3:07:e1:3e:a3:56:2c:79:86:3a:ab:
                    52:4b:a3:18:89:61:6d:f6:2c:c7:a4:28:60:4d:fa:
                    d2:78:fd:c8:58:69:5d:db:eb:f2:73:3c:c6:f5:08:
                    ef:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:61:59:79:B8:59:53:A7:6D:B3:DF:FA:5E:2E:08:A9:C3:12:A5:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/1dfb0410-c853-3b79-abaa-0f67acc343b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:cb:7d:25:ad:b5:74:9d:72:ee:ae:c8:73:d0:1c:4c:53:1f:
         7f:02:74:e0:1a:df:6a:d8:53:47:c3:53:6e:68:fe:27:4c:52:
         9f:20:7a:35:6a:99:ed:e4:11:d6:15:35:da:c4:39:1e:a9:f8:
         2c:d4:cd:6b:86:23:8b:37:5f:84:53:94:4e:47:88:6d:22:f6:
         12:f2:5f:3d:ca:ff:cc:49:f1:3d:0a:29:f1:51:98:f7:01:69:
         9f:a2:66:3f:0c:55:a3:10:cf:e5:22:f9:28:82:b5:1b:41:da:
         54:4f:f5:18:69:0b:ab:f4:80:99:f0:b3:50:02:dc:bf:28:bc:
         8b:12:f0:80:9f:58:fb:0f:85:9c:93:23:7b:5f:cf:0a:9f:eb:
         98:9f:27:8f:7f:e3:95:2c:03:93:a2:15:5f:15:20:7b:e8:2a:
         e1:90:df:1d:6d:ba:e1:79:45:6f:f6:40:06:56:e6:5d:27:b9:
         38:03:9f:73:f0:32:25:8e:56:4a:96:cc:1d:7e:71:4e:b6:28:
         91:d5:5f:f5:22:8b:c8:d0:9b:b8:14:4e:f2:8b:ba:7d:b1:a8:
         a9:50:d6:65:5b:79:9d:14:a8:0f:7f:08:b8:e2:d6:c1:4b:e1:
         36:4b:b7:7e:ed:3e:2c:71:ff:8f:72:1e:a7:7b:fe:f5:2b:d5:
         14:92:00:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:33:02 2024 by rpki-client on console-ams.rpki-client.org