Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6db15583-6cac-3369-b28e-ce81dc2aa779.roa
File:                     6db15583-6cac-3369-b28e-ce81dc2aa779.roa (raw, json)
Hash identifier:          ChW9dXzbs4fX7LtSd+QQ9ygcFiSc+Y2qb+Oovl4AOYQ=
Subject key identifier:   4B:1A:67:37:14:DC:4E:A1:C4:33:8D:9E:F1:54:71:9E:F2:E9:BC:5A
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584ED432589EEB2537F01A0E0280
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6db15583-6cac-3369-b28e-ce81dc2aa779.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     30036
IP address blocks:        97.64.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:32:58:9e:eb:25:37:f0:1a:0e:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=798b6048-2eee-4c31-ba58-a1c63433c27f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:55:6d:e8:b3:00:83:d1:7f:6d:8e:81:91:29:
                    cb:7c:2d:5d:16:42:c4:2f:04:be:99:0a:77:f2:00:
                    a6:ea:95:c5:34:d4:ed:b6:88:c8:fa:10:f1:18:36:
                    7a:01:d3:99:65:75:09:a7:a9:27:14:65:f2:f2:83:
                    c2:14:86:73:e7:ab:02:91:46:87:78:dd:57:aa:96:
                    09:3b:94:e7:f7:49:10:a3:16:e1:f8:e8:17:29:82:
                    7c:2f:db:b0:e4:83:ce:83:96:fa:ea:e8:93:c8:31:
                    1d:e6:58:3e:17:4a:6d:46:f1:0e:da:fc:15:a3:2e:
                    71:29:36:3c:34:7f:5d:01:37:f4:c8:ab:89:68:d4:
                    58:2e:e9:86:00:ee:cc:cb:b2:e6:7d:89:d6:8d:5e:
                    95:e7:5b:ff:fe:87:29:14:e3:cd:d0:60:fb:a0:5f:
                    a6:c8:f5:fb:fa:bd:ce:ae:9d:88:fe:bd:df:54:5c:
                    fb:a3:72:0d:de:d0:34:69:ff:ac:e8:b9:e3:c3:6f:
                    b7:ff:b2:58:42:ac:b7:b4:8f:20:89:e5:c7:80:a2:
                    22:9d:59:8f:e2:2e:7b:d7:0e:7b:dc:0f:04:f4:91:
                    e2:89:e8:14:4e:79:36:dd:04:31:04:f1:26:ab:aa:
                    28:53:11:69:6b:fa:25:90:37:34:ef:65:88:71:fc:
                    12:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:1A:67:37:14:DC:4E:A1:C4:33:8D:9E:F1:54:71:9E:F2:E9:BC:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6db15583-6cac-3369-b28e-ce81dc2aa779.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:fd:eb:42:e3:7f:48:57:de:61:b5:57:b5:65:70:45:94:a1:
         74:5d:e1:55:a0:c8:cd:f3:6b:72:b7:88:6c:a7:cd:9f:3d:1d:
         5d:fd:51:6a:f8:7c:ea:c1:57:38:af:08:88:ed:cf:5c:6e:7f:
         34:e1:f1:11:a4:ab:e4:5d:18:6b:5a:4d:d1:2c:b7:03:84:b4:
         be:bd:63:38:33:a6:9d:8d:c5:e0:65:47:67:eb:cd:48:f7:f6:
         69:0f:35:24:98:d8:a2:05:75:24:cf:d4:53:48:6e:9f:07:56:
         5c:03:ae:dc:f1:b2:d2:eb:31:a3:55:81:fa:13:6b:0c:9a:d2:
         7a:e3:02:5f:f7:aa:75:e5:75:5d:f2:7e:f3:00:5b:9c:f8:68:
         63:79:31:30:ab:76:ee:89:e8:63:ea:44:c2:12:1a:d1:22:93:
         5c:e7:04:89:cb:5c:0f:ca:19:05:39:c1:df:34:1f:82:3a:f0:
         5f:4c:2b:2c:9f:9e:39:5e:e4:ca:6c:93:ac:19:41:65:46:ce:
         31:17:2f:db:34:a4:d0:6e:5d:a9:55:9c:b2:1d:a7:7f:b4:06:
         2d:ab:99:c3:d6:21:27:7e:0f:b1:10:0b:23:af:9b:4f:54:da:
         1e:90:39:3c:8c:a6:31:52:06:fa:d2:d3:54:a3:de:96:30:eb:
         a9:9e:40:a0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMlie6yU38BoOAoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk
Nzk4YjYwNDgtMmVlZS00YzMxLWJhNTgtYTFjNjM0MzNjMjdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lVt6LMAg9F/bY6BkSnLfC1dFkLELwS+mQp3
8gCm6pXFNNTttojI+hDxGDZ6AdOZZXUJp6knFGXy8oPCFIZz56sCkUaHeN1XqpYJ
O5Tn90kQoxbh+OgXKYJ8L9uw5IPOg5b66uiTyDEd5lg+F0ptRvEO2vwVoy5xKTY8
NH9dATf0yKuJaNRYLumGAO7My7LmfYnWjV6V51v//ocpFOPN0GD7oF+myPX7+r3O
rp2I/r3fVFz7o3IN3tA0af+s6Lnjw2+3/7JYQqy3tI8gieXHgKIinVmP4i571w57
3A8E9JHiiegUTnk23QQxBPEmq6ooUxFpa/olkDc072WIcfwSxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEsaZzcU3E6hxDONnvFUcZ7y6bxaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNmRiMTU1ODMtNmNhYy0z
MzY5LWIyOGUtY2U4MWRjMmFhNzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUDdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHf960Ljf0hX3mG1V7VlcEWUoXRd4VWgyM3za3K3iGynzZ89HV39UWr4
fOrBVzivCIjtz1xufzTh8RGkq+RdGGtaTdEstwOEtL69Yzgzpp2NxeBlR2frzUj3
9mkPNSSY2KIFdSTP1FNIbp8HVlwDrtzxstLrMaNVgfoTawya0nrjAl/3qnXldV3y
fvMAW5z4aGN5MTCrdu6J6GPqRMISGtEik1znBInLXA/KGQU5wd80H4I68F9MKyyf
njle5Mpsk6wZQWVGzjEXL9s0pNBuXalVnLIdp3+0Bi2rmcPWISd+D7EQCyOvm09U
2h6QOTyMpjFSBvrS01Sj3pYw66meQKA=
-----END CERTIFICATE-----
Generated at Fri Aug 21 01:01:48 2026 by rpki-client