Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/415caf1a-8dde-3199-a803-1a4b2ffdbb10.roa
File:                     415caf1a-8dde-3199-a803-1a4b2ffdbb10.roa (raw, json)
Hash identifier:          QHYqliBLPrjWYPKqgYO9e6kSwENWA5yRsg0PZLiaxgM=
Subject key identifier:   C4:86:30:02:F4:0F:A7:4F:7C:27:1A:97:44:55:8C:A8:7C:36:37:76
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E31CF10A5CE3FD1EB8FC41C00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/415caf1a-8dde-3199-a803-1a4b2ffdbb10.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     30036
IP address blocks:        97.64.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:10:a5:ce:3f:d1:eb:8f:c4:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=214c0e50-b01a-4036-a1a5-4bda3e6be472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b0:71:98:b5:e9:c2:ac:b2:6c:5c:8b:0e:d1:
                    81:1e:95:44:7e:f5:87:e9:68:7d:32:44:c0:f3:c8:
                    8d:9c:c8:53:71:bc:b5:91:cf:d8:0a:5b:92:10:98:
                    0a:f1:1a:b0:1b:3c:a5:46:02:71:b4:00:eb:ab:ac:
                    13:cd:55:93:ef:52:cd:69:26:2d:17:73:52:ac:e6:
                    a3:57:11:88:f3:35:eb:4f:25:2d:6a:a6:8d:5f:cb:
                    26:09:f1:86:33:de:f5:51:59:16:09:ca:ff:f6:4a:
                    2e:fa:ec:76:70:fa:ee:b6:d6:3b:ef:3b:6e:41:13:
                    d4:79:c2:d4:4a:3c:27:48:bb:49:24:bf:68:93:db:
                    98:5d:06:17:c8:70:7b:14:6c:0d:a0:82:49:91:cb:
                    19:b8:81:dc:c9:d6:3c:71:c8:3a:74:3d:e6:61:2d:
                    6b:78:03:7e:15:45:d1:19:17:ed:40:6f:aa:78:61:
                    75:7a:5d:23:4d:8b:85:0e:6f:46:99:7c:39:81:6d:
                    32:93:6b:fe:d5:14:31:61:a4:16:7a:f4:15:7b:8b:
                    81:b4:90:b7:bf:32:a9:60:dc:b1:91:eb:4a:8b:03:
                    58:60:22:0b:4d:7a:94:86:5e:c7:22:f7:a2:40:45:
                    26:fe:24:52:f4:25:aa:ae:f7:f5:c5:d2:a4:61:c4:
                    40:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:86:30:02:F4:0F:A7:4F:7C:27:1A:97:44:55:8C:A8:7C:36:37:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/415caf1a-8dde-3199-a803-1a4b2ffdbb10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:5b:4e:c3:b5:07:50:86:3d:5b:7b:57:98:ea:41:6c:3e:0c:
         19:ce:53:5e:0f:aa:95:6d:17:40:86:01:9f:1b:7f:87:88:9e:
         a0:65:d4:47:5d:bb:2b:dc:e2:ee:ba:e7:7a:45:47:d0:74:8e:
         ba:a7:fe:63:c5:a8:17:66:aa:cb:32:28:9e:cb:6e:b4:4b:4c:
         e4:f7:9e:9e:e6:10:a4:33:33:b8:1c:4d:08:ab:fb:47:ec:29:
         ac:ab:14:72:c6:b7:d4:96:ba:91:09:7f:ab:0a:ed:14:78:a6:
         ea:70:e8:53:23:0c:a0:a5:d8:eb:ce:89:8c:7c:b2:c5:71:a9:
         be:ed:2b:5b:af:96:5e:d2:c3:e6:5e:e9:da:62:12:b8:54:d6:
         9c:86:a6:75:58:6c:a0:38:d3:8b:07:ac:0a:67:c0:1e:85:8b:
         22:c2:15:9d:e1:7c:3d:62:02:ca:9f:d1:02:62:fb:ad:ff:67:
         4b:cc:de:da:65:0f:5e:cc:e8:99:dc:b2:d7:2a:b1:2d:fc:7a:
         1b:89:c3:df:af:47:60:8d:fa:42:4b:9d:e8:ad:ea:e5:d4:e2:
         ea:18:db:78:ac:42:ea:62:ce:cb:d5:36:71:8b:98:e8:7b:de:
         67:da:61:b3:43:31:a2:2f:cb:10:35:66:01:4b:6a:51:a1:af:
         6c:5c:b8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 03:17:56 2026 by rpki-client