Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/425f7035-1c6e-3c35-be2e-d18c0227bf29.roa
File:                     425f7035-1c6e-3c35-be2e-d18c0227bf29.roa (raw, json)
Hash identifier:          zcYF0qIJwOaCFQb2svnBSY8gBkIhWFfylPqCuYKWYdI=
Subject key identifier:   77:95:F5:28:2C:90:AE:7A:FC:09:C2:29:15:13:08:60:5A:F2:6E:38
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F43285849C20A14CBF93997D1BF9039C0
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/425f7035-1c6e-3c35-be2e-d18c0227bf29.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11537
IP address blocks:        163.253.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:14:cb:f9:39:97:d1:bf:90:39:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=0858d34a-fe00-4451-9d44-873a28d75f42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5f:2f:1b:3e:b8:48:9f:67:fb:9d:2b:7f:b4:
                    2e:e2:2c:aa:71:c8:6a:a5:c3:d4:e0:eb:51:c6:60:
                    9e:a6:80:11:cc:28:e7:f9:6c:7d:1d:ea:9c:17:a5:
                    c2:f6:21:4a:c4:cb:87:fa:57:6e:77:28:7c:a5:20:
                    05:08:14:b0:2d:9f:64:c8:e5:d3:65:79:c3:56:27:
                    e3:4c:d4:ed:23:d6:36:22:95:07:fc:f7:25:01:5e:
                    63:4a:0d:6e:c5:10:4e:fc:c4:dd:3b:59:4c:39:c1:
                    68:fa:5b:b0:4e:78:32:08:c9:8c:c5:ca:e9:ca:83:
                    de:26:04:20:b2:fb:ac:4e:4f:f3:bb:cd:0d:22:62:
                    b5:49:31:5b:32:7b:92:b7:6c:56:5b:e5:c5:2f:47:
                    12:c8:6c:29:84:d6:5d:02:38:2e:56:d7:f0:bd:d2:
                    2e:c8:ee:45:87:71:61:3d:3d:c1:0e:d1:78:d9:c1:
                    be:65:f4:7e:99:df:12:14:be:2b:d4:50:d1:02:4a:
                    c2:ad:08:36:c6:97:9b:2a:d4:0c:b8:a9:1d:16:bb:
                    f8:e1:ff:9a:d6:e2:3a:72:f0:7e:6f:cd:b1:2d:4b:
                    bc:e6:10:da:1d:9c:61:20:71:a4:ff:a5:67:86:dd:
                    ad:de:fb:c2:50:d5:ff:55:a7:5d:44:41:96:5b:5b:
                    2d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:95:F5:28:2C:90:AE:7A:FC:09:C2:29:15:13:08:60:5A:F2:6E:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/425f7035-1c6e-3c35-be2e-d18c0227bf29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:c5:e2:cf:80:c1:b1:e7:6e:41:03:a0:9f:c3:9e:63:72:b6:
         6b:0c:d5:e9:fe:d5:ca:89:7c:2a:07:7f:4a:77:24:b0:a4:5f:
         e4:6a:f8:7d:1c:e0:d3:79:96:db:32:c5:e0:15:20:9c:da:51:
         73:db:a3:6d:a5:01:39:71:3a:ff:eb:22:06:fa:06:b4:f6:e0:
         c3:8e:80:7d:8c:8b:51:4a:bd:39:43:c4:e2:67:66:69:ff:95:
         6f:c9:48:07:7c:47:04:7b:88:54:22:58:66:bc:b3:29:56:72:
         9c:fc:82:0a:c1:4d:51:30:5d:b2:45:82:cc:65:b9:ab:56:02:
         59:d9:70:d1:7e:fb:45:df:44:5f:80:82:9d:0e:e6:1b:c1:80:
         0d:74:4e:7e:57:91:c7:d3:ca:c5:67:fe:84:b9:91:8a:1e:ab:
         30:bb:f9:9b:6c:61:10:da:f7:76:18:7a:59:56:f5:bf:21:c8:
         9e:19:69:31:ac:c0:1c:35:0a:bc:3d:73:70:76:f1:6d:db:89:
         15:d8:e5:a1:f9:ed:3e:ee:35:f3:61:08:3a:c4:84:66:7a:11:
         09:9e:3e:d6:ea:46:75:c3:23:45:1e:5c:dc:dc:b5:ff:aa:60:
         ed:28:14:1f:7d:6e:94:a0:0a:11:07:b1:cc:59:82:4a:62:a3:
         85:c2:4e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:17:18 2025 by rpki-client