Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/21ba0e61-ce38-3894-9fe2-f85615b80796.roa
File:                     21ba0e61-ce38-3894-9fe2-f85615b80796.roa (raw, json)
Hash identifier:          Y+rIcvOjYEnIz4nVaHn3T5at4pZduMSp5sKM/AD+YR4=
Subject key identifier:   2B:FF:AF:30:41:B6:02:66:62:F1:A0:6A:48:12:BF:F1:B4:CA:11:C7
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849D164F186EB044E20B00C4880
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/21ba0e61-ce38-3894-9fe2-f85615b80796.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        97.64.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:64:f1:86:eb:04:4e:20:b0:0c:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=f8e1e59e-3b85-4611-abf1-9cde808a51ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:44:e3:df:3e:b6:15:48:cf:85:c9:24:6b:ac:
                    59:bb:8b:6a:f3:91:af:e5:8a:63:74:2b:d7:42:06:
                    f3:78:3c:95:08:45:21:a9:b7:66:10:4b:27:a4:ca:
                    2b:18:89:d7:c8:f6:58:11:b6:f7:36:e4:b1:e1:3b:
                    c2:2c:b5:35:dc:0c:11:8d:7d:9d:e4:b3:a9:a9:0f:
                    3d:f2:73:55:8b:5d:f5:56:1f:a3:9c:b6:eb:c3:81:
                    cf:2c:a3:85:68:4b:37:7d:e6:fe:9c:21:28:84:75:
                    9c:76:1e:cc:64:24:3f:55:3b:99:53:ae:65:94:a0:
                    f9:47:97:bd:2e:be:ab:53:63:e5:3d:d8:90:9e:16:
                    84:3b:f1:e7:88:e2:c6:41:e7:96:53:c6:38:b9:33:
                    85:74:d8:1b:1d:b2:78:c7:ba:a4:f3:fd:98:a5:f4:
                    cc:48:b1:29:75:19:ba:eb:b0:f8:84:2e:f2:d5:e5:
                    18:c5:39:0b:f2:9c:f1:55:07:78:11:f7:20:4e:a5:
                    79:c0:c3:2c:37:3f:15:21:3b:9d:53:56:ec:9f:d7:
                    70:26:a0:39:a6:27:ca:c4:df:81:9c:1f:33:a3:15:
                    c7:ca:53:47:14:ca:d2:54:d5:8d:d6:31:c4:25:89:
                    1a:c9:94:5b:44:dd:0e:9f:60:f9:ea:30:dc:de:09:
                    a8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:FF:AF:30:41:B6:02:66:62:F1:A0:6A:48:12:BF:F1:B4:CA:11:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/21ba0e61-ce38-3894-9fe2-f85615b80796.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:14:92:9c:d4:4f:83:ba:50:f3:bc:ff:48:90:ad:1e:22:53:
         46:3e:21:8d:1e:74:80:3c:97:2c:75:9e:30:60:87:5a:bc:00:
         5f:d1:f6:ee:b8:54:b5:82:2f:c1:1b:ca:a2:f5:b0:bc:f1:f4:
         b0:eb:bc:58:16:23:a4:d7:be:b4:75:b4:44:cc:ba:b7:9c:c9:
         c3:84:5d:4b:43:6a:e3:35:f9:ff:1f:d1:16:3f:9c:13:0e:f4:
         9b:3c:50:da:2e:8e:26:7b:5c:ef:e6:b6:d0:8a:80:6e:5f:77:
         78:e6:73:9c:a5:f4:9d:c3:68:85:3f:9b:50:0e:69:6f:d9:c1:
         13:de:ef:d7:ad:6d:37:70:b5:44:f7:0e:b7:ef:16:b5:8c:52:
         3c:c0:c9:f0:1e:df:a5:12:12:98:40:87:9f:52:03:2e:35:2a:
         1a:c7:32:ae:fb:45:7a:4c:90:7f:cb:20:a9:80:53:b1:5b:c9:
         36:49:69:70:6b:7f:bf:2e:6e:a3:8f:8f:c2:56:90:2d:94:92:
         1f:16:6f:58:24:80:55:ac:b5:1c:43:ef:1c:ab:80:ba:b1:d6:
         f3:1e:45:67:91:9f:38:08:87:7b:60:26:fe:68:7f:c5:e1:f4:
         d9:f8:1f:78:4f:1d:30:48:26:00:ea:f0:63:6a:02:58:aa:a8:
         6b:49:07:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:53:56 2025 by rpki-client