Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a0915ce1-dacb-3f2f-9d5f-3b2516489dcf.roa
File:                     a0915ce1-dacb-3f2f-9d5f-3b2516489dcf.roa (raw, json)
Hash identifier:          vxW6o2Kkp0e76WLY0o7WlnbGtWNwxFB/IDxmMq9eF8c=
Subject key identifier:   EA:CC:F3:7D:21:DA:98:C7:58:8A:5B:11:0A:25:2C:61:65:AD:A4:E3
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849D164F20D5701AC2CB08271B0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a0915ce1-dacb-3f2f-9d5f-3b2516489dcf.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        97.64.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:64:f2:0d:57:01:ac:2c:b0:82:71:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=a50363da-62ba-4686-88d6-7279f8c6694a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:44:e2:10:52:bd:57:3d:0c:55:93:f4:94:7e:
                    16:e2:c4:3d:2b:de:85:4c:ea:29:9d:dc:ae:ad:37:
                    de:c5:4e:0d:a4:ae:8f:fe:0c:ad:e7:00:62:67:ec:
                    21:01:9c:0f:a9:2e:bd:03:90:bb:e9:20:7b:7d:32:
                    db:95:af:16:fa:c6:48:df:51:15:f5:77:9a:fb:bf:
                    b3:67:18:e5:2c:0d:95:98:87:4a:81:47:db:e0:bd:
                    a4:c2:2a:3e:9a:6a:75:3c:90:23:26:f9:64:62:a9:
                    86:c5:72:c2:4e:88:fa:fb:b2:9b:92:13:f6:8b:ee:
                    2a:67:26:99:be:e4:a4:08:85:9f:7e:ac:d5:8d:21:
                    33:9b:ac:c2:87:2f:06:a3:c1:bc:46:32:a9:5e:51:
                    af:82:ee:23:82:aa:7b:56:ac:0b:ff:a1:8f:f4:0f:
                    69:d9:11:53:97:26:aa:70:29:38:9d:08:20:31:f0:
                    f4:a7:30:5e:f2:d6:07:6c:3d:1a:8b:ab:9f:c3:d2:
                    33:ab:1b:99:76:f1:db:f7:90:32:ed:f8:19:72:57:
                    e7:db:2a:ad:d7:b8:fd:96:16:f3:6a:d2:11:d3:43:
                    fd:0e:cb:f9:a4:a2:e7:e0:dd:d3:7b:5a:74:d7:0c:
                    6f:3f:2b:b8:43:12:dc:41:18:4a:6e:5e:cd:29:40:
                    20:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CC:F3:7D:21:DA:98:C7:58:8A:5B:11:0A:25:2C:61:65:AD:A4:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a0915ce1-dacb-3f2f-9d5f-3b2516489dcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:72:96:53:38:fc:3b:ce:c6:ca:d4:78:23:87:47:39:91:3e:
         71:f8:b3:49:e9:24:c3:ad:6f:c2:14:23:c6:bb:3f:db:8a:0a:
         b7:0a:a1:b3:b0:f6:2f:83:05:8d:b0:76:5e:b0:89:ad:8f:e2:
         c0:2c:58:88:88:f9:fc:33:5d:c5:d4:f4:39:c8:7d:28:bb:28:
         07:a4:9f:e2:42:13:e0:8a:1c:a2:17:86:85:e9:1f:dd:73:6a:
         b4:3b:bf:86:2e:6d:32:1a:2b:f4:84:75:4d:c2:7e:4f:3e:04:
         ff:e0:01:f1:55:5e:ef:8d:e5:76:3c:15:74:30:4e:82:4d:60:
         f1:bd:7d:a1:f4:85:09:41:53:02:e7:1e:a8:79:fd:2a:3d:a6:
         fe:04:9a:35:a1:e6:03:50:7c:45:4c:83:d8:99:24:06:98:cd:
         98:44:c8:e0:2a:c3:d8:e9:08:8f:ef:2d:86:df:ce:aa:d0:32:
         ed:7a:a5:b1:bc:f4:51:d2:e5:99:cb:53:7c:aa:82:99:c8:66:
         05:00:53:b8:03:6a:0c:24:47:f2:ba:ac:4a:e3:ee:85:ba:eb:
         22:b7:51:af:23:af:10:43:79:f8:64:71:8f:54:a8:82:82:cf:
         00:90:1b:b0:88:cf:a6:23:ee:07:66:0c:76:fa:31:c0:cc:c9:
         01:d8:cc:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:16:36 2025 by rpki-client