Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/685d215a-0b12-373a-bc79-f064fceb279a.roa
File:                     685d215a-0b12-373a-bc79-f064fceb279a.roa (raw, json)
Hash identifier:          F5lMIDfdsiA81yiPWAwnY4NIah3kmV4tr9afZfDg3pY=
Subject key identifier:   36:D0:49:D2:7C:08:03:A1:D9:1D:8A:9C:A1:A5:D3:39:EC:62:DC:57
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584ED432595509DF0BD9B1E00200
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/685d215a-0b12-373a-bc79-f064fceb279a.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     30036
IP address blocks:        97.64.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:32:59:55:09:df:0b:d9:b1:e0:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=c70aee75-29dc-4f66-ac09-8378ccfea0ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:05:a9:03:a6:e4:6c:22:c4:50:cb:fd:6f:75:
                    7d:5d:95:77:8f:6a:41:58:91:87:86:a0:e1:c9:f9:
                    d2:0c:69:05:5f:14:5a:87:61:32:b3:a3:0b:df:df:
                    7d:1f:3a:cb:a9:8f:8b:2c:1f:b5:8d:d3:74:17:04:
                    44:cc:f7:e1:20:9b:1a:83:79:5a:09:4a:51:6d:65:
                    06:a2:32:5e:30:25:fc:6e:ba:a7:2b:c4:09:4c:90:
                    41:12:0f:43:07:14:39:ec:62:3e:0f:98:e9:4b:e3:
                    d4:2c:b8:9c:46:82:6e:36:39:4f:b8:b2:5c:1f:e2:
                    09:72:02:df:26:91:e6:66:02:8a:87:45:c4:91:a8:
                    c7:31:50:a5:37:04:f4:2b:e7:b5:91:2c:7c:db:57:
                    3b:1e:d4:50:48:6f:72:2b:66:73:f5:80:04:03:6f:
                    de:d2:89:b9:cc:18:9d:6b:f2:83:eb:db:b4:07:89:
                    7c:9d:c7:0e:01:cd:33:ad:8a:c7:45:9b:59:e4:7a:
                    0e:36:66:bb:96:b9:4c:46:2a:1c:28:ec:ab:e3:6d:
                    8e:49:29:31:b4:83:a4:a6:b5:73:53:ee:57:bd:8f:
                    d1:fb:85:9e:a1:4e:11:b2:2d:5f:11:15:c6:27:3f:
                    06:d3:d2:27:7c:d0:32:95:37:09:45:b5:1b:ec:f4:
                    dc:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D0:49:D2:7C:08:03:A1:D9:1D:8A:9C:A1:A5:D3:39:EC:62:DC:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/685d215a-0b12-373a-bc79-f064fceb279a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:f7:1f:9e:a1:fa:f0:ab:6d:cb:77:e1:28:a1:a2:d0:4c:c3:
         d7:3c:1d:69:bd:55:5a:9f:de:e5:45:5d:bc:18:4e:93:e0:5a:
         51:dc:1b:59:ab:d3:f3:01:f2:75:d4:af:a3:38:ee:a3:de:06:
         52:c1:29:9c:6b:30:53:57:67:1f:5d:6b:36:ea:4e:fb:d9:5b:
         59:b0:8b:64:1c:7d:8f:0e:c5:3d:f7:29:04:6a:4d:f0:9e:b1:
         b6:db:92:3d:25:bd:ed:08:66:22:75:9d:a1:f0:43:b0:b8:a6:
         bf:46:1e:4a:75:1d:24:df:df:31:d1:8c:53:dc:65:4e:2e:a6:
         09:de:46:3a:8b:44:3e:a1:f7:44:1d:33:78:72:fb:cd:1f:11:
         a7:fb:eb:4b:19:7b:3a:52:5d:ef:4b:a0:c0:92:0e:13:63:9e:
         60:db:ec:43:45:c8:83:07:3a:a0:32:bb:38:4a:05:a7:fb:28:
         0c:c7:1d:48:22:c4:20:3e:39:24:81:68:95:e0:c7:a2:3f:11:
         96:1d:68:c7:2b:9b:84:63:49:73:79:7a:38:96:72:8e:39:30:
         bb:c8:41:66:a6:21:8e:f7:da:90:38:fe:33:da:5e:80:42:94:
         dc:7d:25:7e:81:cf:1e:70:fa:63:2a:fb:ae:21:fe:62:e7:05:
         f5:86:82:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:30:00 2026 by rpki-client