Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/cd6e4f88-dc98-3c01-a4b4-36713d62f0e7.roa
File:                     cd6e4f88-dc98-3c01-a4b4-36713d62f0e7.roa (raw, json)
Hash identifier:          psdy1GRjO4liVBCGJlgpDBS+7QYI/Fi6UKRwhWYajGk=
Subject key identifier:   E7:0D:ED:7B:49:4E:46:04:DE:A1:89:FC:36:5F:04:99:6A:74:16:98
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F43285849C20A0D6C620192327651CA80
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/cd6e4f88-dc98-3c01-a4b4-36713d62f0e7.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11537
IP address blocks:        64.57.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:0d:6c:62:01:92:32:76:51:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=4a61663f-c364-4407-ab46-addd33825484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:da:b1:28:45:4a:b6:95:60:3a:61:c1:9f:07:
                    9a:26:b1:73:bf:1e:65:0e:9d:43:c1:47:f8:10:fb:
                    3a:d0:1a:ad:7c:33:af:f8:ee:e5:f5:79:41:e3:4e:
                    e4:76:fd:c4:ba:fb:aa:bb:46:4a:ab:da:ff:49:d1:
                    02:96:8f:57:47:31:0d:35:67:c0:de:ed:a1:41:59:
                    2c:93:5b:8d:35:ce:19:d0:17:e6:f4:d9:1b:d5:a1:
                    46:e6:cf:a0:da:ba:d6:8f:82:a1:d0:16:e3:3d:bb:
                    ca:ba:b2:49:37:de:43:12:af:7a:03:f6:b6:01:9a:
                    8b:50:63:82:c2:55:17:1d:db:9b:85:4f:76:18:d6:
                    ec:a6:36:30:a9:a5:0c:63:cd:72:86:ce:8a:20:76:
                    09:dd:bb:4a:97:6d:be:aa:3c:49:c9:5a:55:59:46:
                    6d:7b:4d:b6:1a:3f:ef:a9:6a:4a:9b:df:cc:31:f9:
                    11:de:41:a1:33:4e:f0:e3:57:55:27:b4:bd:b2:25:
                    0b:03:04:b7:71:ac:c5:b2:f0:6e:5e:2c:73:8f:c7:
                    47:14:9e:e7:e5:35:cb:f0:33:5d:87:4f:e4:2b:99:
                    76:0b:7d:5a:ea:28:35:35:70:ba:68:e7:e7:dc:e2:
                    da:3e:1f:eb:1a:71:3b:12:85:79:af:bd:62:a9:78:
                    ed:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0D:ED:7B:49:4E:46:04:DE:A1:89:FC:36:5F:04:99:6A:74:16:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/cd6e4f88-dc98-3c01-a4b4-36713d62f0e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:fa:e3:a9:98:29:4f:34:8f:b2:e9:a4:7c:20:56:57:a0:46:
         95:60:6b:ae:bd:b3:db:5e:0f:a8:26:46:0c:d7:39:fb:e2:87:
         2e:33:6a:08:07:69:d7:3f:63:57:8b:72:cd:3a:5f:cb:24:b4:
         0b:85:6d:2e:6a:f0:4b:52:38:3e:14:9a:a9:89:26:b7:1a:bf:
         46:e9:75:e2:eb:8b:1a:96:3b:ee:e4:46:f8:bc:2e:60:c1:9c:
         70:68:85:7b:f1:a4:16:3a:d2:30:62:11:0f:f8:77:29:66:67:
         9f:5a:af:6e:09:37:7d:43:9a:12:6e:a7:4c:de:30:36:45:ef:
         f8:c0:0a:35:d5:0b:a2:d6:d5:f0:d8:bc:05:fa:95:ee:86:29:
         24:96:6b:5d:5f:ca:f0:cb:03:c6:c6:50:29:81:38:b3:d1:1e:
         85:89:eb:20:bd:05:57:5c:46:68:48:d3:ff:c1:43:ab:7f:db:
         0c:49:44:4e:53:a4:78:ab:53:4f:6a:61:2b:34:50:a6:e3:ba:
         59:64:56:cf:2c:5e:79:63:ab:44:18:01:81:99:15:03:66:89:
         8c:52:4a:fe:ab:af:3c:b8:71:91:94:db:d9:20:9c:83:49:8f:
         e0:b3:17:c4:ed:73:39:a5:e5:37:e3:06:c2:0d:c3:ca:38:ed:
         11:f0:12:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCg1sYgGSMnZRyoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy
ZjgyMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
NGE2MTY2M2YtYzM2NC00NDA3LWFiNDYtYWRkZDMzODI1NDg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtqxKEVKtpVgOmHBnweaJrFzvx5lDp1DwUf4
EPs60BqtfDOv+O7l9XlB407kdv3Euvuqu0ZKq9r/SdEClo9XRzENNWfA3u2hQVks
k1uNNc4Z0Bfm9Nkb1aFG5s+g2rrWj4Kh0BbjPbvKurJJN95DEq96A/a2AZqLUGOC
wlUXHdubhU92GNbspjYwqaUMY81yhs6KIHYJ3btKl22+qjxJyVpVWUZte022Gj/v
qWpKm9/MMfkR3kGhM07w41dVJ7S9siULAwS3cazFsvBuXixzj8dHFJ7n5TXL8DNd
h0/kK5l2C31a6ig1NXC6aOfn3OLaPh/rGnE7EoV5r71iqXjttwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOcN7XtJTkYE3qGJ/DZfBJlqdBaYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl
MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvY2Q2ZTRmODgtZGM5OC0z
YzAxLWE0YjQtMzY3MTNkNjJmMGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5
MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2
MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4
YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQDkbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALz646mYKU80j7LppHwgVlegRpVga669s9teD6gmRgzXOfvihy4zaggH
adc/Y1eLcs06X8sktAuFbS5q8EtSOD4UmqmJJrcav0bpdeLrixqWO+7kRvi8LmDB
nHBohXvxpBY60jBiEQ/4dylmZ59ar24JN31DmhJup0zeMDZF7/jACjXVC6LW1fDY
vAX6le6GKSSWa11fyvDLA8bGUCmBOLPRHoWJ6yC9BVdcRmhI0//BQ6t/2wxJRE5T
pHirU09qYSs0UKbjullkVs8sXnljq0QYAYGZFQNmiYxSSv6rrzy4cZGU29kgnINJ
j+CzF8Ttczml5TfjBsINw8o47RHwEpo=
-----END CERTIFICATE-----
Generated at Sun May 11 21:10:26 2025 by rpki-client