Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/93171d4d-3311-348c-b168-07e48bdff843.roa
File:                     93171d4d-3311-348c-b168-07e48bdff843.roa (raw, json)
Hash identifier:          Aw2LhnOoPHFCuxJnKj2Q60YZqXmUPMVgBcPAk/3rHCA=
Subject key identifier:   A9:C3:33:2C:F7:A3:D6:B4:23:6F:35:FC:24:82:96:CA:55:F4:EE:4A
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584ED431DD201727100E06AF31C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/93171d4d-3311-348c-b168-07e48bdff843.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     30036
IP address blocks:        97.64.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:dd:20:17:27:10:0e:06:af:31:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=6986d73b-1b0e-426a-a26c-98abff949dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:30:d7:12:95:b9:c9:1a:98:53:b3:32:cf:0b:
                    dc:de:9d:7d:22:4f:0a:c2:27:5b:63:c1:08:90:5f:
                    99:90:5f:bc:4d:82:61:9b:93:13:52:85:b3:37:9c:
                    95:62:3b:29:55:ae:05:3b:30:21:44:48:1b:70:8f:
                    26:d3:65:06:05:3a:7f:51:a9:d9:ec:77:28:db:e2:
                    8d:4f:c3:ee:79:46:0b:0b:86:5a:f2:1f:5d:de:ef:
                    03:c2:35:14:49:cf:cd:ec:91:47:2b:65:a3:f8:27:
                    64:14:f0:65:04:f5:71:06:e9:f5:e1:64:18:6c:ad:
                    12:81:08:09:02:fa:04:e8:6b:62:bf:ae:7c:7a:00:
                    2c:08:75:85:f7:83:cc:79:9b:dd:e3:74:6c:0b:fb:
                    76:86:a1:b5:1e:f4:27:9b:0f:4d:57:be:ea:ab:1e:
                    5a:cc:4d:53:f9:f9:ce:a4:47:4d:47:42:d8:97:95:
                    5c:0a:b8:95:9a:9b:8a:3c:fd:f2:78:4f:82:b1:88:
                    0d:85:2e:62:1e:88:67:bc:e5:d3:b0:1c:1d:b1:ff:
                    0a:76:b2:c7:0f:d2:a4:a5:00:ac:b0:f7:5e:54:da:
                    37:01:7e:38:5f:d0:17:b9:95:2b:9c:8b:6e:87:69:
                    c0:17:12:18:f1:19:5c:75:e9:29:79:1c:cf:ab:a4:
                    2e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C3:33:2C:F7:A3:D6:B4:23:6F:35:FC:24:82:96:CA:55:F4:EE:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/93171d4d-3311-348c-b168-07e48bdff843.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:cb:d9:02:2f:fa:87:38:08:e4:83:7a:96:41:a0:e6:2a:12:
         22:9d:27:c6:73:9d:60:46:1a:ae:69:a1:27:b5:53:6a:ba:c5:
         ed:70:d1:ed:ca:6e:f3:87:99:47:94:25:c4:2c:43:06:cc:b3:
         0e:ef:2e:7b:51:68:b9:15:3b:4a:0a:c8:24:6e:d7:65:26:e1:
         6a:3b:d3:a3:1f:5e:d2:8b:f2:77:a7:7a:d5:db:a5:7c:e0:54:
         4a:27:a3:99:a2:45:62:b1:27:6d:ff:c2:21:32:82:66:a1:9d:
         41:bc:7a:5c:f1:a8:2f:53:42:e0:d3:6c:5b:59:b3:79:8f:f8:
         f2:e4:59:a4:cc:b2:24:17:e2:8f:8a:d7:78:c9:64:f7:ba:08:
         69:1d:5f:9e:88:a3:ed:93:a1:7a:72:0c:31:a5:44:06:78:29:
         3c:58:e5:6d:10:9d:ef:72:77:76:a6:43:33:8c:1b:15:38:d7:
         cb:c0:23:ea:c0:a2:32:9f:ec:38:77:2a:ae:98:20:09:fb:4f:
         fa:cd:90:b6:ed:e1:da:f9:3b:30:4a:70:45:49:e1:75:cc:b6:
         32:04:ca:8a:ad:26:f5:43:19:00:da:c4:23:7b:8c:15:12:67:
         34:0f:76:e1:f6:e6:e3:e1:fb:d3:61:1e:c4:55:eb:6d:27:cd:
         ca:c8:76:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:28:42 2026 by rpki-client