Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1dd4739c-63eb-3475-8c2a-297aa6778d15.roa
File:                     1dd4739c-63eb-3475-8c2a-297aa6778d15.roa (raw, json)
Hash identifier:          WNoW0UlFBXzeLFKHi1N2eSpUx6JtE6zNRZT9wllmFdg=
Subject key identifier:   48:F1:B8:BD:AE:48:E0:67:51:B4:18:B7:A8:7F:70:F0:07:C0:F1:F3
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848F1EA7A914BEEF0F22063B5F0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1dd4739c-63eb-3475-8c2a-297aa6778d15.roa
Signing time:             Thu 20 Feb 2025 11:49:09 +0000
ROA not before:           Thu 20 Feb 2025 11:49:09 +0000
ROA not after:            Wed 21 May 2025 10:49:09 +0000
asID:                     30036
IP address blocks:        97.64.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f1:ea:7a:91:4b:ee:f0:f2:20:63:b5:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb 20 11:49:09 2025 GMT
            Not After : May 21 10:49:09 2025 GMT
        Subject: CN=4ff663fc-fefb-42b6-86c1-9fb36cc8f86d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a1:8c:41:3c:a0:ed:7f:ed:ec:0c:bb:56:e4:
                    e9:71:70:94:ca:0b:09:9a:98:61:f6:39:31:22:d7:
                    5c:97:04:e0:7f:75:d9:8a:4b:08:d6:f2:f1:1a:32:
                    4a:c5:8a:76:e9:66:cf:e8:e7:37:ad:ab:3d:1c:0b:
                    3b:63:c4:05:f9:0c:96:9a:ad:a1:18:e2:f8:34:79:
                    fb:9e:73:94:d2:73:54:31:95:cf:68:35:80:7a:ee:
                    8f:d8:c7:da:05:d4:72:3f:34:bd:b7:ad:09:41:20:
                    c8:7f:c6:64:e1:65:3c:37:37:26:17:16:48:94:c2:
                    90:36:cc:09:b7:2a:ae:72:ad:23:b1:3f:cc:eb:2f:
                    0b:7b:00:a8:c2:39:28:b7:ed:38:51:e3:8d:6d:1a:
                    43:16:8d:50:13:46:a8:2c:7a:43:e1:43:f4:2c:63:
                    dc:54:44:af:e1:77:77:d3:04:d2:db:86:59:33:73:
                    90:8e:39:3a:28:e7:a6:60:0a:6e:a7:d3:ec:bd:61:
                    d6:e3:fd:af:21:4f:80:43:2c:0d:06:c9:1b:53:6b:
                    bf:71:41:65:c4:14:d6:e2:a1:4e:a0:f9:c4:97:16:
                    59:a7:d0:8c:de:c6:93:53:7c:7b:39:a2:7d:65:11:
                    bb:10:6e:68:78:db:dd:c8:06:be:f1:12:b2:19:ea:
                    9b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F1:B8:BD:AE:48:E0:67:51:B4:18:B7:A8:7F:70:F0:07:C0:F1:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1dd4739c-63eb-3475-8c2a-297aa6778d15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:bb:82:31:99:41:ec:07:84:07:e5:a6:c1:50:fa:1f:b9:7c:
         64:c8:cd:db:a3:f5:12:a9:e4:05:49:54:a4:4d:15:55:c7:4a:
         32:5a:c3:43:1a:68:92:eb:b3:b3:93:34:40:ff:12:06:87:5b:
         08:03:47:7b:a7:6b:1d:b1:1a:83:bd:e9:7c:93:b2:e5:22:ec:
         6d:c3:b8:44:b4:fb:85:b5:c1:d5:a5:62:cb:bc:fc:90:bf:55:
         11:3d:08:fe:fc:3b:68:1a:f5:ce:62:f3:03:af:0d:2a:b2:dc:
         5a:e4:25:d2:e1:20:e6:61:be:a9:5d:88:1d:84:d4:8c:ae:fc:
         51:71:72:24:ab:45:cf:6e:d1:bf:62:51:9f:88:29:98:93:bb:
         c7:bb:19:a8:7b:cd:74:b7:32:77:02:ba:3a:ee:85:3c:60:ce:
         25:30:7b:e1:a5:70:ef:86:2c:9d:0f:6b:ed:dd:fd:eb:f4:45:
         e3:67:e2:43:f1:5b:02:9f:5a:eb:8b:a1:11:0b:ab:cd:e7:3d:
         4f:00:07:2b:4d:4e:a9:ac:1f:c7:b3:0b:9a:ae:83:89:64:c8:
         f7:1d:ca:48:d7:fc:b7:d1:f8:4c:04:97:41:37:59:35:19:95:
         a2:6b:6d:a1:bc:99:31:a9:38:94:84:70:77:eb:14:f6:44:5e:
         0e:6f:17:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:18:06 2025 by rpki-client