Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a2d98b3-89f2-3f5d-a5a5-9efbcf418cd4.roa
File:                     4a2d98b3-89f2-3f5d-a5a5-9efbcf418cd4.roa (raw, json)
Hash identifier:          BRUjnOk4svJb0UKmUukhq5mDYETt/XK88+3QGMNgJXA=
Subject key identifier:   7A:F9:99:70:45:DD:12:FA:A9:39:F3:7D:F5:5B:53:B0:DD:C4:54:03
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848F1EA675ACEE17C029F10ADA8
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a2d98b3-89f2-3f5d-a5a5-9efbcf418cd4.roa
Signing time:             Thu 20 Feb 2025 11:49:00 +0000
ROA not before:           Thu 20 Feb 2025 11:49:00 +0000
ROA not after:            Wed 21 May 2025 10:49:00 +0000
asID:                     30036
IP address blocks:        97.64.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f1:ea:67:5a:ce:e1:7c:02:9f:10:ad:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb 20 11:49:00 2025 GMT
            Not After : May 21 10:49:00 2025 GMT
        Subject: CN=1d49f59c-c45d-4d35-81f7-1313b8bdb41f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c8:9d:22:2e:d9:40:b2:ed:31:16:4e:1a:30:
                    1d:ec:e4:5e:8a:80:03:25:40:e7:e4:23:f2:8f:c4:
                    af:45:1a:4a:0a:02:e7:2c:19:ae:48:aa:b4:1f:d2:
                    cf:13:dd:95:62:31:be:7e:d3:81:ec:6a:aa:4e:bf:
                    d0:34:13:58:f9:f9:57:37:0e:54:8c:cc:c9:f9:79:
                    f9:dd:1f:d4:92:f1:6a:07:da:fe:4f:c6:32:d4:64:
                    36:f6:70:78:0d:66:21:5a:ce:f7:33:e5:9b:7b:68:
                    55:b0:88:bf:a7:4e:34:99:b1:ff:17:1a:79:0d:12:
                    8c:ff:fe:9e:05:71:dc:40:9a:83:97:3d:2c:57:cb:
                    69:8e:8d:93:d6:af:f3:be:c8:17:b0:cf:57:b1:63:
                    bb:b7:3a:a1:14:83:43:60:8d:2a:9b:60:29:a3:66:
                    37:8c:a1:7a:3d:88:37:11:68:8a:10:63:e6:40:3b:
                    b7:33:f7:9b:a4:c1:76:78:af:2c:03:d1:bf:80:c7:
                    01:18:7e:a6:90:27:14:55:5b:51:0b:b9:0b:fc:b3:
                    84:1a:c9:38:73:d8:79:ec:98:7d:63:76:59:eb:6a:
                    ef:1e:c9:e8:d7:39:c6:e8:8e:fe:85:cb:dd:bd:b0:
                    df:ac:b7:6b:cc:0d:e7:69:76:f4:ee:b9:e9:ec:23:
                    8c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F9:99:70:45:DD:12:FA:A9:39:F3:7D:F5:5B:53:B0:DD:C4:54:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a2d98b3-89f2-3f5d-a5a5-9efbcf418cd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:66:8b:90:bd:a2:10:94:6c:bd:09:43:a5:fa:6f:63:9e:4e:
         f8:4c:bb:11:a5:22:a6:56:ed:d2:f6:a8:a0:b4:3d:29:3c:89:
         ef:3d:93:84:fe:05:4e:42:66:02:dd:bf:a7:38:b1:97:27:96:
         80:91:67:a8:34:af:12:35:55:cb:87:48:f7:9a:5a:42:9d:f0:
         cc:d5:26:ef:db:b3:3e:91:b9:27:ee:b0:44:71:7b:8d:4f:e5:
         24:cf:5e:23:db:42:0c:26:05:d5:0e:d7:00:4f:60:1c:f5:3a:
         5b:82:26:fc:ca:81:e5:0e:10:8a:37:47:b0:c1:b4:2c:f1:12:
         a9:0f:54:5d:27:de:e5:ed:68:e9:d8:da:46:e7:38:cf:90:9e:
         f0:aa:62:da:e4:da:84:65:f6:d4:5a:3a:61:c1:bb:47:fe:74:
         66:85:38:ff:32:2d:57:c9:03:0e:9f:e9:a2:2c:6a:fb:03:cb:
         42:71:61:73:2c:3c:fa:8f:a7:47:f2:13:e3:0c:0e:6f:42:e6:
         ef:c2:43:c6:62:4e:c6:6f:64:bd:8b:f1:2a:76:32:75:f5:1c:
         86:6a:0d:10:21:d7:48:1e:a2:32:1a:a4:ab:66:25:89:0d:4d:
         fc:6e:f9:b0:65:90:dd:8f:fc:9a:e5:56:b6:81:37:fb:a1:da:
         e4:7e:df:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjx6mdazuF8Ap8QragwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDIyMDExNDkwMFoXDTI1MDUyMTEwNDkwMFowLzEtMCsGA1UEAxMk
MWQ0OWY1OWMtYzQ1ZC00ZDM1LTgxZjctMTMxM2I4YmRiNDFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycidIi7ZQLLtMRZOGjAd7OReioADJUDn5CPy
j8SvRRpKCgLnLBmuSKq0H9LPE92VYjG+ftOB7GqqTr/QNBNY+flXNw5UjMzJ+Xn5
3R/UkvFqB9r+T8Yy1GQ29nB4DWYhWs73M+Wbe2hVsIi/p040mbH/Fxp5DRKM//6e
BXHcQJqDlz0sV8tpjo2T1q/zvsgXsM9XsWO7tzqhFINDYI0qm2Apo2Y3jKF6PYg3
EWiKEGPmQDu3M/ebpMF2eK8sA9G/gMcBGH6mkCcUVVtRC7kL/LOEGsk4c9h57Jh9
Y3ZZ62rvHsno1znG6I7+hcvdvbDfrLdrzA3naXb07rnp7COMjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHr5mXBF3RL6qTnzffVbU7DdxFQDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNGEyZDk4YjMtODlmMi0z
ZjVkLWE1YTUtOWVmYmNmNDE4Y2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUC1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHxmi5C9ohCUbL0JQ6X6b2OeTvhMuxGlIqZW7dL2qKC0PSk8ie89k4T+
BU5CZgLdv6c4sZcnloCRZ6g0rxI1VcuHSPeaWkKd8MzVJu/bsz6RuSfusERxe41P
5STPXiPbQgwmBdUO1wBPYBz1OluCJvzKgeUOEIo3R7DBtCzxEqkPVF0n3uXtaOnY
2kbnOM+QnvCqYtrk2oRl9tRaOmHBu0f+dGaFOP8yLVfJAw6f6aIsavsDy0JxYXMs
PPqPp0fyE+MMDm9C5u/CQ8ZiTsZvZL2L8Sp2MnX1HIZqDRAh10geojIapKtmJYkN
Tfxu+bBlkN2P/JrlVraBN/uh2uR+3z8=
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:56:19 2025 by rpki-client