Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/111517b0-9394-3514-a35f-fe36bba7b73d.roa
File:                     111517b0-9394-3514-a35f-fe36bba7b73d.roa (raw, json)
Hash identifier:          z6WTAF1+UHpAZR4aWWLbe+K7RDqYHXgPS6SopF00m78=
Subject key identifier:   4E:CF:DE:C9:1A:5D:EB:0C:1E:99:FC:B1:5E:05:B3:91:AD:0E:51:AF
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848F1DB826FA4A79397F5E55600
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/111517b0-9394-3514-a35f-fe36bba7b73d.roa
Signing time:             Thu 20 Feb 2025 11:18:59 +0000
ROA not before:           Thu 20 Feb 2025 11:18:59 +0000
ROA not after:            Wed 21 May 2025 10:18:59 +0000
asID:                     30036
IP address blocks:        97.64.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f1:db:82:6f:a4:a7:93:97:f5:e5:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb 20 11:18:59 2025 GMT
            Not After : May 21 10:18:59 2025 GMT
        Subject: CN=57b65c54-c386-4678-b233-65633480526f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:99:cd:3c:3e:f2:54:63:53:6d:dd:f8:6d:f8:
                    b7:41:21:1a:14:31:0d:22:c2:59:a3:63:68:fe:3c:
                    08:a9:31:00:c3:00:2a:61:7d:2e:5f:b0:25:74:19:
                    53:45:03:40:1a:e5:a1:c4:43:0f:c7:da:ec:2c:1a:
                    27:11:b4:ac:9f:2c:43:34:50:76:5c:ff:d8:62:e5:
                    24:72:03:ea:13:ea:76:e9:d3:c5:50:fb:10:33:f5:
                    09:31:6b:38:64:c4:11:84:da:50:a9:8c:3b:8c:aa:
                    b7:60:0c:4a:f1:4e:49:ac:95:00:41:c8:48:92:f6:
                    21:c4:20:69:33:6b:87:78:20:73:a8:34:44:7c:a9:
                    56:d6:f5:ec:35:8b:05:b4:45:92:82:39:5b:52:b6:
                    c7:c2:c1:d8:35:87:e8:6d:46:dd:72:c3:42:10:24:
                    b0:95:bb:8e:73:60:07:ec:cc:5b:23:8f:ac:76:be:
                    43:20:49:06:14:be:69:3c:48:ab:0a:53:28:6a:b7:
                    6a:d8:e9:98:df:03:9c:b4:96:d7:57:a3:9a:17:86:
                    c4:38:98:04:83:8a:e5:ae:42:1c:fe:6d:16:2f:16:
                    a2:1c:f2:17:72:28:03:b0:44:66:d0:ab:9f:6d:cc:
                    ba:56:e4:dc:fa:dd:5f:e3:b0:2d:64:39:9a:fa:e7:
                    cf:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:CF:DE:C9:1A:5D:EB:0C:1E:99:FC:B1:5E:05:B3:91:AD:0E:51:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/111517b0-9394-3514-a35f-fe36bba7b73d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:1c:6b:48:f7:66:b9:90:fc:ca:90:85:ec:8b:ba:6d:68:d8:
         bb:13:18:50:40:43:e7:b7:6d:e1:62:ff:e8:54:6f:6d:08:5a:
         7a:92:fc:fb:00:29:a8:51:da:dd:6f:53:3b:0f:2b:68:b8:e4:
         55:dd:7f:2a:a1:f0:16:8a:9d:d0:de:bb:26:c2:c2:5a:ce:93:
         c3:62:3a:f6:20:b0:35:66:df:17:7f:a5:f1:5e:1a:37:bc:45:
         3b:b8:d2:25:a9:0b:df:92:67:19:87:a7:0c:36:3d:a1:89:c5:
         87:23:71:1d:76:28:02:6e:7b:86:e9:5c:4c:c4:c6:1a:b9:3d:
         4a:61:92:55:4c:f0:a2:6f:3e:25:c1:7f:11:c2:1c:52:02:26:
         cd:c4:00:55:21:27:11:a1:5b:9b:0f:0f:99:bf:a9:a4:e1:17:
         9c:bb:66:82:8f:da:99:7c:6c:9e:08:84:38:39:4f:ff:4c:4d:
         f9:ed:39:5a:17:fd:e9:f4:8f:3e:de:1c:ad:d0:85:70:ca:50:
         ce:be:43:93:2b:f4:31:67:d1:6f:69:70:90:2e:ae:43:10:99:
         6c:6b:43:91:1a:d7:83:47:30:14:33:61:48:b2:f4:10:66:8b:
         de:d5:58:3e:76:11:0a:7c:eb:05:c8:30:3e:19:b6:d9:f8:ba:
         68:51:4f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:20:41 2025 by rpki-client