Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a7d464d-b0ad-35e2-9902-987695efdf23.roa
File:                     4a7d464d-b0ad-35e2-9902-987695efdf23.roa (raw, json)
Hash identifier:          bbMW4T04yelj/kTX5At3K3G0h97EB//vSmbHH4SiyLE=
Subject key identifier:   9E:B6:A3:AC:C3:B3:C9:71:95:84:49:42:4A:2F:14:BA:F4:92:7B:4D
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E31CF02553BD4B48611FF4280
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a7d464d-b0ad-35e2-9902-987695efdf23.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     30036
IP address blocks:        97.64.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:02:55:3b:d4:b4:86:11:ff:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=c607da5e-7efe-4507-84c5-fcfbc6374ef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9d:03:86:36:fd:65:02:0e:87:8d:72:ae:20:
                    e3:d2:61:e5:27:55:8e:bd:80:d3:c8:10:2e:68:3d:
                    c8:74:7e:2f:ba:74:30:f0:98:87:37:56:0f:7f:be:
                    30:45:78:11:5c:62:4e:7a:88:e0:45:ea:fc:95:e8:
                    e7:dd:b0:26:9a:d8:36:27:ee:58:53:d7:3a:a0:dc:
                    51:e9:56:e2:c9:8f:88:5b:34:7f:3e:8c:8b:fc:c2:
                    d9:7b:cc:88:e5:fc:22:98:b1:28:e2:4a:fc:45:6f:
                    ca:ad:de:4f:b0:28:f0:bc:17:14:4a:db:74:42:0c:
                    57:f9:17:b0:f6:24:45:6d:32:38:55:fc:79:7d:c0:
                    db:b6:40:d3:a1:9b:79:e8:4a:8c:4d:75:20:4b:d1:
                    1e:69:89:2b:3d:0e:7e:95:79:a4:7c:cf:6b:e0:b0:
                    dc:88:64:9f:c9:94:94:a2:d9:b1:fb:07:df:35:99:
                    10:a1:b4:9a:7f:f8:e8:ba:fb:ef:08:04:a9:01:a0:
                    1f:6e:bf:1a:b8:f3:c7:89:03:ed:8f:79:32:ee:10:
                    59:ed:9f:52:c6:02:6b:38:a4:68:30:0b:d1:fd:0a:
                    15:14:c9:a8:20:ff:ca:3d:c1:e4:cc:a2:58:fe:3a:
                    0d:18:53:54:e2:5f:28:13:8a:af:5a:08:f9:ca:ba:
                    76:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B6:A3:AC:C3:B3:C9:71:95:84:49:42:4A:2F:14:BA:F4:92:7B:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a7d464d-b0ad-35e2-9902-987695efdf23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:b2:82:e9:3b:54:37:45:b4:7f:29:2a:4d:03:26:cc:62:57:
         c3:ea:fb:bf:94:ad:d8:22:a5:5c:63:be:ed:94:9b:41:60:53:
         f0:a5:64:dc:99:cf:68:33:34:7e:4e:32:bd:59:33:d6:76:50:
         06:c9:5a:59:25:42:09:e4:5b:5a:fd:c9:78:86:f3:08:04:c6:
         d5:29:00:fd:b3:90:bf:5c:c0:0d:0e:d4:33:03:85:8d:a1:c4:
         74:dc:6f:59:59:cb:05:7c:22:a6:25:f8:89:34:1d:df:18:0a:
         e8:73:c9:85:01:fb:fd:7f:8a:eb:91:ea:6a:73:f7:e5:9c:92:
         29:1b:bc:a4:af:5b:17:51:c7:06:14:af:96:a7:9e:45:78:29:
         2c:31:4f:81:ca:04:52:bb:bb:d8:cf:c1:8c:97:30:a5:c1:18:
         f9:1d:ee:ce:61:c0:7f:cb:14:96:a8:49:e9:7f:8d:3c:1d:15:
         34:b1:4d:0e:02:ed:b9:d9:bf:30:8a:e1:d0:03:a0:19:a7:a1:
         1e:2d:11:4d:df:c7:1a:72:c5:13:2c:97:2f:9c:db:1b:b7:4a:
         d6:2d:3a:ad:a9:19:63:a2:d7:89:7c:ee:6a:b9:98:99:79:6a:
         0d:0e:20:4f:5f:71:34:09:91:61:a1:15:da:11:d2:4e:0b:b3:
         83:1f:fd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 03:19:25 2026 by rpki-client