Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/685d215a-0b12-373a-bc79-f064fceb279a.roa
File:                     685d215a-0b12-373a-bc79-f064fceb279a.roa (raw, json)
Hash identifier:          3PBfZToqDUEgNCkV9pyiFs/gDSM+WKFjYmxHxfR8nVQ=
Subject key identifier:   13:76:7F:B2:38:90:38:8F:F1:42:AD:22:48:2D:52:97:63:4F:BA:65
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849D164F28A9064767ECB6A2FA8
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/685d215a-0b12-373a-bc79-f064fceb279a.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        97.64.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:64:f2:8a:90:64:76:7e:cb:6a:2f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=35e60ea4-c02b-4d5f-a670-a25fbf4535cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f1:62:21:ee:04:30:35:da:a3:73:60:2c:e9:
                    e8:3e:b7:b5:2e:1d:ab:8d:5f:9d:de:7e:d8:3f:4a:
                    f7:05:b0:71:cc:ba:b4:e2:38:b4:53:a9:80:bd:c7:
                    e5:5c:34:c4:86:a4:c5:1d:31:47:47:f4:bf:27:36:
                    2e:a3:53:d1:03:3f:32:82:cd:17:e0:61:32:d2:e9:
                    8d:3d:a3:fe:9f:39:10:39:57:be:6f:01:98:dc:0e:
                    93:64:ef:dc:2d:7e:b8:b5:b4:87:71:b1:01:98:ec:
                    c7:99:76:09:41:a6:10:c3:10:08:47:51:0c:6c:0f:
                    77:bd:0b:a3:68:5d:eb:ee:f1:d0:58:07:a4:2a:b1:
                    48:a2:e4:8b:23:e8:16:d4:60:a7:5f:d5:1f:75:c2:
                    76:28:1a:03:42:2a:57:d9:16:f6:33:be:75:76:f7:
                    c0:ba:27:52:0a:ed:f1:ec:4f:71:11:c5:2d:2a:d8:
                    81:cf:eb:15:ae:0a:91:6b:5c:32:98:70:ea:c7:3b:
                    56:e3:e2:11:ee:0e:1c:24:48:54:bb:c6:1c:70:da:
                    8c:2e:ca:7a:74:f4:7d:99:b6:87:4b:46:a0:11:c2:
                    30:ea:77:3d:2a:5e:27:ad:e6:1d:aa:d3:24:70:2e:
                    d5:e3:04:3e:1c:09:74:1f:b1:6c:2e:d0:54:36:c6:
                    7e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:76:7F:B2:38:90:38:8F:F1:42:AD:22:48:2D:52:97:63:4F:BA:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/685d215a-0b12-373a-bc79-f064fceb279a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:0b:9a:e6:37:59:cf:55:b3:b5:72:eb:cc:19:2d:18:be:3d:
         ce:69:5e:9f:e3:cc:5c:61:2c:48:b9:d8:d7:49:ec:3d:cb:00:
         80:9e:e0:75:f7:4f:f7:be:2c:ae:e9:e5:c0:35:51:b6:83:b7:
         fd:55:2b:85:5f:3b:95:24:10:a1:c2:50:a0:23:6b:96:6e:66:
         96:57:24:7a:7f:ba:84:6c:6b:3c:52:c6:ef:29:83:19:c2:7b:
         e4:7e:dd:28:93:c1:16:42:98:eb:0e:16:c9:0f:0b:06:f7:80:
         bc:1f:2c:8d:6f:a8:0b:e3:f5:d5:7e:46:9a:47:40:bc:9d:46:
         22:a4:56:a5:a5:f1:96:b4:a1:62:a8:ad:27:f5:54:28:c2:0b:
         d4:aa:05:d0:f1:7d:bc:ed:85:cf:df:0e:e5:f2:d2:94:86:0d:
         b0:a8:0d:50:41:8d:4a:0a:5e:e2:3e:e1:16:b2:f6:03:b4:92:
         b8:62:aa:a6:69:fa:55:89:eb:0d:4c:ed:70:28:83:94:3d:1c:
         60:ab:79:85:f8:17:9a:2c:2b:d5:6f:9f:3b:7f:09:e7:d0:4b:
         13:10:37:de:e4:3a:1d:78:66:16:03:04:16:7d:ba:a0:1f:ea:
         ea:ef:d1:bd:70:84:e4:00:66:d8:a5:0a:8e:6c:73:b9:cd:35:
         79:13:a8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:36:08 2025 by rpki-client