Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f6234e2a-21bb-3733-9890-993c62a9513c.roa
File:                     f6234e2a-21bb-3733-9890-993c62a9513c.roa (raw, json)
Hash identifier:          ptdwMVvS4JgiKIow70OWrlPWvY+DaC11otLPY10u6OM=
Subject key identifier:   5E:92:18:7D:4B:0F:10:62:E0:62:FA:CF:00:30:00:22:A9:CB:99:8D
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E31CF108DF8919CEBB111AD00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f6234e2a-21bb-3733-9890-993c62a9513c.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     30036
IP address blocks:        97.64.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:10:8d:f8:91:9c:eb:b1:11:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=19b93d1d-9420-4a28-949e-80d27f00db83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:06:a5:51:2b:09:94:bc:69:3e:39:0d:cb:60:
                    d5:f9:e2:8c:c4:52:0c:b7:0b:44:f6:41:2e:54:93:
                    92:e9:30:3f:07:f7:cb:37:04:cf:35:11:fa:15:ad:
                    42:c4:33:3c:03:13:7e:53:a0:d0:2b:d9:31:16:9f:
                    ef:4e:86:9f:3e:77:71:21:04:2b:9a:b9:6d:f5:44:
                    3b:70:5c:dc:04:6b:62:9c:e3:82:d3:3b:c9:63:a7:
                    f8:ca:14:8f:e6:08:a7:a7:5e:13:d9:10:cd:47:3f:
                    54:7d:69:2b:a9:70:f6:0b:4c:b3:38:07:41:84:78:
                    ea:54:9c:b7:24:b2:7f:54:ed:6e:5c:af:05:b1:82:
                    d2:b8:29:0c:b7:95:90:ad:da:70:4b:76:a7:5c:47:
                    a0:3b:f9:09:b6:12:63:87:02:08:e1:69:d8:b5:43:
                    45:51:94:63:de:8f:fb:84:a9:b7:28:0f:2d:2d:5b:
                    c9:d7:ab:94:f7:aa:b4:a8:3f:84:f8:4e:e3:b6:11:
                    45:92:b5:20:c4:aa:d1:61:32:dc:d9:59:52:a9:11:
                    1b:4a:93:84:1f:6c:13:e8:7d:eb:20:f1:3c:20:69:
                    81:7f:0f:c0:cc:bb:ef:be:c3:2f:5b:27:9c:f8:96:
                    04:ff:64:58:6c:8e:1c:4e:22:64:2a:5d:9b:28:82:
                    87:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:92:18:7D:4B:0F:10:62:E0:62:FA:CF:00:30:00:22:A9:CB:99:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f6234e2a-21bb-3733-9890-993c62a9513c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:c4:e1:80:e8:f1:01:8b:39:14:24:5e:2e:50:a4:29:2e:dd:
         4d:51:36:db:c2:71:93:40:9c:8e:40:00:d1:7d:4c:6b:f5:f1:
         61:e4:9c:1f:59:92:de:34:f7:93:da:df:a6:e1:f9:14:6a:df:
         e6:4a:67:5c:65:19:7e:0e:f9:59:ee:5f:fe:7d:58:2a:e0:96:
         ee:7a:3f:f4:c0:d6:f1:35:1b:51:bb:81:01:6c:13:5e:9d:63:
         8f:66:11:c9:79:d7:d3:93:16:22:8a:20:b2:73:6b:2e:c5:bc:
         a6:c0:12:c7:cb:a8:b0:c2:8f:b8:85:04:b0:76:93:bd:db:3a:
         f2:2e:31:13:bd:dd:28:77:ba:73:0b:bc:d4:04:04:1d:05:62:
         f5:ad:f1:f4:e2:5a:5f:16:dc:95:2c:94:6c:02:eb:c6:71:3f:
         78:f8:6a:74:fa:c6:37:4e:29:bb:d7:99:1e:17:5a:9b:61:22:
         3f:4b:96:f1:48:ea:c1:19:76:8f:f9:f9:0d:c7:dc:47:2a:36:
         85:e2:7c:4f:46:54:42:02:c5:55:d0:e0:52:f9:bd:20:ca:59:
         90:e1:3e:ad:e9:79:57:c3:1b:b2:b0:65:64:ee:b6:fb:00:21:
         3e:06:e7:4d:b5:9c:6e:ae:53:92:da:e4:a2:85:6a:d7:20:ab:
         5f:b1:9f:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4xzxCN+JGc67ERrQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk
MTliOTNkMWQtOTQyMC00YTI4LTk0OWUtODBkMjdmMDBkYjgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAalUSsJlLxpPjkNy2DV+eKMxFIMtwtE9kEu
VJOS6TA/B/fLNwTPNRH6Fa1CxDM8AxN+U6DQK9kxFp/vToafPndxIQQrmrlt9UQ7
cFzcBGtinOOC0zvJY6f4yhSP5ginp14T2RDNRz9UfWkrqXD2C0yzOAdBhHjqVJy3
JLJ/VO1uXK8FsYLSuCkMt5WQrdpwS3anXEegO/kJthJjhwII4WnYtUNFUZRj3o/7
hKm3KA8tLVvJ16uU96q0qD+E+E7jthFFkrUgxKrRYTLc2VlSqREbSpOEH2wT6H3r
IPE8IGmBfw/AzLvvvsMvWyec+JYE/2RYbI4cTiJkKl2bKIKHkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF6SGH1LDxBi4GL6zwAwACKpy5mNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZjYyMzRlMmEtMjFiYi0z
NzMzLTk4OTAtOTkzYzYyYTk1MTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUCmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB/E4YDo8QGLORQkXi5QpCku3U1RNtvCcZNAnI5AANF9TGv18WHknB9Z
kt4095Pa36bh+RRq3+ZKZ1xlGX4O+VnuX/59WCrglu56P/TA1vE1G1G7gQFsE16d
Y49mEcl519OTFiKKILJzay7FvKbAEsfLqLDCj7iFBLB2k73bOvIuMRO93Sh3unML
vNQEBB0FYvWt8fTiWl8W3JUslGwC68ZxP3j4anT6xjdOKbvXmR4XWpthIj9LlvFI
6sEZdo/5+Q3H3EcqNoXifE9GVEICxVXQ4FL5vSDKWZDhPq3peVfDG7KwZWTutvsA
IT4G5021nG6uU5La5KKFatcgq1+xn3k=
-----END CERTIFICATE-----
Generated at Wed Jun 24 03:22:23 2026 by rpki-client