Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/502a3674-0e36-3798-abca-7d75118b83fd.roa
File:                     502a3674-0e36-3798-abca-7d75118b83fd.roa (raw, json)
Hash identifier:          o71g7jg4l1OT9pU/7aokuvGG5x46TTR+sAj+0CvXZkg=
Subject key identifier:   17:15:B6:06:4E:C8:54:D4:7C:1D:B5:86:E7:2D:A6:60:B0:9A:00:0F
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F43285848D7A64863BA0BFF2993739390
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/502a3674-0e36-3798-abca-7d75118b83fd.roa
Signing time:             Tue 11 Feb 2025 02:00:39 +0000
ROA not before:           Tue 11 Feb 2025 02:00:39 +0000
ROA not after:            Mon 12 May 2025 01:00:39 +0000
asID:                     396253
IP address blocks:        97.64.52.0/22 maxlen: 22
                          97.64.60.0/22 maxlen: 22
                          104.225.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d7:a6:48:63:ba:0b:ff:29:93:73:93:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Feb 11 02:00:39 2025 GMT
            Not After : May 12 01:00:39 2025 GMT
        Subject: CN=8bda10dc-f330-438d-9c19-0f8bf3ab48db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f0:d3:03:fe:35:5d:6a:a6:5d:41:39:9d:b4:
                    c8:b7:1a:5c:22:33:53:db:61:bf:2c:64:45:10:6e:
                    80:69:ed:43:de:ba:8f:c3:59:02:54:4e:92:0d:76:
                    76:37:ff:c6:bc:3f:5b:7c:29:a5:06:cd:71:b8:21:
                    e0:b2:38:40:dd:2b:08:2e:83:44:ae:47:ef:db:2d:
                    ae:29:11:6f:66:b8:38:a9:56:76:ef:32:36:d4:87:
                    49:e9:9b:0c:b8:f8:d0:c9:cf:7d:8f:c0:7b:cc:40:
                    09:f1:e3:8a:f1:f2:6a:b1:90:33:02:68:aa:ce:9f:
                    23:ad:78:38:bb:b8:5b:3e:71:e4:c0:47:ea:f2:06:
                    0b:3e:a4:91:d2:15:d7:7b:94:23:3a:07:9d:0d:ab:
                    d8:53:20:36:b7:4d:7c:6b:4a:95:92:bf:b9:b8:73:
                    a9:6f:50:74:ac:c3:fd:7f:8b:27:69:43:b2:34:74:
                    4d:2a:f6:34:1c:91:ed:5e:22:9c:3e:b7:28:33:24:
                    94:d3:06:7c:39:0a:16:c2:3d:a5:a0:90:92:1f:4a:
                    ac:08:0f:07:2d:bd:c4:b5:65:0b:cb:94:f9:69:12:
                    af:20:42:16:4e:06:ad:c4:9f:1f:06:21:02:c0:bf:
                    c9:6d:f3:f4:7b:54:78:c6:ec:94:fb:b1:b3:2e:04:
                    3a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:15:B6:06:4E:C8:54:D4:7C:1D:B5:86:E7:2D:A6:60:B0:9A:00:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/502a3674-0e36-3798-abca-7d75118b83fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.52.0/22
                  97.64.60.0/22
                  104.225.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:84:21:f2:29:e1:08:e6:bc:9c:0a:9a:1a:85:2f:a5:13:83:
         4b:6b:2a:de:94:7d:83:87:3f:40:8e:44:4f:d8:ad:43:2b:be:
         ca:44:d7:81:5f:eb:69:15:00:54:5d:0f:60:83:ff:1a:f5:ef:
         01:4d:e2:21:4a:ff:d5:4a:76:b6:30:cb:dc:9b:16:90:5b:81:
         6a:5c:dc:8c:5a:d1:1b:4b:d4:76:66:1d:f7:a6:77:d5:43:64:
         9d:2a:f5:96:6f:c4:88:c2:23:f9:9c:8c:ad:15:32:f8:a7:cd:
         c2:bf:df:48:1d:b7:53:3e:bd:0b:63:65:5b:a0:67:8c:0c:a5:
         d0:1d:32:61:a4:a0:a4:94:5d:e6:5c:5a:fe:b8:40:fa:6f:f0:
         b0:fc:07:be:14:2d:f7:35:f7:e7:b8:3f:a2:ba:fb:b0:56:01:
         46:b1:da:49:9c:dd:17:8f:a4:cf:7f:c4:d3:1c:e9:f2:02:f3:
         c6:e1:43:10:dc:83:93:81:44:9b:58:c4:6e:cf:9c:9c:51:57:
         97:3d:1c:74:eb:41:32:9f:71:75:4d:f0:65:da:d1:75:6b:fc:
         b5:18:42:70:bc:4f:08:f4:55:54:5f:31:d1:d3:69:e9:b3:b0:
         66:d2:c6:51:9b:a4:52:a6:f6:1f:b9:37:87:39:c1:07:7c:5a:
         9f:7f:91:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:57:19 2025 by rpki-client