Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b5ad165a-44f2-3c04-842b-0842c295e9b6.roa
File:                     b5ad165a-44f2-3c04-842b-0842c295e9b6.roa (raw, json)
Hash identifier:          OupKIXwDfHNpaQTXKWyBDCVexGf0Pobn/4N1+m0Y1OI=
Subject key identifier:   1E:6B:BD:13:4C:C3:E9:CE:65:D1:55:DE:C6:90:0C:CD:9E:C3:48:5B
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F43285848E2D112F1C0C8E215C0B2F500
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b5ad165a-44f2-3c04-842b-0842c295e9b6.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     11537
IP address blocks:        64.57.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:12:f1:c0:c8:e2:15:c0:b2:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=4221d8b9-0278-45d4-948f-6c681195bea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:27:24:11:60:7f:62:85:d4:68:05:6f:21:e5:
                    49:31:83:02:ad:f8:5c:52:6e:cb:f1:e5:d9:21:6a:
                    01:ab:20:d6:a1:63:d4:65:4a:a5:ca:0a:f4:20:a8:
                    1a:a1:cc:44:f7:1f:31:30:1a:83:16:79:3b:3f:c9:
                    d9:53:11:74:0d:e4:44:54:05:e5:a4:38:82:4f:94:
                    57:14:ad:e7:1a:35:e0:0c:8e:e9:f7:af:a8:68:ff:
                    6b:c6:77:77:01:62:78:94:18:80:44:2f:87:17:1b:
                    3d:48:8b:cf:25:6c:31:20:dc:00:9b:e2:cb:56:9a:
                    3c:dc:11:db:7f:db:90:df:d5:fb:2f:fe:50:3d:ef:
                    a5:02:33:87:a4:18:1f:fb:e8:db:50:93:7f:12:84:
                    89:1b:83:c7:41:b8:e8:71:0e:83:2c:a3:ec:e2:19:
                    32:d8:38:42:49:83:de:0f:b9:02:a9:1a:ce:fe:8b:
                    6c:64:2f:a4:5d:1e:41:d6:2f:7c:57:41:c5:e9:2b:
                    d5:de:b3:1f:91:bf:ec:66:07:7a:00:17:7c:44:fe:
                    2f:39:c8:66:95:98:24:9b:06:74:da:de:af:fb:2c:
                    76:6c:50:09:a7:ef:2f:4c:f9:7b:13:51:00:f9:18:
                    86:0f:9b:5f:5d:97:b7:98:1a:de:69:d7:ea:09:4c:
                    af:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:6B:BD:13:4C:C3:E9:CE:65:D1:55:DE:C6:90:0C:CD:9E:C3:48:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b5ad165a-44f2-3c04-842b-0842c295e9b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:b2:d6:54:a6:d1:1b:a6:24:96:ba:83:1d:bc:c9:9f:36:e9:
         48:07:61:6a:ac:22:7a:e3:1e:e0:aa:85:9c:96:4e:ae:db:72:
         4b:17:78:b6:4a:11:f5:88:bf:ab:28:5d:4b:73:b4:54:ff:d1:
         7e:72:91:05:7e:3f:56:54:9a:dc:40:1e:57:81:93:82:85:2e:
         50:92:04:c5:aa:bf:62:8c:b9:40:fe:d4:ea:7e:48:ed:ce:7f:
         64:96:11:90:0d:53:ab:00:ce:59:59:fa:a2:79:bb:90:0e:62:
         57:d4:01:51:98:dc:2b:c1:02:94:fe:be:fa:25:bf:75:99:f2:
         9f:35:42:66:38:63:a4:5f:60:0b:27:32:7d:5e:09:fb:9a:4d:
         3d:12:c9:6c:7d:5a:a5:92:dc:4b:3c:e6:ac:4c:e6:8a:e9:06:
         f7:3c:fe:4f:74:64:8e:01:e9:cd:7e:1c:d8:d5:c3:7c:af:0b:
         dd:aa:72:fc:6e:e4:ec:1c:4d:48:cb:cb:64:91:c6:f8:94:de:
         c6:bc:10:98:6d:e7:89:72:25:7d:43:a1:2c:97:21:a7:0f:db:
         86:bb:90:f4:51:fa:0c:b1:1e:d0:47:bc:22:b6:f6:f4:25:35:
         87:fb:77:80:a6:bd:40:36:f9:e2:b2:7a:39:ae:d1:f1:99:b7:
         ca:6c:22:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:13:20 2025 by rpki-client