Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9e5b753f-e0be-3c3b-9e1e-28726dbd6113.roa
File:                     9e5b753f-e0be-3c3b-9e1e-28726dbd6113.roa (raw, json)
Hash identifier:          97GqSAQzExW/F+3yFlSTymSiv7lqJwonMjGic4gpN60=
Subject key identifier:   51:C7:E5:99:81:A0:BD:11:0F:84:41:84:90:0A:AD:69:AC:90:E4:47
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849D164EA47D46A01D955003A70
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9e5b753f-e0be-3c3b-9e1e-28726dbd6113.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        97.64.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:64:ea:47:d4:6a:01:d9:55:00:3a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=e616c7d8-3bcb-4c5b-af49-c8a82dae0d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d1:fe:ee:3b:0d:e8:e9:e6:d7:8b:6d:a1:55:
                    ea:84:98:2c:bb:bd:05:b5:58:92:53:c9:05:5a:75:
                    40:34:f1:e0:6f:f2:b5:86:00:77:4b:3a:67:5b:e2:
                    e8:dc:f8:0e:21:75:ca:ed:29:21:7e:02:01:9b:49:
                    d8:30:97:b9:ff:1f:23:35:39:cc:17:22:d6:27:33:
                    db:64:73:34:44:31:60:cc:18:86:33:be:1f:76:14:
                    1d:31:1d:bd:e2:5a:c0:d9:ab:e5:f1:9b:56:be:62:
                    c9:7b:0d:b4:c6:40:af:7e:be:16:ed:c9:dc:18:f1:
                    66:8f:73:e7:17:45:f2:5e:9c:d1:65:ed:2f:bb:2f:
                    b7:d3:9d:c8:0a:8c:69:26:a5:4b:dd:16:71:68:6c:
                    1f:18:b5:0e:80:8b:7d:4c:c7:3c:9c:0b:49:24:f2:
                    90:57:cc:99:41:e9:18:65:b9:f9:06:4e:b9:de:9a:
                    0f:d2:12:c6:d1:0f:da:29:36:05:c0:3b:5a:4a:7f:
                    75:14:9c:ca:33:4f:7c:88:ed:47:5d:a8:67:30:04:
                    d1:d9:65:ac:f5:6f:8e:cc:b8:b6:9e:35:53:28:c1:
                    94:cb:4f:78:65:9d:84:18:bf:0f:0e:1f:74:59:d8:
                    61:ce:e4:07:31:99:9d:6e:ff:a6:a7:09:c4:0f:24:
                    2a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C7:E5:99:81:A0:BD:11:0F:84:41:84:90:0A:AD:69:AC:90:E4:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9e5b753f-e0be-3c3b-9e1e-28726dbd6113.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:87:dd:56:93:41:08:4b:d5:2b:ec:e0:93:2d:cc:73:c6:fd:
         67:03:05:7c:81:7f:56:32:37:a3:25:1b:e2:ca:39:57:b7:1b:
         ab:3f:64:ed:a6:b4:af:68:3b:97:82:af:b5:74:88:d7:ca:6b:
         80:24:74:2a:03:d1:a2:a3:48:95:55:7f:31:03:80:89:70:1e:
         92:3d:00:d5:b1:e0:e3:bc:00:e8:65:db:d3:c1:c6:b4:94:08:
         f9:af:b6:fc:be:3a:a0:89:c3:db:98:cf:91:4f:9c:74:7d:b4:
         a8:07:99:98:8e:7a:c1:98:48:18:88:19:9b:ff:6d:55:0c:36:
         c8:a8:2a:9b:ed:10:28:77:ac:20:bc:e3:38:55:9c:14:3c:e8:
         39:8f:af:df:52:c0:9e:4a:57:79:a9:be:1a:f0:fc:2a:de:2c:
         65:23:d6:a5:76:23:ce:2a:55:30:c9:b7:22:a3:a0:84:13:dd:
         61:00:66:85:7b:ff:cc:43:0d:f5:f1:24:d8:e0:f8:ea:dc:58:
         92:3d:05:b6:d6:4b:9f:ae:a3:1a:ce:0d:81:3b:2e:e6:3b:1c:
         60:fd:cd:01:5e:00:97:bc:47:d5:fc:ae:2d:77:02:c7:64:31:
         5c:29:b1:2f:7e:33:85:2a:2a:fb:e9:d5:f7:38:65:33:6e:a3:
         96:89:b7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:19:03 2025 by rpki-client