Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bce002e7-9cf5-3be4-9754-4bb2d08cb3fc.roa
File:                     bce002e7-9cf5-3be4-9754-4bb2d08cb3fc.roa (raw, json)
Hash identifier:          sPEVkJh9TGj8KLkGPVoX1nHqMEB6MCDon9+//9nr9qk=
Subject key identifier:   B1:0E:01:1D:A6:58:41:C6:B0:4C:DE:1E:78:17:82:83:3C:04:89:0B
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849ABB497950FF5F71A50BAD000
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bce002e7-9cf5-3be4-9754-4bb2d08cb3fc.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     30036
IP address blocks:        97.64.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:97:95:0f:f5:f7:1a:50:ba:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=04fecd4b-be33-4b68-a052-e67d507fd75c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cb:b8:27:8d:58:18:b4:9f:77:2a:37:27:96:
                    99:c4:d3:f4:3c:a1:99:58:96:72:ca:26:70:05:1e:
                    aa:f2:10:57:86:4e:fa:cd:b1:4d:17:ef:59:46:6b:
                    82:4d:af:35:a0:37:0d:e8:cd:7e:e0:88:e8:73:90:
                    b6:ae:ac:46:44:6b:01:b4:9a:e6:b7:30:98:8c:38:
                    22:d0:9c:21:45:b4:8b:a1:62:01:b3:53:44:9c:6c:
                    ca:36:9f:55:d7:c6:5f:bd:5d:83:0e:35:23:1a:18:
                    1a:63:1d:1c:66:8b:c3:44:50:cf:c4:62:4d:91:7d:
                    97:cc:95:fb:eb:a2:11:54:b8:87:a7:30:94:99:98:
                    51:0e:5f:01:ef:a3:5a:6b:17:cd:39:db:28:4f:f0:
                    5f:23:a1:0d:a8:61:dc:4b:36:ba:4a:a1:ce:e6:7d:
                    a6:2d:32:68:38:c0:7e:d5:d1:a1:f0:55:1a:33:1b:
                    ad:cf:57:28:57:49:60:ef:2f:fe:b7:a0:1d:1f:52:
                    a3:d7:88:64:cc:6b:de:0f:5c:40:ef:c9:ec:ef:ef:
                    e3:a0:c9:f1:58:b2:70:82:6f:e2:92:53:84:ae:cd:
                    1c:8f:8a:4e:8f:a5:37:ef:c6:4d:11:1f:5e:94:e6:
                    76:04:90:76:c5:c0:bc:46:a9:b6:4e:16:71:17:e1:
                    11:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:0E:01:1D:A6:58:41:C6:B0:4C:DE:1E:78:17:82:83:3C:04:89:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bce002e7-9cf5-3be4-9754-4bb2d08cb3fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:4b:95:ab:86:5d:eb:06:1e:88:22:61:39:ee:7d:54:2f:aa:
         01:54:df:78:f0:cf:e5:4f:63:ed:e3:2e:f0:8e:13:af:80:af:
         ea:ca:fb:75:ef:33:14:43:39:66:c3:a6:92:42:c9:e3:b5:0e:
         06:f2:49:5c:8a:5f:2c:60:69:b0:03:56:07:fa:c3:b2:ce:f4:
         ff:01:60:f7:68:3e:5c:2f:f1:71:e9:ce:66:3c:ac:07:15:8b:
         9e:f8:0e:0e:10:92:89:9d:21:20:50:f7:41:df:81:f1:5e:7d:
         46:3b:30:e1:ff:19:00:40:cc:e6:83:5f:95:b9:44:76:41:95:
         be:42:d9:f1:3d:41:5d:02:5d:3d:4d:33:be:b9:ca:6d:3c:98:
         fb:45:11:4f:41:30:6d:80:79:d4:ec:8e:8c:24:02:92:9b:b8:
         7b:99:e6:2c:83:53:bb:74:fb:3b:91:d4:df:59:6d:7c:f8:46:
         76:5d:28:7f:6a:d3:c5:0f:71:5e:f4:72:1c:ec:4a:87:ca:78:
         e1:3b:f4:f9:16:af:dc:04:33:a7:f5:0e:e7:e7:c2:85:07:01:
         53:35:89:f8:1b:c2:e9:3b:7b:2f:93:fa:d0:b4:c6:54:f4:0d:
         de:d1:52:31:36:33:92:f4:c4:e0:f5:2e:fc:17:ab:0a:95:eb:
         d3:fc:84:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:59:36 2025 by rpki-client