Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/acbaeed9-c049-303c-a8b8-46c07e296947.roa
File:                     acbaeed9-c049-303c-a8b8-46c07e296947.roa (raw, json)
Hash identifier:          5/pY3q5A5juDfZ5BXCUudfXo92ntd+H8zp6n74fzmik=
Subject key identifier:   1D:97:02:FF:9F:C0:0F:E3:D2:5E:64:E3:89:B2:07:8B:17:FD:BE:2C
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848F1E2F03E3893205AC0A27280
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/acbaeed9-c049-303c-a8b8-46c07e296947.roa
Signing time:             Thu 20 Feb 2025 11:33:57 +0000
ROA not before:           Thu 20 Feb 2025 11:33:57 +0000
ROA not after:            Wed 21 May 2025 10:33:57 +0000
asID:                     30036
IP address blocks:        97.64.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f1:e2:f0:3e:38:93:20:5a:c0:a2:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb 20 11:33:57 2025 GMT
            Not After : May 21 10:33:57 2025 GMT
        Subject: CN=2fdc6893-7d4f-47b0-9df9-1a847c0c8c7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:80:71:60:a6:42:e0:75:df:4c:45:75:4d:96:
                    1f:48:a5:43:91:e5:df:2f:08:78:97:04:13:d5:87:
                    2b:75:61:29:6f:c8:0b:98:4e:bb:c1:ff:dc:b1:25:
                    ce:b7:e1:ef:01:95:a7:5a:d3:ba:71:7b:70:2a:65:
                    73:76:ec:22:8c:b3:b6:a8:a9:68:a7:4a:17:99:45:
                    89:f7:73:c6:72:ed:bc:7b:f3:93:4b:80:dd:b8:91:
                    53:35:c2:25:5d:4c:48:7b:19:ae:a7:14:10:9e:90:
                    2b:d5:0f:58:e7:07:75:73:92:9c:31:dc:cf:57:2e:
                    42:55:14:ca:29:27:66:04:35:6c:b8:ea:2d:f2:07:
                    8a:53:6a:4c:38:b9:17:f1:f9:d3:0c:9b:45:b2:af:
                    aa:82:de:41:8c:07:05:df:02:e4:47:f0:be:62:e0:
                    a5:2e:23:51:aa:61:83:73:75:b8:0f:28:af:53:6f:
                    0c:c2:b5:4f:23:ab:47:27:eb:42:6d:91:34:ba:c4:
                    fb:d5:df:a1:76:4e:e6:7e:83:8a:32:42:11:f7:b1:
                    26:fe:a7:9d:55:f5:c0:64:a1:32:92:9d:64:21:17:
                    10:c8:5a:dd:75:a7:3a:92:71:c1:4d:bd:33:58:97:
                    38:9e:e3:0a:df:4f:cb:29:0a:5b:60:83:54:f3:05:
                    a0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:97:02:FF:9F:C0:0F:E3:D2:5E:64:E3:89:B2:07:8B:17:FD:BE:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/acbaeed9-c049-303c-a8b8-46c07e296947.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:ce:62:c2:40:ad:59:5f:b1:eb:c6:44:b2:a1:c5:ff:25:fd:
         37:12:f0:34:72:dd:4a:9f:e0:29:3d:fd:57:1a:ca:06:07:74:
         83:0f:7c:c9:23:31:ca:f6:9d:fc:11:de:c3:4e:6a:5b:71:8a:
         88:bb:cf:0f:44:62:06:88:ba:9d:7e:0e:88:5a:60:1e:60:b4:
         b5:c0:46:4f:5d:e6:1d:f3:f5:68:58:29:2c:49:cd:c7:8b:f5:
         21:60:a2:fe:06:42:04:92:ad:89:26:28:5e:40:2d:d9:68:82:
         d3:13:54:bc:81:5f:b3:62:d8:00:fc:0e:2e:0d:cd:aa:68:f2:
         b1:4f:de:8e:cf:64:ea:50:a7:0c:d3:af:b4:4d:9b:41:87:2c:
         e8:b1:83:26:00:e0:60:2d:e5:32:78:15:fd:38:bd:a5:66:2d:
         13:3f:37:d7:8c:0d:da:d2:3a:31:b6:be:92:4e:46:2e:d2:59:
         17:74:e1:a5:1e:bb:37:01:37:2d:13:2b:de:5d:91:81:81:60:
         c1:ac:9a:39:85:50:01:6f:bb:fd:7e:24:c1:2a:a1:ae:98:14:
         5c:25:aa:ff:2f:96:b7:cb:17:9d:36:53:46:e3:de:9d:8c:89:
         3d:9f:46:61:c5:d7:6d:c6:18:36:52:2d:00:e0:89:39:fd:bf:
         f1:5f:59:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:53:48 2025 by rpki-client