Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c3576258-b614-3b21-8d5b-359116d3ac3b.roa
File:                     c3576258-b614-3b21-8d5b-359116d3ac3b.roa (raw, json)
Hash identifier:          llEuw69KiI4Dg0Mai400qCCQ3DbGFOjOSaRRxoGND8U=
Subject key identifier:   42:B1:16:2E:EF:96:D4:52:B3:39:9B:1F:63:CE:6D:A7:ED:31:68:CC
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849D42F9C595DA0EFD5975AB60C
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c3576258-b614-3b21-8d5b-359116d3ac3b.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        97.64.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:9c:59:5d:a0:ef:d5:97:5a:b6:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=71c973bb-ce3c-4f21-9edd-eea468c5824e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:04:db:f3:fc:26:c4:3a:0d:44:c2:e5:c8:f0:
                    07:64:ad:cb:45:f3:b8:63:a8:2f:c2:ef:ac:1f:b5:
                    e7:ce:cc:da:d6:92:fd:ae:ae:52:2e:81:35:22:91:
                    d9:d4:15:9b:28:7c:dc:b3:79:19:14:85:27:fc:2c:
                    36:8e:b6:a6:be:44:ec:f4:a1:1f:39:e4:3b:8a:0a:
                    f3:84:d3:0e:73:b8:82:be:de:01:6a:2d:2e:14:97:
                    38:7d:9d:fb:91:c5:31:fb:dc:a9:67:2b:d7:40:f7:
                    d2:e1:c5:5b:8d:6f:d8:f1:f0:86:f4:c3:3b:4e:a7:
                    d3:6a:7c:b5:bc:96:ce:4a:9a:ed:f3:c2:69:88:38:
                    39:75:65:e4:bc:72:e1:b1:97:e7:e7:26:25:7a:4d:
                    61:b0:5f:5a:95:5d:c2:a7:07:eb:06:be:56:6f:e6:
                    84:8c:a3:a9:42:14:1d:94:e7:03:20:cc:2f:8f:4d:
                    6d:38:46:c5:f3:d9:aa:d2:dc:24:a8:22:b9:35:f0:
                    0f:c2:39:82:2e:24:ef:3a:3c:b7:97:04:28:a1:21:
                    99:cc:12:d9:d1:04:ea:e5:f7:38:5d:96:1e:3c:c2:
                    50:3d:5a:34:70:67:d2:e3:18:d8:2f:d2:a1:85:d0:
                    1f:b0:47:5c:96:48:19:c1:42:ce:a0:3d:1f:c3:d4:
                    63:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B1:16:2E:EF:96:D4:52:B3:39:9B:1F:63:CE:6D:A7:ED:31:68:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c3576258-b614-3b21-8d5b-359116d3ac3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:90:7e:b7:98:6a:3e:05:78:29:84:8f:8a:34:6f:2e:c8:72:
         7e:e5:28:e3:95:05:51:79:e6:e8:02:ba:80:e5:3c:4f:6b:88:
         b8:c1:4e:58:10:02:2d:a3:cd:31:8f:2b:9a:bb:62:d5:03:ea:
         04:36:4d:57:61:f7:7c:32:67:49:fe:34:11:af:62:26:be:3a:
         ce:a9:48:f8:2e:eb:29:79:b5:45:6c:fc:40:60:ee:47:87:1c:
         25:f5:1c:3c:1c:b3:86:ec:3b:ae:1b:07:25:65:8b:e5:b1:8a:
         8c:13:10:ae:4a:9b:cc:d2:79:16:64:87:77:d5:f3:67:a4:c0:
         6d:31:50:f1:ee:a7:83:ec:cd:50:a6:6f:f8:90:25:79:f6:cb:
         21:1b:a5:1c:25:3c:b0:5b:09:60:0f:55:b3:c0:1f:71:1c:e1:
         69:f9:90:c0:3e:9e:da:0a:ab:14:93:d7:57:78:ba:7d:0d:e5:
         5a:af:a7:bc:92:37:52:76:ed:ea:34:5d:22:65:e9:a1:91:68:
         49:86:4a:28:9a:b8:58:fd:27:ce:40:45:5d:d7:7c:a2:d0:5e:
         10:df:85:8a:33:75:dc:ae:24:39:34:22:b5:dc:85:69:17:a7:
         c5:9e:0d:b0:73:8a:38:48:de:19:9b:03:1c:fc:2a:4e:8b:1a:
         58:4b:03:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:42:49 2025 by rpki-client