Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/9917fb74-f32d-3244-a63d-665f177752b1.roa
File:                     9917fb74-f32d-3244-a63d-665f177752b1.roa (raw, json)
Hash identifier:          6zamrQj5ea9rwQLHnOxKFJK7Jpm8tkHD8JvlQYzF1dI=
Subject key identifier:   A1:7C:B2:F9:5D:B4:D4:A1:E3:60:62:F9:F0:43:8D:65:A9:3C:A5:E9
Certificate issuer:       /CN=e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14
Certificate serial:       010D0C9F43285848A13613A987CFE4936AA99F80
Authority key identifier: F0:EC:7E:79:B5:BE:C8:B4:67:5A:7E:05:A2:B3:78:43:7F:14:28:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/9917fb74-f32d-3244-a63d-665f177752b1.roa
Signing time:             Wed 22 Jan 2025 14:00:52 +0000
ROA not before:           Wed 22 Jan 2025 14:00:52 +0000
ROA not after:            Tue 22 Apr 2025 13:00:52 +0000
asID:                     14230
IP address blocks:        97.64.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:36:13:a9:87:cf:e4:93:6a:a9:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14
        Validity
            Not Before: Jan 22 14:00:52 2025 GMT
            Not After : Apr 22 13:00:52 2025 GMT
        Subject: CN=39da989a-4de5-4321-bcd6-354d82688934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:df:23:f8:a7:b0:68:4b:b5:01:43:cf:0c:ea:
                    67:fc:c4:ab:92:1f:16:29:75:0b:93:e1:21:d7:55:
                    7a:ba:03:89:9c:37:6f:ab:d2:53:bc:ec:d2:09:fc:
                    cb:c4:33:ab:66:f7:84:54:71:e1:95:f7:cb:cb:2c:
                    6f:01:8f:da:16:7f:25:e1:74:c8:ef:62:5f:d8:21:
                    a8:bd:13:eb:ba:05:da:dd:a1:b1:52:b7:a8:36:26:
                    9a:9d:3d:f5:5d:59:f2:3f:4f:e2:fc:06:65:ab:36:
                    1e:85:7a:25:ce:57:12:32:8d:73:38:a1:32:f6:85:
                    60:c6:43:91:87:cf:25:1b:f9:91:6b:93:83:a0:f2:
                    ed:cb:39:7e:23:c5:f7:5f:63:95:65:3b:af:fb:95:
                    0a:e5:b3:ee:d0:79:62:f6:a6:84:4e:b7:f5:79:1d:
                    b8:0c:9a:bb:9e:b8:cb:0b:b2:83:a1:37:65:55:ab:
                    cc:f4:0f:3f:e5:c5:68:44:ea:a6:6c:50:a8:0b:ca:
                    dc:52:8b:b5:2f:4f:c9:af:83:d9:d5:e4:b2:65:f9:
                    e8:c4:f9:e7:43:4e:d3:ed:f7:c5:ba:8f:d4:83:44:
                    11:d5:82:e9:b3:47:97:96:14:c5:31:e9:72:d2:c9:
                    0f:15:29:81:73:cd:ba:dc:d4:ec:f2:a1:87:5c:fe:
                    a3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:7C:B2:F9:5D:B4:D4:A1:E3:60:62:F9:F0:43:8D:65:A9:3C:A5:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/9917fb74-f32d-3244-a63d-665f177752b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.crl

            X509v3 Authority Key Identifier:
                keyid:F0:EC:7E:79:B5:BE:C8:B4:67:5A:7E:05:A2:B3:78:43:7F:14:28:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:1a:d7:4d:ba:fa:e0:7a:3f:29:ca:22:3b:fe:80:e6:08:12:
         e9:ec:b6:54:ce:1d:3e:f6:85:e6:08:84:b6:30:ba:8c:08:ce:
         a9:dc:3a:09:ff:5e:45:21:ea:6e:da:dc:7c:a5:4c:cd:94:06:
         10:37:8e:22:d4:6c:5a:26:73:ac:65:56:b5:f3:af:16:2b:ae:
         dd:83:5b:f4:c3:7f:3a:25:a9:33:18:aa:f0:83:f3:7e:1b:37:
         d4:9a:e4:a5:59:62:c7:fe:14:76:6f:e6:bc:2f:d8:22:0f:e9:
         94:d7:b7:57:fe:70:b9:68:76:a5:d5:56:1f:d9:49:d1:6c:ba:
         26:63:69:80:27:55:b9:0e:0d:f0:5b:a8:d6:79:dc:65:aa:54:
         4d:e1:e1:24:7a:02:1e:e8:76:7f:19:8d:e8:6b:0b:d8:0d:3f:
         c0:ba:3d:7c:a3:07:8e:bc:ca:d0:e4:47:1b:3a:f5:e7:46:e5:
         94:27:2e:0a:86:06:ea:02:ff:05:64:14:89:42:ce:ab:8c:c7:
         c4:ae:c6:fb:d0:f4:f9:c9:c6:5a:06:6c:22:c9:3e:ba:c4:63:
         6b:89:1b:14:43:3e:32:c6:b9:27:a0:5d:0e:0d:79:a0:84:8b:
         72:ad:fa:47:4f:3c:78:09:5b:73:14:72:53:dd:ce:8d:c9:d7:
         fb:93:49:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihNhOph8/kk2qpn4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTZmYjY5NjYtZTZlNy00Y2IyLWJkZWUtOGQyNmU1OWQ5
YTE0MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk
MzlkYTk4OWEtNGRlNS00MzIxLWJjZDYtMzU0ZDgyNjg4OTM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN8j+KewaEu1AUPPDOpn/MSrkh8WKXULk+Eh
11V6ugOJnDdvq9JTvOzSCfzLxDOrZveEVHHhlffLyyxvAY/aFn8l4XTI72Jf2CGo
vRPrugXa3aGxUreoNiaanT31XVnyP0/i/AZlqzYehXolzlcSMo1zOKEy9oVgxkOR
h88lG/mRa5ODoPLtyzl+I8X3X2OVZTuv+5UK5bPu0Hli9qaETrf1eR24DJq7nrjL
C7KDoTdlVavM9A8/5cVoROqmbFCoC8rcUou1L0/Jr4PZ1eSyZfnoxPnnQ07T7ffF
uo/Ug0QR1YLps0eXlhTFMely0skPFSmBc8263NTs8qGHXP6jwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKF8svldtNSh42Bi+fBDjWWpPKXpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lNmZi
Njk2Ni1lNmU3LTRjYjItYmRlZS04ZDI2ZTU5ZDlhMTQvOTkxN2ZiNzQtZjMyZC0z
MjQ0LWE2M2QtNjY1ZjE3Nzc1MmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTZmYjY5NjYtZTZlNy00Y2IyLWJk
ZWUtOGQyNmU1OWQ5YTE0L2U2ZmI2OTY2LWU2ZTctNGNiMi1iZGVlLThkMjZlNTlk
OWExNC5jcmwwHwYDVR0jBBgwFoAU8Ox+ebW+yLRnWn4ForN4Q38UKGwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lNmZiNjk2Ni1lNmU3LTRjYjItYmRlZS04ZDI2
ZTU5ZDlhMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUBdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEMa1026+uB6PynKIjv+gOYIEunstlTOHT72heYIhLYwuowIzqncOgn/
XkUh6m7a3HylTM2UBhA3jiLUbFomc6xlVrXzrxYrrt2DW/TDfzolqTMYqvCD834b
N9Sa5KVZYsf+FHZv5rwv2CIP6ZTXt1f+cLlodqXVVh/ZSdFsuiZjaYAnVbkODfBb
qNZ53GWqVE3h4SR6Ah7odn8ZjehrC9gNP8C6PXyjB468ytDkRxs69edG5ZQnLgqG
BuoC/wVkFIlCzquMx8SuxvvQ9PnJxloGbCLJPrrEY2uJGxRDPjLGuSegXQ4NeaCE
i3Kt+kdPPHgJW3MUclPdzo3J1/uTSVQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:44:29 2025 by rpki-client