Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/469d97fd-89ae-3d79-8e8c-0cdc22fe8608.roa
File:                     469d97fd-89ae-3d79-8e8c-0cdc22fe8608.roa (raw, json)
Hash identifier:          rRG/lzUq4g8FA087xh55iGKXbGcfJYxCIg5lU0gtotk=
Subject key identifier:   98:F4:4B:8E:01:47:5B:2C:66:22:AF:C4:81:8C:3A:35:7B:5D:02:D9
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848F1DB89E3D5875A627325C300
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/469d97fd-89ae-3d79-8e8c-0cdc22fe8608.roa
Signing time:             Thu 20 Feb 2025 11:19:03 +0000
ROA not before:           Thu 20 Feb 2025 11:19:03 +0000
ROA not after:            Wed 21 May 2025 10:19:03 +0000
asID:                     30036
IP address blocks:        97.64.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f1:db:89:e3:d5:87:5a:62:73:25:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb 20 11:19:03 2025 GMT
            Not After : May 21 10:19:03 2025 GMT
        Subject: CN=146e3361-5da4-4748-a77f-248c30e44bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6e:73:be:55:3d:33:3d:15:c6:e5:33:b5:3f:
                    9b:c8:40:15:3b:23:49:9b:36:1d:b9:e4:bf:0a:7a:
                    0f:2a:a4:f9:92:24:f2:53:dc:c7:4e:fa:ca:bc:24:
                    e2:cf:28:60:13:5d:43:f7:e7:ba:d1:cb:08:5e:15:
                    19:e0:7e:df:86:d7:69:1c:fb:b5:f5:23:5a:fd:75:
                    8f:53:85:8e:c1:63:cf:14:fe:c6:2c:7d:c6:7f:4a:
                    f5:2c:06:9f:f2:48:7f:91:e8:08:db:c1:d7:ee:2e:
                    73:84:d9:82:35:10:6a:f6:c0:d3:e3:e4:52:4a:c5:
                    54:6e:84:df:25:ed:fb:86:48:1b:5b:d4:c4:0a:a7:
                    87:88:28:41:70:35:47:f1:ad:96:69:fa:6e:ba:16:
                    77:ec:d0:45:63:79:47:e1:cb:8b:50:dc:70:a3:0a:
                    3e:54:31:ae:9a:d3:95:0e:53:97:2c:28:b8:6e:ab:
                    37:b6:78:73:12:41:7a:a2:2d:88:5d:44:5e:8e:66:
                    8b:47:ca:ab:17:89:0d:5d:92:fa:ac:e4:12:53:ec:
                    58:97:25:03:e7:aa:08:aa:79:fd:16:e6:88:9f:69:
                    c9:ea:65:53:92:63:8b:50:ff:d5:fb:0f:e9:69:c7:
                    31:c3:ee:a7:54:68:d4:a2:22:15:13:08:b9:33:7a:
                    11:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F4:4B:8E:01:47:5B:2C:66:22:AF:C4:81:8C:3A:35:7B:5D:02:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/469d97fd-89ae-3d79-8e8c-0cdc22fe8608.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:0a:38:3f:e4:39:ec:ce:19:4d:17:94:b8:43:83:e6:15:8c:
         fa:25:13:01:58:fa:d6:d7:92:5a:d5:c6:d6:ad:d6:48:4d:71:
         26:d6:cb:63:14:50:05:45:a2:35:1f:43:47:27:c9:e0:03:74:
         96:21:7f:b7:fc:db:ce:b3:f8:76:57:fa:6f:8e:ea:12:f6:53:
         bf:87:b0:e3:13:70:6c:10:a2:f3:ff:30:2f:af:b6:a8:f4:50:
         60:3a:1a:87:11:34:de:02:2e:42:bb:61:7f:c5:14:9f:c1:f9:
         5b:7d:d8:78:77:74:cb:0b:d9:57:66:fc:31:e4:f9:5c:09:4e:
         98:f9:a8:d5:b5:b6:67:c7:7d:a3:54:42:d4:c1:6b:7e:09:f3:
         6b:fa:2e:48:9f:f8:42:19:63:28:11:1b:cf:1c:47:8c:4a:d1:
         f5:41:39:84:90:76:0b:7b:04:23:2d:3e:6b:20:3a:64:d2:ce:
         6b:dd:30:df:ad:77:0b:a3:47:ec:c2:5b:c8:0a:3a:d7:0a:9e:
         44:bc:41:dd:ec:88:47:6f:b8:ad:16:76:a4:40:06:bb:01:e4:
         68:01:55:5c:80:c4:80:46:6a:2d:b7:21:d6:3a:95:04:f3:25:
         82:66:1a:eb:cf:83:86:db:7e:e2:66:06:53:01:4e:92:a9:fb:
         a8:21:29:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:58:39 2025 by rpki-client