Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/489befd5-0a00-341e-967c-ec49a0a2b329.roa
File:                     489befd5-0a00-341e-967c-ec49a0a2b329.roa (raw, json)
Hash identifier:          osF2+hAhAtEVnJWWCKkZD5+Yjb14uS86dtsl0uVHtog=
Subject key identifier:   54:CF:4E:C1:DE:E0:C4:41:1A:2E:68:3D:3A:0D:14:45:FC:68:F0:A3
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584ED43258411B8D4B9270AD8440
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/489befd5-0a00-341e-967c-ec49a0a2b329.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     30036
IP address blocks:        97.64.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:32:58:41:1b:8d:4b:92:70:ad:84:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=157f9184-6d7e-477a-b747-f23b84204194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:83:d0:b0:54:0d:98:4e:d8:d2:74:19:8c:69:
                    38:e1:47:2d:fb:67:f5:8e:9d:54:bb:15:73:ca:c2:
                    ea:13:43:33:75:61:98:49:1e:c5:4f:d8:5a:7d:60:
                    e9:60:00:73:41:fd:4c:d5:6f:5e:06:08:cb:c8:24:
                    9a:c7:a1:2f:d9:da:dc:bc:86:4b:90:33:30:74:fb:
                    af:01:be:94:6d:e8:f1:9e:f5:3e:a0:23:ee:2d:f3:
                    af:3e:67:c6:ee:2b:a7:02:17:2d:27:7c:c3:e7:46:
                    94:fa:01:95:14:58:53:f2:f0:a3:6d:99:cf:76:5b:
                    02:20:a6:b5:61:1d:ab:6d:5e:f7:37:3f:21:c6:9d:
                    36:86:c9:e3:a6:d9:9e:9d:31:02:e3:24:ea:b9:93:
                    a7:93:d8:d6:5c:6e:aa:a9:45:b4:92:ae:cd:7e:bf:
                    9c:f2:ed:e3:2c:fd:63:da:29:43:da:0b:99:8b:a5:
                    1b:0f:0e:55:43:05:e2:48:13:98:70:e6:b9:d5:84:
                    3f:53:1e:e0:cf:27:ff:64:72:2a:46:dc:4a:a0:a8:
                    eb:38:22:88:5c:33:64:8f:55:04:77:79:1a:22:af:
                    f4:29:bc:c6:61:30:ae:16:e4:55:01:09:6a:e0:bf:
                    a3:1c:aa:71:ea:9c:7e:05:42:4e:55:19:bf:97:61:
                    6d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:CF:4E:C1:DE:E0:C4:41:1A:2E:68:3D:3A:0D:14:45:FC:68:F0:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/489befd5-0a00-341e-967c-ec49a0a2b329.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:37:28:dc:34:90:8f:b3:ba:f6:93:b1:64:38:24:f0:8a:07:
         fb:8b:37:64:5d:9b:c1:ea:76:5e:a1:ae:8a:e7:23:49:68:cc:
         f3:de:1e:1b:d1:58:1f:39:dc:78:9e:c5:e8:72:21:d0:13:b8:
         18:41:b9:e4:bd:1d:42:a4:38:40:25:5f:bf:b2:28:6d:95:e9:
         9c:37:e1:6a:b9:69:fd:86:66:fb:cc:37:ee:7e:0e:e8:d8:0f:
         90:e6:b7:e7:12:a9:b5:5b:3a:35:20:5b:b3:05:5b:c5:72:cf:
         6d:87:f5:94:ac:ed:7f:c8:c5:a2:5d:9b:9b:85:ba:8b:71:f3:
         32:c5:de:69:55:1e:27:c1:73:40:04:67:43:7e:24:95:b2:71:
         eb:61:f9:1d:21:4c:aa:b4:52:42:d9:ee:c0:7b:21:d0:96:28:
         cd:18:cb:a8:ef:65:31:7d:56:51:ff:47:54:c5:af:af:35:2a:
         34:d2:13:73:af:f2:ce:77:0b:bf:cf:31:95:61:32:89:33:23:
         02:bb:aa:8c:f9:e3:d2:aa:86:31:5d:31:9d:ae:08:9e:ee:5a:
         76:93:d6:21:e4:af:1c:7d:21:2c:64:4b:ed:2c:67:0d:fd:b2:
         89:89:a5:bd:db:4a:73:07:c0:3f:78:f5:52:5a:c4:16:d8:20:
         ad:d9:a1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:45:15 2026 by rpki-client