Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f2fc3fe1-53bc-3b05-90b7-fa4f8a4a17e9.roa
File:                     f2fc3fe1-53bc-3b05-90b7-fa4f8a4a17e9.roa (raw, json)
Hash identifier:          P0XRlUH8xeEM0UWWniT/rcVFm8ElyFhQ4VfFkvA6kl4=
Subject key identifier:   76:B5:13:9F:CF:9F:42:23:70:29:B5:66:7C:47:22:43:30:01:29:D9
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584ED8648C8540AC9399656E9200
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f2fc3fe1-53bc-3b05-90b7-fa4f8a4a17e9.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     30036
IP address blocks:        97.64.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:64:8c:85:40:ac:93:99:65:6e:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=e57e0976-1032-457a-b80f-8150a3971c8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4b:59:d4:34:32:e9:9d:64:a6:ce:d5:90:e7:
                    0b:e7:6e:cf:39:df:d5:86:14:d5:6e:b9:cf:1e:25:
                    6b:a3:e3:8e:70:10:6b:f8:a4:3f:c1:39:cd:e5:24:
                    74:d9:19:e5:b8:56:0a:a2:a0:f5:2b:71:3a:1f:9f:
                    58:51:b6:98:04:79:85:1e:ea:74:d0:8a:99:5c:cf:
                    c1:a1:11:18:e2:ed:09:f5:c3:6e:bb:9b:c7:5a:eb:
                    a1:ea:ae:b7:0e:06:31:49:c9:94:00:f9:4a:fc:96:
                    a7:26:d2:06:ee:fd:a5:df:8c:b7:29:52:18:7f:6d:
                    2f:db:75:a9:28:77:cc:8c:55:56:9c:d5:31:7c:b1:
                    b7:f2:7c:2a:aa:5f:25:37:6a:52:27:9b:1e:cd:02:
                    3a:5d:f5:84:7a:4d:0b:28:b5:49:51:27:1e:27:20:
                    e6:eb:5f:c0:b8:99:4c:06:e1:83:f3:0e:2b:6b:53:
                    e2:4a:4c:5e:7a:ec:9c:a2:44:f1:d4:eb:f2:98:dd:
                    57:fd:2f:ac:cb:e6:27:b2:17:2e:98:12:f7:f9:27:
                    e9:e4:d8:47:66:b3:3d:c9:74:0a:aa:a5:b5:eb:09:
                    99:73:54:3c:4a:54:3a:8e:a4:c1:5a:07:b7:d6:27:
                    22:b5:0f:7e:6b:c4:ae:d2:0a:5c:89:74:f3:89:a5:
                    77:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B5:13:9F:CF:9F:42:23:70:29:B5:66:7C:47:22:43:30:01:29:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f2fc3fe1-53bc-3b05-90b7-fa4f8a4a17e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:07:75:09:c0:1f:1a:89:24:40:ef:c5:c0:02:19:5d:7b:da:
         58:7f:a6:63:89:2b:96:85:4e:f1:7c:5c:6a:37:15:ab:c9:ca:
         d4:c2:96:37:a8:6e:74:ef:e3:8c:a9:0a:56:96:8d:25:26:5b:
         83:68:5b:80:bf:7e:f8:b9:02:67:a6:04:62:e9:34:2a:9d:34:
         e2:cf:f2:c6:3a:b5:85:fd:9f:ed:d9:7f:9e:3c:88:78:3b:40:
         07:f3:07:74:67:3b:62:b6:b3:36:61:f1:ba:ed:ac:cd:bb:2e:
         e9:39:41:9e:59:79:46:78:dc:87:f1:e7:af:17:9d:39:3e:e6:
         32:e8:19:4a:84:2f:14:51:44:a2:ce:46:e9:32:9a:55:95:48:
         4d:3f:db:ec:67:ef:f4:d8:22:d8:31:6e:b4:96:28:5c:2a:69:
         c2:d3:3f:dc:b0:d8:ff:51:26:f1:38:2f:7b:0d:5f:56:9d:6a:
         2c:2f:34:c8:d1:ca:2d:ab:e3:d3:0a:8c:a5:e9:ec:8d:b2:f8:
         c8:95:b3:6d:44:3d:88:54:d0:45:db:30:fe:c0:66:06:ed:da:
         a8:32:5a:ac:33:0c:f2:4f:e6:1d:d2:56:d0:b3:f9:45:9b:4a:
         d9:0b:98:cc:09:22:a1:ae:e0:a3:f6:25:4a:5d:58:ec:35:65:
         01:2a:07:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:01:21 2026 by rpki-client