Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf099652-713d-316c-bd3c-41fc7032aa1d.roa
File:                     bf099652-713d-316c-bd3c-41fc7032aa1d.roa (raw, json)
Hash identifier:          YtR/cpZlVLlbCTKFVB/vROupjp8Qkg1ZMtP8wNxpIFc=
Subject key identifier:   3F:3B:1A:8C:25:C3:55:3F:10:F1:82:11:B0:5B:0C:F5:5F:5F:6E:FD
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584ED86488F824AE0684E5469A80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf099652-713d-316c-bd3c-41fc7032aa1d.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     30036
IP address blocks:        97.64.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:64:88:f8:24:ae:06:84:e5:46:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=af7de5fa-5f16-4dba-a525-74c3367c94c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6b:e3:e7:9d:a4:46:52:75:9b:e0:41:46:ae:
                    21:d6:70:bd:6f:13:80:00:ff:34:2c:ca:50:a0:68:
                    e4:a9:d0:43:f6:8e:a5:5b:cb:78:24:a1:84:33:88:
                    26:84:ee:32:58:be:1b:49:23:3c:f0:77:8c:4e:ab:
                    65:af:f3:a1:9b:1a:d4:00:63:41:fb:ea:e9:5c:fd:
                    e5:76:f4:56:e4:f0:65:bd:63:9f:1d:99:c9:76:da:
                    4a:d2:57:7e:18:a7:cc:bf:36:c5:df:77:b3:5e:de:
                    bf:e0:3c:4b:9c:7a:37:06:ab:74:ff:53:f8:a6:ee:
                    46:2a:31:c0:a7:33:55:59:bd:6d:9a:98:a9:b2:ce:
                    62:51:18:b0:1e:99:eb:e1:3b:e2:4b:4c:3c:c1:47:
                    f1:19:52:2c:2f:88:e7:00:8e:13:39:fc:35:84:94:
                    3f:e0:d9:16:7d:67:d3:7f:de:83:f6:89:f1:b9:42:
                    01:f7:ae:ea:b1:02:ad:65:f8:68:fc:f6:81:ff:60:
                    9d:75:19:a3:4b:7b:34:2d:98:57:2f:02:f4:8f:38:
                    da:d5:11:c3:3d:dc:b5:57:ba:07:49:69:33:9a:ee:
                    ec:f0:88:bb:ce:42:41:c7:55:71:06:77:3f:a5:69:
                    89:c8:95:8b:ba:61:af:4d:a3:be:32:26:89:c4:fc:
                    d8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:3B:1A:8C:25:C3:55:3F:10:F1:82:11:B0:5B:0C:F5:5F:5F:6E:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf099652-713d-316c-bd3c-41fc7032aa1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:4e:de:f2:99:dd:46:e1:a1:40:9d:73:43:c6:62:90:d7:e7:
         d7:f0:b3:f9:40:0a:7e:26:55:25:01:21:09:3a:49:ef:ed:16:
         a9:89:11:0e:53:46:82:3c:4b:cd:a3:bd:82:14:9a:fb:bb:a7:
         58:c4:bf:a5:a1:03:e7:6d:d2:78:32:32:06:8e:39:ac:7f:e0:
         38:4e:cd:e2:e6:17:59:5b:30:61:66:05:cc:71:58:c2:db:c8:
         7a:5b:1e:0b:fc:7d:48:b7:4f:ce:b9:de:d3:fa:a0:83:66:ec:
         e9:39:90:80:c2:9b:1d:67:98:8c:43:ab:8f:7b:57:5d:7f:f0:
         bc:2f:7e:d3:ed:1c:39:5c:18:25:56:4e:b6:a0:91:23:8f:4d:
         f4:f8:87:bb:7e:b5:52:ce:78:8f:4f:56:4f:83:4c:f7:85:c8:
         07:88:50:6b:b4:a7:5f:9b:ac:9b:e6:39:b4:5d:02:53:a9:3a:
         3b:18:c8:d8:67:a8:7f:fd:37:0b:3b:57:80:a7:8f:35:67:49:
         4d:9d:38:59:e2:0f:c6:ee:bb:a4:75:a9:54:ad:c6:b3:55:47:
         4a:8f:64:04:61:3d:43:2f:35:7f:87:85:66:2e:db:a8:a1:ec:
         f2:00:35:26:83:95:7e:f9:ba:59:3d:21:bf:4d:d0:1c:20:34:
         eb:b2:f1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:48:09 2026 by rpki-client