Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ac87a148-8d03-378b-a958-35cd7eb005a3.roa
File:                     ac87a148-8d03-378b-a958-35cd7eb005a3.roa (raw, json)
Hash identifier:          9xuVeBvLtDwTOvvxVl5q6LkFYlhUSqItaW2BLH4UPtI=
Subject key identifier:   27:B8:60:12:6F:29:39:D7:9A:AC:0F:6E:47:F8:9D:C3:AC:2C:92:45
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584ED8648593244BC9AEBEBB0F00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ac87a148-8d03-378b-a958-35cd7eb005a3.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     30036
IP address blocks:        97.64.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:64:85:93:24:4b:c9:ae:be:bb:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=7183349e-d2d1-4ab0-a5e2-f86c73e33e17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b4:17:52:ce:e0:f6:71:6a:f2:de:3f:38:6b:
                    bb:21:d8:7e:04:19:f3:56:ac:b5:2b:24:9e:54:ab:
                    26:43:f6:8d:66:1a:12:6b:df:d6:80:9e:ba:47:ca:
                    a3:ab:0f:f5:9b:03:c7:ae:99:a2:27:45:db:2e:4c:
                    af:69:30:26:d3:e4:93:81:50:4c:2a:22:4c:37:4d:
                    ba:f7:26:02:00:b7:72:18:62:a8:ba:c4:65:b8:5d:
                    dd:9e:24:a2:d1:68:4e:bb:df:3b:70:37:4b:af:18:
                    76:77:64:f5:35:ad:88:3e:6e:22:e9:39:d2:61:9f:
                    21:d6:44:6e:d9:e9:e5:52:ce:ee:90:18:af:ff:3c:
                    94:3d:f2:15:da:16:57:f4:77:88:0a:5e:d1:44:3a:
                    8e:64:02:b5:95:53:54:57:fb:62:8a:b3:19:a3:ba:
                    2c:62:1a:83:31:b9:01:2b:58:10:01:3e:96:7f:9c:
                    9e:15:08:8d:7f:c8:e4:f1:a3:ec:05:81:9b:7b:c7:
                    16:79:7f:b1:31:35:b1:26:aa:4f:ce:21:7e:fa:4d:
                    7c:15:a5:58:9e:e1:fe:e8:6c:6c:83:bf:9e:9f:c9:
                    1f:38:ba:30:c3:a5:b4:e5:1a:4e:8d:8d:d5:db:57:
                    1f:7c:7b:7f:00:16:e4:c2:b7:8b:2a:0b:40:a6:d8:
                    33:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B8:60:12:6F:29:39:D7:9A:AC:0F:6E:47:F8:9D:C3:AC:2C:92:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ac87a148-8d03-378b-a958-35cd7eb005a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:ec:15:5a:8c:69:cd:96:62:a6:db:85:a9:d2:54:5c:3d:58:
         e0:38:3e:cc:cd:ac:fb:c0:e6:06:58:31:ff:5a:36:7a:bd:c3:
         26:ca:2e:a4:66:02:79:a2:02:c0:6e:2d:e3:db:ad:18:6b:fd:
         2b:e8:04:8f:7c:d2:bd:23:8c:97:86:69:9d:c9:39:a8:e1:1d:
         1f:39:17:78:9d:1c:e5:52:18:12:b8:7f:dd:ec:9f:5e:07:74:
         0f:a8:0f:e0:0d:31:a1:b3:31:93:f4:f4:fc:29:a2:40:48:76:
         c6:b1:c5:db:d7:38:77:03:e8:31:58:b0:34:9c:18:a9:16:ec:
         d4:3f:f3:60:74:53:b0:f0:99:ea:64:03:fe:2d:96:ca:4f:5f:
         47:2b:cb:b9:a3:d6:b7:8f:d7:a6:7e:d3:10:c1:de:cd:4e:44:
         ab:cb:ee:21:fd:8b:18:7e:88:32:fa:b8:11:dd:ab:a0:19:66:
         b6:31:ce:6e:8f:24:ce:64:e0:27:88:25:4f:a9:49:67:28:15:
         55:20:39:cf:9e:e0:75:44:c5:19:72:ba:09:e2:19:b3:2e:77:
         0d:ed:93:4d:6d:d9:df:c2:03:1c:7d:cb:e9:20:ea:a7:a9:55:
         05:e7:14:86:94:77:88:25:ac:37:12:42:d4:ca:66:ed:bc:bb:
         5c:63:1f:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YZIWTJEvJrr67DwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk
NzE4MzM0OWUtZDJkMS00YWIwLWE1ZTItZjg2YzczZTMzZTE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbQXUs7g9nFq8t4/OGu7Idh+BBnzVqy1KySe
VKsmQ/aNZhoSa9/WgJ66R8qjqw/1mwPHrpmiJ0XbLkyvaTAm0+STgVBMKiJMN026
9yYCALdyGGKousRluF3dniSi0WhOu987cDdLrxh2d2T1Na2IPm4i6TnSYZ8h1kRu
2enlUs7ukBiv/zyUPfIV2hZX9HeICl7RRDqOZAK1lVNUV/tiirMZo7osYhqDMbkB
K1gQAT6Wf5yeFQiNf8jk8aPsBYGbe8cWeX+xMTWxJqpPziF++k18FaVYnuH+6Gxs
g7+en8kfOLoww6W05RpOjY3V21cffHt/ABbkwreLKgtAptgznQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCe4YBJvKTnXmqwPbkf4ncOsLJJFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYWM4N2ExNDgtOGQwMy0z
NzhiLWE5NTgtMzVjZDdlYjAwNWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUCGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAELsFVqMac2WYqbbhanSVFw9WOA4PszNrPvA5gZYMf9aNnq9wybKLqRm
AnmiAsBuLePbrRhr/SvoBI980r0jjJeGaZ3JOajhHR85F3idHOVSGBK4f93sn14H
dA+oD+ANMaGzMZP09PwpokBIdsaxxdvXOHcD6DFYsDScGKkW7NQ/82B0U7Dwmepk
A/4tlspPX0cry7mj1reP16Z+0xDB3s1ORKvL7iH9ixh+iDL6uBHdq6AZZrYxzm6P
JM5k4CeIJU+pSWcoFVUgOc+e4HVExRlyugniGbMudw3tk01t2d/CAxx9y+kg6qep
VQXnFIaUd4glrDcSQtTKZu28u1xjH8w=
-----END CERTIFICATE-----
Generated at Fri Aug 21 01:45:22 2026 by rpki-client