Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/63702a98-5f77-3380-8f53-d98e5b334bd3.roa
File:                     63702a98-5f77-3380-8f53-d98e5b334bd3.roa (raw, json)
Hash identifier:          jSkDydawxwfS6qkbShPCO8VnNRgx7MUeNTqPkc71QwI=
Subject key identifier:   CF:75:CF:E5:05:7A:D9:A9:52:C0:2D:B4:FE:E1:51:6E:6F:7C:A0:38
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EA798A33650CC11121E86AEC0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/63702a98-5f77-3380-8f53-d98e5b334bd3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        97.64.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:a3:36:50:cc:11:12:1e:86:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=51034a05-dc6f-46af-ab8c-89934e5dc09c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3e:c9:68:1a:9f:ca:33:60:aa:ef:ce:56:7e:
                    65:c5:ea:6c:c7:c7:8f:70:e9:3b:21:6f:6a:f9:7c:
                    84:43:05:9f:fe:9e:ee:30:75:1e:f4:51:2c:4e:be:
                    04:86:e0:b5:3d:47:19:bc:d5:ec:7b:73:28:86:40:
                    aa:28:18:5d:f1:83:e1:db:ac:c8:7a:d2:d9:a2:e6:
                    db:fe:1e:23:6c:f7:eb:e7:4a:47:3f:69:d0:f7:2b:
                    cc:7a:14:b8:69:62:2e:a2:1a:b8:81:b9:48:d0:ca:
                    ec:1d:09:f7:43:44:ed:fe:a1:c1:25:a3:0b:62:28:
                    2c:60:24:e2:78:c1:f0:68:b7:ef:eb:06:82:c6:47:
                    b4:ec:33:91:74:41:10:0d:49:5c:91:fd:42:91:96:
                    74:6e:4d:3b:8b:9e:df:0f:2c:9c:51:8b:7c:b9:ad:
                    f8:8e:fb:65:b2:a4:9f:ce:f4:bb:41:ac:8f:02:e5:
                    45:4b:d3:45:77:e6:7c:a4:c5:bf:cd:fd:20:42:d3:
                    96:67:6c:0a:f3:92:79:d4:c2:c2:d6:4b:35:bd:4b:
                    72:c4:f0:f7:44:ac:5b:c8:65:ee:d0:55:a3:79:fc:
                    c3:7f:5c:2e:5e:03:f0:25:97:a2:09:d1:f5:35:26:
                    25:d2:c8:e6:c0:1c:04:63:ab:e5:7d:92:69:08:60:
                    64:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:75:CF:E5:05:7A:D9:A9:52:C0:2D:B4:FE:E1:51:6E:6F:7C:A0:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/63702a98-5f77-3380-8f53-d98e5b334bd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:78:ea:c3:d1:70:9b:32:04:da:7b:66:40:e0:9c:ea:f2:f7:
         9a:dd:51:ce:0e:74:18:09:15:b8:8d:a6:10:19:2a:7a:21:18:
         20:0a:9a:69:f3:67:6d:6a:3c:1b:cc:77:22:a0:65:d0:ac:8b:
         f4:68:94:6c:3b:c2:bc:7b:de:0e:da:1a:57:89:9c:63:28:ab:
         ac:84:87:76:8b:ab:4b:2e:9d:76:97:e4:42:d3:2a:5f:fc:6d:
         b6:c7:18:f6:b3:8f:24:49:f6:e9:6a:4b:e1:21:9b:5c:1a:e8:
         e1:49:2d:33:7a:22:30:76:74:45:76:8c:2b:67:5a:12:fb:22:
         26:cc:a5:dc:23:f3:4f:eb:27:79:08:08:02:da:46:ed:91:cb:
         dd:8a:83:2c:59:b5:d8:64:cf:ea:40:cb:b2:b9:6f:29:90:c7:
         b6:05:fe:cc:d1:bf:64:e5:48:9a:f7:de:44:f8:97:19:5b:ce:
         d9:ff:f3:90:c2:34:e5:44:df:ec:37:f6:3d:03:80:7f:82:f5:
         53:2a:d7:59:69:fa:65:b4:fe:83:14:6b:16:29:d7:a0:53:b2:
         48:41:e4:00:22:26:a2:cd:b9:80:f3:f3:59:9b:9e:d2:ac:b8:
         98:67:c6:a4:af:93:73:af:2d:fe:a3:9d:7d:bc:af:c4:2a:bc:
         62:5c:0c:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmKM2UMwREh6GrsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NTEwMzRhMDUtZGM2Zi00NmFmLWFiOGMtODk5MzRlNWRjMDljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoD7JaBqfyjNgqu/OVn5lxepsx8ePcOk7IW9q
+XyEQwWf/p7uMHUe9FEsTr4EhuC1PUcZvNXse3MohkCqKBhd8YPh26zIetLZoubb
/h4jbPfr50pHP2nQ9yvMehS4aWIuohq4gblI0MrsHQn3Q0Tt/qHBJaMLYigsYCTi
eMHwaLfv6waCxke07DORdEEQDUlckf1CkZZ0bk07i57fDyycUYt8ua34jvtlsqSf
zvS7QayPAuVFS9NFd+Z8pMW/zf0gQtOWZ2wK85J51MLC1ks1vUtyxPD3RKxbyGXu
0FWjefzDf1wuXgPwJZeiCdH1NSYl0sjmwBwEY6vlfZJpCGBk8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM91z+UFetmpUsAttP7hUW5vfKA4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNjM3MDJhOTgtNWY3Ny0z
MzgwLThmNTMtZDk4ZTViMzM0YmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUD/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJx46sPRcJsyBNp7ZkDgnOry95rdUc4OdBgJFbiNphAZKnohGCAKmmnz
Z21qPBvMdyKgZdCsi/RolGw7wrx73g7aGleJnGMoq6yEh3aLq0sunXaX5ELTKl/8
bbbHGPazjyRJ9ulqS+Ehm1wa6OFJLTN6IjB2dEV2jCtnWhL7IibMpdwj80/rJ3kI
CALaRu2Ry92KgyxZtdhkz+pAy7K5bymQx7YF/szRv2TlSJr33kT4lxlbztn/85DC
NOVE3+w39j0DgH+C9VMq11lp+mW0/oMUaxYp16BTskhB5AAiJqLNuYDz81mbntKs
uJhnxqSvk3OvLf6jnX28r8QqvGJcDE8=
-----END CERTIFICATE-----
Generated at Fri Aug 21 01:46:45 2026 by rpki-client