Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/cd6e4f88-dc98-3c01-a4b4-36713d62f0e7.roa
File:                     cd6e4f88-dc98-3c01-a4b4-36713d62f0e7.roa (raw, json)
Hash identifier:          ft2a9cvFCk2ruD4oUVIlKoDfLeAuYB1PdQ7SEniw60A=
Subject key identifier:   CF:0D:3F:C8:10:8F:36:6D:1E:96:53:DA:15:E2:D9:4D:16:28:4C:FF
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F43285848E2D10BC51FB39A091D74FD80
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/cd6e4f88-dc98-3c01-a4b4-36713d62f0e7.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     11537
IP address blocks:        64.57.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:0b:c5:1f:b3:9a:09:1d:74:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=4a546ffe-b8f0-44f5-b2b0-d89d74792622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5e:7e:5a:07:89:05:ae:0b:86:3b:3b:64:91:
                    e9:d1:ad:fb:56:46:01:73:e8:2c:31:8f:d4:65:33:
                    8d:3b:7f:10:af:1a:3e:14:48:66:07:d5:16:90:27:
                    43:f0:00:d3:64:4b:67:89:e5:7d:88:05:2f:57:48:
                    99:45:b1:7c:34:29:24:63:fb:af:14:b3:14:df:36:
                    45:41:4a:8e:71:11:65:eb:94:c8:5a:3b:55:12:95:
                    f7:2d:9d:09:40:af:68:9c:70:21:7f:82:6e:c3:b9:
                    b4:00:f6:d5:8e:fe:cc:c5:d8:2a:d9:0b:7a:22:82:
                    4f:d5:a1:b5:52:7d:b8:53:37:32:c1:be:7d:28:07:
                    0a:ad:fa:92:f4:ab:99:d1:8d:74:7c:0b:0d:fb:aa:
                    d6:0e:e8:49:9a:b0:4c:6b:85:ab:d9:0e:b8:ec:11:
                    81:3d:27:60:62:70:dc:47:61:94:2c:e2:70:a3:34:
                    38:f1:09:a6:8d:11:3f:ce:2a:e8:2b:3c:c1:c3:3f:
                    2c:e4:e6:e3:c9:48:c3:cf:f3:9b:fb:cf:dd:33:76:
                    a7:32:8d:12:42:d1:4f:6f:78:c8:a7:7b:7b:c9:24:
                    ba:c0:b2:8d:68:69:35:75:76:41:0f:cf:a3:61:65:
                    6e:bf:e4:52:be:01:75:11:84:73:88:02:df:d3:25:
                    09:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:0D:3F:C8:10:8F:36:6D:1E:96:53:DA:15:E2:D9:4D:16:28:4C:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/cd6e4f88-dc98-3c01-a4b4-36713d62f0e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:20:97:5d:2c:52:52:24:c3:36:e5:e8:19:54:85:e0:35:a4:
         f7:c9:72:fe:80:53:59:a8:b2:73:c9:b0:c4:33:da:50:96:8b:
         49:00:7d:a4:9c:66:ae:99:9f:e9:ca:58:68:4e:c9:da:10:25:
         75:0c:5f:f5:ae:9f:2a:be:85:18:fa:49:c4:f7:69:8f:11:e4:
         a3:6e:b4:ad:e6:5b:33:a5:9c:56:02:ba:b0:b3:09:eb:67:1d:
         55:54:55:95:61:ef:4d:09:04:0e:7e:8d:33:8d:54:05:2c:b5:
         80:46:6a:c0:d0:c9:42:d3:21:12:49:15:d5:34:a4:6c:90:6d:
         d2:cd:59:61:8c:44:3e:d8:4b:6f:5c:78:be:57:42:69:ad:49:
         18:cd:6f:ed:07:a0:56:0b:60:00:d8:ab:88:35:c2:27:fa:9c:
         b7:e4:c6:6e:1c:29:ef:0a:8f:13:5a:b9:41:dd:44:7e:88:5b:
         27:95:af:00:31:45:59:67:02:e0:aa:2d:82:38:97:bc:3a:42:
         24:c9:8b:0c:d1:5c:1b:45:98:e1:08:e7:1d:57:80:35:ca:53:
         15:22:7b:f2:bd:28:c7:d5:c4:68:9d:63:d9:a3:4f:b0:d5:aa:
         b1:09:a0:fb:be:bb:68:2f:c4:b9:aa:00:87:f4:8d:8d:73:b4:
         dd:d3:e7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:14:20 2025 by rpki-client