Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0caebb32-9002-34a0-8634-5eddbef107f5.roa
File:                     0caebb32-9002-34a0-8634-5eddbef107f5.roa (raw, json)
Hash identifier:          aUf1l2fRlwX4NCh35oL4zTjH1jupc8eliEu5OLJGyOI=
Subject key identifier:   8A:54:2C:DC:E3:EC:7D:4A:1B:BD:B7:2F:EA:09:9A:11:84:B4:39:C3
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B004BEB74B122163CED24ED00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0caebb32-9002-34a0-8634-5eddbef107f5.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     30036
IP address blocks:        97.64.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4b:eb:74:b1:22:16:3c:ed:24:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=5389c347-f8c3-4acf-b8c6-29541f9343cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ff:15:43:b0:2b:fd:19:f0:ef:21:0d:6e:86:
                    c2:27:f1:78:e6:cb:d4:e0:35:5c:40:f9:6e:c4:70:
                    70:33:0b:67:8c:bc:70:01:54:8c:27:ae:d1:d2:3c:
                    87:24:91:32:2a:c0:c2:4d:71:9e:be:d2:ec:fb:0b:
                    ab:b6:0a:00:66:cc:96:f4:b9:ed:1d:a9:6d:0c:f8:
                    36:e7:a9:08:da:c3:77:34:37:e6:2f:95:2b:15:5d:
                    c6:b4:35:5c:fe:19:22:0f:aa:24:3a:83:c9:fd:88:
                    3b:4a:57:b4:9f:f2:f5:5d:9f:2e:84:1f:98:5b:31:
                    5e:94:a2:d9:36:9e:6f:05:f5:e5:9f:32:9c:86:d9:
                    f0:4b:7f:26:5f:9c:26:6c:e2:b7:8b:2c:a2:ee:46:
                    be:69:fd:2b:01:90:ed:b5:ad:bc:1b:ff:de:fc:6e:
                    3b:ea:f7:ef:f4:e7:d4:51:83:29:30:d2:1e:9f:08:
                    4a:a7:54:b6:92:ca:1f:94:e9:93:eb:d0:24:45:eb:
                    af:77:83:2c:3e:44:86:5f:0c:55:24:40:85:0a:dd:
                    27:dc:84:6b:08:8a:c1:f6:5f:8b:8d:74:a8:eb:b3:
                    8e:a0:f6:ae:b0:49:12:f3:40:57:42:ff:a0:2a:e0:
                    19:c1:50:51:40:24:50:3c:ef:b3:98:7e:3c:bc:6d:
                    64:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:54:2C:DC:E3:EC:7D:4A:1B:BD:B7:2F:EA:09:9A:11:84:B4:39:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0caebb32-9002-34a0-8634-5eddbef107f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:89:97:65:35:45:5d:3c:d8:ee:09:bc:b6:3f:7e:03:e0:ed:
         b4:c3:07:0d:2d:1d:e5:f2:07:18:af:90:98:40:a7:29:ac:64:
         d7:ed:d7:bb:5b:c4:36:76:fd:54:95:f1:67:b5:4c:81:42:3d:
         8c:5f:3a:b1:e9:01:0d:ed:20:7d:3b:26:20:e2:31:44:9f:53:
         cc:29:4d:99:f6:08:0c:1a:c5:ed:46:d0:5b:b9:02:d6:09:43:
         f9:e3:1f:50:ea:0f:26:63:5f:5d:f7:0b:0b:0e:08:34:db:c9:
         82:85:27:e8:c9:12:19:68:14:44:80:5c:8f:2d:57:98:06:12:
         35:d0:bc:89:7c:4c:f3:74:44:5f:9e:42:71:29:c8:3c:bc:77:
         69:ac:d1:e1:22:04:30:12:1b:28:b6:3f:e0:56:96:14:55:d6:
         c6:5a:3e:7e:39:57:56:29:c8:f9:0f:9d:e6:29:f7:3a:20:f6:
         5a:18:16:c5:d8:b5:b5:53:84:14:d1:24:64:2d:a9:85:cc:65:
         27:84:23:c2:97:0b:75:e5:d0:c1:6b:12:86:d6:13:3d:71:a7:
         fa:34:49:36:1f:70:ec:74:b2:aa:e4:bd:60:e2:fd:46:da:c1:
         21:21:a4:65:23:5e:c4:d0:08:40:43:a7:4f:b9:09:0f:23:a0:
         df:61:aa:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS+t0sSIWPO0k7QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk
NTM4OWMzNDctZjhjMy00YWNmLWI4YzYtMjk1NDFmOTM0M2NmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/8VQ7Ar/Rnw7yENbobCJ/F45svU4DVcQPlu
xHBwMwtnjLxwAVSMJ67R0jyHJJEyKsDCTXGevtLs+wurtgoAZsyW9LntHaltDPg2
56kI2sN3NDfmL5UrFV3GtDVc/hkiD6okOoPJ/Yg7Sle0n/L1XZ8uhB+YWzFelKLZ
Np5vBfXlnzKchtnwS38mX5wmbOK3iyyi7ka+af0rAZDtta28G//e/G476vfv9OfU
UYMpMNIenwhKp1S2ksoflOmT69AkReuvd4MsPkSGXwxVJECFCt0n3IRrCIrB9l+L
jXSo67OOoPausEkS80BXQv+gKuAZwVBRQCRQPO+zmH48vG1k5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIpULNzj7H1KG723L+oJmhGEtDnDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMGNhZWJiMzItOTAwMi0z
NGEwLTg2MzQtNWVkZGJlZjEwN2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUC9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABKJl2U1RV082O4JvLY/fgPg7bTDBw0tHeXyBxivkJhApymsZNft17tb
xDZ2/VSV8We1TIFCPYxfOrHpAQ3tIH07JiDiMUSfU8wpTZn2CAwaxe1G0Fu5AtYJ
Q/njH1DqDyZjX133CwsOCDTbyYKFJ+jJEhloFESAXI8tV5gGEjXQvIl8TPN0RF+e
QnEpyDy8d2ms0eEiBDASGyi2P+BWlhRV1sZaPn45V1YpyPkPneYp9zog9loYFsXY
tbVThBTRJGQtqYXMZSeEI8KXC3Xl0MFrEobWEz1xp/o0STYfcOx0sqrkvWDi/Uba
wSEhpGUjXsTQCEBDp0+5CQ8joN9hqis=
-----END CERTIFICATE-----
Generated at Sat Oct 11 07:16:28 2025 by rpki-client