Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/415caf1a-8dde-3199-a803-1a4b2ffdbb10.roa
File:                     415caf1a-8dde-3199-a803-1a4b2ffdbb10.roa (raw, json)
Hash identifier:          1znPACW+WSbLSyZBnQOemWz0dNrJcq1N5MQJLqwP22M=
Subject key identifier:   62:D6:09:0B:26:6C:4F:F0:BE:A9:6B:53:67:C5:3F:B0:20:60:F1:4E
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849D164F02D9C4089A5AE873180
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/415caf1a-8dde-3199-a803-1a4b2ffdbb10.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        97.64.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:64:f0:2d:9c:40:89:a5:ae:87:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=6502de4b-b9f3-4513-9b39-416514bf7558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3a:77:8a:2d:f4:88:9b:69:f7:f2:77:7d:6e:
                    70:b1:c9:86:a4:72:aa:51:dd:06:40:a7:38:3b:48:
                    90:4a:6d:70:16:ff:4b:0e:d9:3f:12:d5:6f:f8:22:
                    e0:e6:45:d0:11:39:3a:17:c8:6c:bf:91:4e:8b:9b:
                    85:4e:93:fa:95:2c:78:70:ef:be:99:7f:00:60:c2:
                    06:21:f4:c6:9f:b0:b1:8c:e2:72:2a:5b:a9:bc:f8:
                    07:bc:48:fc:11:ae:c5:a8:e9:f1:0b:c8:27:29:7c:
                    89:c6:4f:54:85:67:c9:a1:ee:52:04:5f:75:bd:bb:
                    06:30:ca:bc:33:24:a0:3f:59:2e:e8:82:c5:a0:6d:
                    95:29:3b:fb:6e:bb:ad:75:83:d7:bb:fc:37:cd:d1:
                    f0:08:49:75:9c:9e:5d:3c:83:3a:05:be:e0:84:71:
                    21:69:d0:3e:f4:8b:fe:24:b8:02:7e:a3:82:bf:ed:
                    1a:77:01:e7:8d:71:8f:72:19:57:98:20:89:a7:e4:
                    bd:1e:b0:81:f1:23:8b:31:52:f9:55:13:15:61:c1:
                    43:39:52:5b:b6:ab:1e:a0:fd:6d:45:3a:a0:07:af:
                    3f:99:d0:00:a4:19:c5:5f:5f:bb:5e:67:95:c8:76:
                    9d:09:ca:3b:24:ee:a2:54:37:31:bf:37:03:60:02:
                    dc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D6:09:0B:26:6C:4F:F0:BE:A9:6B:53:67:C5:3F:B0:20:60:F1:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/415caf1a-8dde-3199-a803-1a4b2ffdbb10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:46:cc:ea:a2:e2:14:b8:2a:17:a2:89:0e:2d:e4:cd:c1:53:
         9c:ea:4b:05:ec:45:9f:1b:8c:50:61:5d:99:ab:46:3a:ef:67:
         f4:19:67:77:52:c2:27:ee:b2:e8:41:02:39:9e:69:9b:18:fa:
         58:01:6e:28:18:95:51:ac:b1:59:fb:6d:14:b3:16:5a:77:af:
         41:3b:b8:01:09:59:99:44:db:12:8c:3c:23:4c:b8:77:21:9f:
         42:a0:7f:31:3d:3a:51:83:c7:a4:f3:bf:f3:d6:4a:f8:0e:ca:
         89:44:a8:31:17:23:96:cc:99:dc:17:7e:a3:72:34:a2:c0:d8:
         8a:91:2e:e0:98:c6:e8:aa:34:56:b3:11:96:fe:27:77:7c:75:
         c7:36:9a:f1:8d:ae:b0:f0:63:34:be:fa:08:f5:57:55:89:74:
         31:b6:dc:14:9f:d3:50:19:5d:ca:01:83:af:7c:a1:5d:66:6a:
         e6:9a:cc:2c:b6:aa:fd:7c:e0:8d:27:15:0a:b1:4f:ef:46:c3:
         a7:c2:6e:94:bb:65:8a:36:05:f0:d1:40:42:4a:f4:41:06:28:
         d6:57:dd:2b:34:60:ae:f3:cd:a9:3c:dd:4a:05:6e:1a:3d:f4:
         54:51:0c:ec:da:f6:18:d8:73:3b:9c:7b:8d:37:a0:09:71:af:
         84:95:1f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:17:44 2025 by rpki-client