Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/315e0053-a76b-3006-b1e9-683919051495.roa
File:                     315e0053-a76b-3006-b1e9-683919051495.roa (raw, json)
Hash identifier:          UCQaJZ5Ft/GHQxTKrJGFmCyEIaZsqBJ5OmzO6aeWSEc=
Subject key identifier:   F2:6D:4D:15:CB:91:A0:20:EA:F1:81:8F:A2:F2:B1:0D:DF:60:D1:7E
Certificate issuer:       /CN=385196b1-542e-428c-8866-0efd1362fdc0
Certificate serial:       010D0C9F43285848EF6160D36276B2D102C7B580
Authority key identifier: 5B:EC:BB:7F:3D:6D:75:7E:6E:54:83:89:F2:D5:6F:7B:C6:78:FD:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/315e0053-a76b-3006-b1e9-683919051495.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        64.35.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/385196b1-542e-428c-8866-0efd1362fdc0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/385196b1-542e-428c-8866-0efd1362fdc0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:60:d3:62:76:b2:d1:02:c7:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=385196b1-542e-428c-8866-0efd1362fdc0
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=c3964aae-9461-49d3-9a6a-1a0c49a1294c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a2:a9:bb:ca:0f:d7:38:46:77:40:eb:7a:bc:
                    78:e0:02:8c:32:b6:f4:cc:53:4b:65:a4:83:26:92:
                    bd:9f:c1:ec:25:a4:c2:e3:11:ff:2f:89:4b:c4:01:
                    0c:e1:f6:d4:b9:a9:b7:44:3e:9e:34:c6:77:11:e5:
                    13:67:4f:7a:58:e9:ef:ae:f8:63:aa:52:d9:08:77:
                    7c:e2:3f:81:27:4f:5d:20:51:a9:e9:21:94:fa:e1:
                    1b:90:75:e9:3b:fe:b2:96:ac:4e:31:19:dc:fc:3f:
                    97:b7:08:e8:5a:ca:d0:5c:aa:1a:f7:67:67:18:2e:
                    bb:38:14:82:17:ca:6e:dc:99:3c:77:2c:b9:4d:bb:
                    0c:24:d6:86:b7:1c:0c:a0:04:91:53:cb:eb:90:65:
                    cc:c4:f9:a6:50:ce:f4:75:e4:85:b6:61:8f:f5:c8:
                    07:df:e3:be:39:db:9a:79:b8:88:ee:12:29:e9:3b:
                    65:06:b0:d7:eb:6f:8a:aa:ea:c1:5c:c3:64:dd:27:
                    e2:34:4e:61:aa:e2:b8:ac:5f:70:39:32:83:f2:16:
                    c6:61:82:0a:c8:a7:ea:c3:4d:8f:5b:1e:fc:27:0b:
                    f7:df:51:c6:d3:d4:44:41:85:74:5c:32:a8:28:3c:
                    19:5a:f7:d1:87:11:e5:e9:a3:97:52:75:0f:f1:cf:
                    e8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6D:4D:15:CB:91:A0:20:EA:F1:81:8F:A2:F2:B1:0D:DF:60:D1:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/315e0053-a76b-3006-b1e9-683919051495.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/385196b1-542e-428c-8866-0efd1362fdc0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:EC:BB:7F:3D:6D:75:7E:6E:54:83:89:F2:D5:6F:7B:C6:78:FD:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.35.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:30:5f:ec:b1:ed:76:7b:ce:12:00:2f:5b:5d:3f:4d:4e:ce:
         00:62:59:eb:3d:5d:4c:46:c7:3a:e8:d2:5e:19:92:74:7b:21:
         a8:3d:ad:87:79:ea:0e:ad:1b:bb:b4:ca:79:08:ab:c1:30:c5:
         da:c8:a9:46:4b:7a:66:20:94:95:25:d4:28:d9:26:92:b0:fc:
         68:de:b3:b7:fb:08:53:0f:3f:33:6b:4e:ab:36:01:8b:67:4c:
         62:05:93:a3:fd:5a:74:c9:7c:28:53:26:3b:86:ff:32:c5:7d:
         75:03:a2:d6:0f:9f:ba:57:68:58:a6:d1:fc:4b:95:c7:4a:3e:
         64:49:7a:14:94:07:5e:36:d7:30:88:ff:ec:ae:3b:80:04:ee:
         4b:d7:7a:e8:ac:0d:c7:05:17:2c:f1:5c:e8:8b:bc:fc:69:af:
         10:89:f4:67:08:22:3e:49:85:7e:54:07:2a:ee:2d:93:c3:56:
         0c:f0:45:e8:08:93:c0:15:6c:f3:14:00:f2:20:bd:3d:68:ba:
         2b:7a:0b:f8:52:7a:c9:15:48:d4:3e:a6:ea:0c:06:aa:1b:d1:
         b9:5e:bf:2c:bb:65:3f:3d:c0:96:dc:b4:ab:7d:5f:43:2d:c4:
         2e:f7:54:8c:5a:2b:2e:85:b4:03:aa:70:5a:c7:3d:8f:c2:02:
         9c:17:b0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:29:01 2025 by rpki-client