Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3de56c50-0df9-3d5c-8242-8e3e9c64e9f3.roa
File:                     3de56c50-0df9-3d5c-8242-8e3e9c64e9f3.roa (raw, json)
Hash identifier:          fuEDwOGmXEcZZtaieklTo1XDkK9DGp987cpuzZDT0m4=
Subject key identifier:   78:85:40:C1:35:44:40:AE:33:4B:2F:3A:78:76:79:75:E8:F7:B9:DC
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E3601807A256B5FA84DDFB900
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3de56c50-0df9-3d5c-8242-8e3e9c64e9f3.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     30036
IP address blocks:        97.64.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:01:80:7a:25:6b:5f:a8:4d:df:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=e59d4fa2-6dfb-4e86-8286-1c7a1b04071d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c7:c0:e8:0e:6a:bc:80:0d:70:7f:44:25:1a:
                    2b:12:e4:2a:99:dc:75:3b:f7:6a:9d:85:52:06:c1:
                    89:8a:46:53:a7:a0:09:55:a5:c4:1c:0b:55:57:1b:
                    21:30:ba:37:66:50:43:77:48:b6:4d:2f:d4:a3:0d:
                    54:04:e1:87:56:03:09:17:a4:8b:fe:9f:b3:f8:c4:
                    88:2c:20:18:36:88:a7:f4:e6:86:1a:87:a0:38:7e:
                    67:6e:5d:ec:a5:d8:64:8c:06:07:0d:54:1d:6d:41:
                    a9:3b:c1:29:d4:a3:13:f2:15:ac:08:fc:24:da:2a:
                    51:9e:92:88:05:be:7e:56:d0:16:07:d0:65:4c:48:
                    be:80:e2:b5:0c:a5:be:ff:88:a7:4e:10:84:53:45:
                    7d:93:ea:b3:d5:13:17:49:bf:8e:be:d5:42:a5:6f:
                    81:7e:a5:cd:68:d7:24:32:b1:ee:cc:12:e8:61:75:
                    32:1e:ad:0d:06:49:cc:c2:2b:e7:47:3e:b1:8d:f4:
                    5d:4f:ce:ce:cf:90:24:78:9d:cc:d9:1b:70:19:f3:
                    79:5a:ce:e9:fe:e2:ff:c4:0f:47:1c:71:33:22:f9:
                    f2:81:37:c5:d3:8e:be:6e:36:62:59:32:4c:ae:d1:
                    8a:73:f1:6e:cd:cc:6f:de:80:7b:6b:cb:fa:d4:e9:
                    07:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:85:40:C1:35:44:40:AE:33:4B:2F:3A:78:76:79:75:E8:F7:B9:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3de56c50-0df9-3d5c-8242-8e3e9c64e9f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:bc:6e:27:51:c7:b6:64:ee:24:02:39:2a:04:35:37:63:32:
         b5:a1:1b:0c:58:01:31:b0:5f:f0:ef:67:f3:a0:08:ce:37:1f:
         24:4a:f2:3c:f4:17:e1:ef:4a:cd:b9:b6:87:d7:4f:d9:9a:19:
         01:cc:0f:4c:a4:b5:68:14:1a:34:58:50:03:94:9e:95:11:d0:
         29:d2:fb:ef:ef:f7:58:36:b4:ee:d9:15:b2:8f:34:48:ed:e9:
         ed:d5:d3:ea:d5:12:0d:3b:d7:d1:39:7a:c3:48:47:20:f8:fd:
         ac:59:63:61:81:af:de:69:d3:da:25:d8:be:99:8e:77:51:76:
         7c:ce:9c:3f:c8:b8:3e:dd:f4:c8:d1:c9:1b:8a:85:79:1e:8f:
         cd:92:80:cf:e7:3c:8b:03:86:3b:53:b1:c7:4d:3d:0f:07:eb:
         a2:56:32:31:98:ad:8a:ee:fe:0e:f9:ec:89:6d:47:e5:ae:32:
         8b:18:c2:59:05:b6:9e:69:c3:86:a1:55:af:e7:c3:0f:cf:9a:
         52:69:72:01:70:fd:a8:b6:30:2e:6c:9e:18:c4:09:3c:67:e2:
         78:93:2d:99:94:26:4d:99:72:95:aa:7c:99:92:fe:20:8a:84:
         66:a8:fd:60:08:59:7d:18:14:81:08:95:aa:76:3f:f1:90:dd:
         71:90:3e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 03:18:08 2026 by rpki-client