Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7abb6d2e-ab0d-336e-be1b-6935eef49bf0.roa
File:                     7abb6d2e-ab0d-336e-be1b-6935eef49bf0.roa (raw, json)
Hash identifier:          C6eisTomJECIfOh6PpgnBxQLLEm/qD2TgIyS3jQGjkg=
Subject key identifier:   CB:33:84:4C:BE:8F:25:3C:ED:A2:31:ED:4F:91:70:2A:F8:BE:04:B6
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584ED8648D9E0AE9D8CB444713C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7abb6d2e-ab0d-336e-be1b-6935eef49bf0.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     30036
IP address blocks:        97.64.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:64:8d:9e:0a:e9:d8:cb:44:47:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=adab0dcd-d59b-41dc-98d1-30fda1103a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3c:83:85:81:65:41:b9:47:02:50:76:78:a3:
                    92:40:23:3e:3f:b1:b6:8e:26:ec:85:64:ac:03:79:
                    80:d2:29:10:01:7c:ab:00:bf:be:d6:db:68:bc:ce:
                    54:b7:8c:90:02:26:9a:a1:96:ed:45:99:03:46:1d:
                    d5:5e:c8:fc:d9:79:c5:51:b4:3a:75:ca:c4:d0:6f:
                    d4:6c:c6:de:7e:78:96:e3:ab:3a:f4:c5:0b:d0:88:
                    8e:7b:ff:e1:c5:32:f9:e2:66:bc:a0:39:97:d5:7e:
                    92:f1:ec:66:e7:da:f5:de:b5:d7:58:2e:17:9a:39:
                    62:fc:b3:a6:7a:6c:c4:88:09:e4:8f:c3:c1:01:dc:
                    87:90:71:63:8e:46:cb:77:45:5c:57:0d:40:05:d4:
                    61:f8:87:a7:21:91:e0:b4:33:0d:e8:ff:74:4e:be:
                    12:e1:59:6e:2c:a3:81:a8:62:6e:29:32:82:52:03:
                    91:e6:76:f1:73:97:f5:5e:26:22:6a:fe:b2:5a:9a:
                    39:62:93:fa:52:b7:ac:cb:1e:4b:ee:af:32:f2:9b:
                    bf:b5:f2:fc:e3:2f:3e:9e:8d:0c:6c:b6:37:0f:79:
                    a8:e3:d8:da:cb:3c:16:7c:d1:61:24:93:4a:79:60:
                    5f:45:28:f6:af:a8:d1:df:62:a9:54:f9:8f:b9:d0:
                    28:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:33:84:4C:BE:8F:25:3C:ED:A2:31:ED:4F:91:70:2A:F8:BE:04:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7abb6d2e-ab0d-336e-be1b-6935eef49bf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:27:7d:81:6f:cf:9b:a1:5a:8e:c2:88:78:a4:19:6d:8a:80:
         cd:cb:17:39:49:a6:fa:dd:9a:7b:d0:51:3a:c2:02:4b:10:70:
         72:3c:2f:f7:06:f1:d9:9e:0b:dd:04:7e:2e:0d:28:86:6f:3f:
         68:c2:21:99:03:c1:1d:21:f4:2d:a4:b4:90:1b:ad:97:c4:43:
         76:1e:be:6d:be:c8:2d:3b:b5:18:84:2b:47:fb:a7:ba:a9:29:
         98:09:f5:fc:a8:aa:c3:11:18:7e:61:c4:85:68:e5:ce:a3:e4:
         0a:cb:42:3e:f8:99:4d:bf:cd:68:73:6f:96:21:24:f4:1c:e2:
         b2:e3:40:ee:bc:ff:02:d6:ab:a4:74:c6:e3:08:e5:09:42:97:
         15:1f:30:3f:fa:4e:f6:43:39:37:71:0d:fc:18:44:d5:67:e6:
         b6:b9:b2:02:eb:7a:fa:12:da:49:c5:89:54:28:3c:db:37:24:
         c1:d9:5c:8a:47:48:a9:9d:e2:a1:71:de:ce:58:e5:15:78:0b:
         f5:4f:8a:4a:8a:ad:00:36:5e:29:3a:35:a2:51:9c:ae:72:4b:
         dc:74:10:01:0b:1a:f7:f1:16:6f:b7:97:ba:c2:dc:b5:a1:cc:
         2e:13:16:bb:1f:49:9a:e6:26:ca:f5:ec:e1:81:86:44:2e:fc:
         37:03:c8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:01:12 2026 by rpki-client