Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3d11981b-8982-37fc-a501-187ff3b75521.roa
File:                     3d11981b-8982-37fc-a501-187ff3b75521.roa (raw, json)
Hash identifier:          Iw+ovLNS1JsjngNT72iJZ28hwByNdxnSgMCOwyM4/YY=
Subject key identifier:   FC:64:F5:C9:B4:9D:5B:18:DD:7D:68:26:C5:D6:BF:E8:0D:F1:5D:6C
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849D164F0C788BDE47F67CA9FD8
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3d11981b-8982-37fc-a501-187ff3b75521.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        97.64.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:64:f0:c7:88:bd:e4:7f:67:ca:9f:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=db6b9812-9574-401e-b341-594e50345a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:2a:55:2d:c2:9c:ad:35:bd:a2:8f:7d:b2:49:
                    7b:da:d2:0b:d8:17:c4:88:69:61:8a:b0:5b:7b:c2:
                    2d:e0:32:65:e6:c5:d8:88:b3:11:29:42:bb:1b:eb:
                    eb:6d:52:dd:6b:bf:a5:dc:27:41:5d:c0:a6:ed:2d:
                    6c:41:38:ca:62:29:6f:af:16:97:d2:4d:38:00:58:
                    1f:3f:4c:c2:34:85:e8:4e:5e:a3:2c:a2:ea:02:df:
                    89:73:0f:2b:c4:04:84:53:99:c4:06:1a:62:fb:5b:
                    2b:31:5d:62:50:77:12:60:39:b0:72:85:56:f1:ef:
                    f3:21:ba:a4:67:9e:c5:16:68:0d:ac:10:35:80:fe:
                    6b:bf:81:43:4b:b0:95:c2:93:f9:11:67:2c:4f:0a:
                    c9:ec:16:01:d3:f6:b0:16:7e:fb:43:ac:42:d3:19:
                    15:32:0e:73:0c:a2:11:c9:17:39:63:fd:14:74:69:
                    58:e3:ca:a9:1b:d6:3e:99:70:91:7e:f4:6a:50:6b:
                    39:9d:6d:2e:76:09:ae:27:72:d2:de:b5:d6:87:1d:
                    68:99:30:19:71:6a:66:d2:48:1c:36:0d:79:e8:83:
                    81:b4:c5:f0:f1:28:88:96:12:5c:8e:ff:55:0a:3c:
                    e1:43:aa:fd:23:7a:cd:87:68:be:f9:84:e9:69:bc:
                    db:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:64:F5:C9:B4:9D:5B:18:DD:7D:68:26:C5:D6:BF:E8:0D:F1:5D:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3d11981b-8982-37fc-a501-187ff3b75521.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:9a:76:0d:bd:f0:0c:d6:3e:e4:17:5d:29:de:4a:0a:22:c5:
         68:70:2f:30:a7:2e:40:cb:40:70:f3:97:42:1f:51:ad:bd:a5:
         81:6f:d6:e6:07:52:c5:b5:25:c9:1f:5e:bd:dc:34:86:c0:96:
         27:9e:0a:43:fd:57:9a:86:cd:04:be:db:b7:b5:ad:99:07:8d:
         09:bd:da:46:1e:46:46:74:12:d1:50:5d:65:ea:2d:cb:30:73:
         e2:4d:66:dc:29:0e:97:91:dc:7f:36:aa:96:2d:7d:78:a2:ac:
         f5:48:ec:e5:d0:11:8b:ca:90:bd:08:3d:32:dd:08:1a:21:88:
         90:3e:23:c2:dc:8f:49:6e:21:f5:72:95:79:4b:d6:b4:18:31:
         66:3e:be:9a:6f:4e:06:19:46:3c:89:63:51:40:fa:c5:de:9d:
         f4:41:24:81:08:f5:d6:51:71:24:c9:d9:7d:10:21:69:30:cd:
         3d:d7:fe:c5:dd:34:89:ab:8e:2f:31:07:f6:25:62:b4:9c:39:
         ca:10:37:bd:df:83:7b:21:9e:d6:31:aa:51:73:7b:9b:66:5a:
         6f:f3:96:34:13:bc:45:44:46:b7:34:4b:15:6d:18:78:94:1d:
         e0:4b:7c:aa:52:53:eb:0a:06:2b:c2:09:11:4a:9f:de:fa:89:
         5f:72:92:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZPDHiL3kf2fKn9gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk
ZGI2Yjk4MTItOTU3NC00MDFlLWIzNDEtNTk0ZTUwMzQ1YTRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgipVLcKcrTW9oo99skl72tIL2BfEiGlhirBb
e8It4DJl5sXYiLMRKUK7G+vrbVLda7+l3CdBXcCm7S1sQTjKYilvrxaX0k04AFgf
P0zCNIXoTl6jLKLqAt+Jcw8rxASEU5nEBhpi+1srMV1iUHcSYDmwcoVW8e/zIbqk
Z57FFmgNrBA1gP5rv4FDS7CVwpP5EWcsTwrJ7BYB0/awFn77Q6xC0xkVMg5zDKIR
yRc5Y/0UdGlY48qpG9Y+mXCRfvRqUGs5nW0udgmuJ3LS3rXWhx1omTAZcWpm0kgc
Ng156IOBtMXw8SiIlhJcjv9VCjzhQ6r9I3rNh2i++YTpabzbxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPxk9cm0nVsY3X1oJsXWv+gN8V1sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2QxMTk4MWItODk4Mi0z
N2ZjLWE1MDEtMTg3ZmYzYjc1NTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUDZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGqadg298AzWPuQXXSneSgoixWhwLzCnLkDLQHDzl0IfUa29pYFv1uYH
UsW1JckfXr3cNIbAlieeCkP9V5qGzQS+27e1rZkHjQm92kYeRkZ0EtFQXWXqLcsw
c+JNZtwpDpeR3H82qpYtfXiirPVI7OXQEYvKkL0IPTLdCBohiJA+I8Lcj0luIfVy
lXlL1rQYMWY+vppvTgYZRjyJY1FA+sXenfRBJIEI9dZRcSTJ2X0QIWkwzT3X/sXd
NImrji8xB/YlYrScOcoQN73fg3shntYxqlFze5tmWm/zljQTvEVERrc0SxVtGHiU
HeBLfKpSU+sKBivCCRFKn976iV9ykjU=
-----END CERTIFICATE-----
Generated at Thu May 15 05:23:00 2025 by rpki-client