Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/86ff9137-ba37-3761-99ee-1e32d7d0af90.roa
File:                     86ff9137-ba37-3761-99ee-1e32d7d0af90.roa (raw, json)
Hash identifier:          EfFpYCI3znxg8u1fSrHtmBYuMit/WpOoesusnvcjV44=
Subject key identifier:   7C:66:CB:92:EC:4C:19:A0:14:03:86:41:4C:BE:26:91:D8:C5:F8:14
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584ED8648D0D53C2DCF3CBD36A00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/86ff9137-ba37-3761-99ee-1e32d7d0af90.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     30036
IP address blocks:        97.64.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:64:8d:0d:53:c2:dc:f3:cb:d3:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=9c52e514-a99c-43ec-b311-37e7621fe7e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3d:50:8c:c3:2b:b5:83:00:b1:cb:75:f0:41:
                    ae:50:ab:ac:42:3f:a8:4c:99:13:75:15:44:24:2f:
                    e4:ea:00:42:16:e3:2d:75:eb:d1:1f:66:9b:b5:e0:
                    82:ac:bb:45:48:33:48:67:8b:f3:31:ee:50:a1:bb:
                    62:63:86:8f:a9:7d:36:62:d6:93:eb:e2:de:58:af:
                    91:0f:0f:a8:fc:20:36:ab:f8:63:04:51:cb:d0:f0:
                    45:f4:0b:05:bc:6e:23:a8:29:10:e9:0e:92:f4:09:
                    28:19:87:bb:58:b9:6e:03:38:7d:ec:2a:a1:95:6e:
                    56:83:a7:a7:99:2a:d7:c7:a9:ec:74:d8:43:1e:2c:
                    97:bd:9c:7c:4d:c2:45:fd:c7:d4:46:29:2d:96:ba:
                    ce:ec:78:71:ae:23:b6:7e:28:83:0c:4d:2d:8f:86:
                    74:40:30:7e:f8:a2:95:65:8c:50:a6:09:5e:91:a5:
                    a0:b9:f3:18:d5:07:bd:c9:46:d7:03:4a:65:d6:44:
                    ad:41:5c:ae:6f:ab:2f:5f:23:7e:81:e9:ea:0b:fb:
                    03:76:6e:d4:5e:1a:af:b7:01:47:50:be:8a:ff:80:
                    a1:8d:13:90:af:a6:f9:99:54:48:c2:8e:d9:18:7e:
                    3f:83:88:7a:70:2e:07:61:b7:f3:8c:42:1f:5c:5c:
                    0a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:66:CB:92:EC:4C:19:A0:14:03:86:41:4C:BE:26:91:D8:C5:F8:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/86ff9137-ba37-3761-99ee-1e32d7d0af90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:75:e6:6d:06:9b:e0:a0:41:92:c2:30:e8:6f:6b:26:77:58:
         1c:7c:f9:c9:1c:d1:d8:82:aa:21:9d:02:1c:4f:d3:ec:b2:84:
         17:9b:03:f3:8a:9f:e2:5c:93:46:6e:a4:bd:ed:c5:3a:f1:a2:
         b4:54:27:ae:3d:99:74:9e:f3:36:45:dc:5d:08:7b:a7:f6:cf:
         75:2d:89:a3:9b:97:28:2c:f5:28:59:c7:f5:68:de:e6:fa:e2:
         bd:82:89:91:c7:0b:10:b1:5c:c7:a0:a5:f7:54:35:31:ba:ec:
         3f:1b:c5:c2:3a:b9:d0:4a:8e:da:92:f9:2b:c8:db:82:95:6a:
         00:e2:99:56:4b:40:d6:eb:a0:07:3d:27:3e:cf:5d:fc:69:4c:
         a0:1e:20:75:72:93:90:7f:a8:2f:3b:49:0b:4b:b2:83:64:10:
         d7:93:47:a4:8a:19:a1:d5:73:42:6c:5e:f9:17:6b:05:45:ea:
         e7:9f:c8:c4:9d:42:b1:82:1a:7e:f9:d8:3c:ea:4e:52:0b:9e:
         80:ce:67:56:c9:af:68:28:2d:ed:96:7a:d9:c7:0d:de:3b:db:
         82:83:d4:2e:46:8b:f4:5d:ac:d7:68:19:9d:07:d5:96:0a:20:
         76:75:fb:8a:16:ce:76:73:e8:54:62:56:ae:54:74:ca:5b:01:
         2f:c8:1a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:47:22 2026 by rpki-client