Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f97b9a75-5039-380e-a409-0a55af4c3990.roa
File:                     f97b9a75-5039-380e-a409-0a55af4c3990.roa (raw, json)
Hash identifier:          f3RBYGdy+1pnaSpyCv5oWKua6XNDpvqL4/TzcYu2YYk=
Subject key identifier:   B5:6C:C4:91:46:20:50:53:81:D2:EC:25:7B:F3:7C:30:1C:B2:85:42
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E35FF163FC2C541ACA6327700
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f97b9a75-5039-380e-a409-0a55af4c3990.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     30036
IP address blocks:        97.64.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:16:3f:c2:c5:41:ac:a6:32:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=cdb09df4-4c8c-497b-ad97-8a0a3d340afc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:00:56:db:dc:71:53:5c:0e:6a:04:e0:b9:c5:
                    34:4a:60:6f:07:ce:ea:06:8e:b0:6d:54:80:b7:6d:
                    6b:b6:81:62:15:10:03:51:46:a1:b9:9a:c5:9c:e7:
                    c5:a7:82:fd:eb:f3:e8:9d:70:6f:8e:4a:ec:a5:c6:
                    87:12:b8:4e:03:ad:4a:96:2e:7a:fe:f1:10:8d:52:
                    d5:19:7b:50:92:14:0f:d4:7b:c5:0f:6c:3d:d7:d8:
                    c4:c7:01:be:61:f7:da:aa:36:d4:e6:65:28:19:27:
                    a4:01:a9:2a:50:ab:42:d7:77:07:1b:60:45:cd:a7:
                    09:e7:f4:52:53:bf:18:a3:2a:7a:2b:c3:d2:70:23:
                    e0:a8:f5:a7:09:00:43:4e:c2:b9:42:04:27:11:cd:
                    30:5c:dc:51:d4:26:e1:d4:50:a6:7c:68:36:28:e8:
                    2f:28:89:51:43:18:61:7a:e4:9a:ab:bd:60:55:5b:
                    47:fd:78:94:0e:f1:53:52:fd:ed:a3:e0:16:1e:1e:
                    ca:01:b9:42:67:49:36:ad:29:b3:f9:98:80:80:c9:
                    9b:66:68:95:6f:25:78:bb:60:53:4c:41:f1:d2:90:
                    ce:12:1c:54:b1:33:dd:37:23:5c:9f:c2:83:1b:2e:
                    be:1c:17:6f:43:ab:34:05:10:d9:cb:6f:24:e2:fa:
                    f5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:6C:C4:91:46:20:50:53:81:D2:EC:25:7B:F3:7C:30:1C:B2:85:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f97b9a75-5039-380e-a409-0a55af4c3990.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:a1:83:24:6e:b6:e0:e7:50:b0:f2:4a:3e:cc:f3:be:be:0d:
         9c:53:56:33:f8:0d:5e:25:a7:09:f6:b8:9c:fa:8e:61:4c:c2:
         52:9e:88:7d:12:5d:21:d5:6c:ef:5f:97:4c:84:3c:80:54:5e:
         c5:3a:c6:6e:4e:98:a5:94:7b:62:47:17:a9:07:a4:15:c3:63:
         37:b5:72:a9:f9:ff:2c:08:ce:cf:e3:0c:be:a9:5c:fd:14:5d:
         50:a9:7c:2c:7a:37:67:37:73:78:12:3e:01:02:ba:15:b7:5b:
         76:01:81:89:c9:28:00:05:dd:6e:33:c1:5d:9e:30:ce:94:81:
         74:20:53:ba:b1:6b:98:52:34:b1:2b:cb:03:fb:d4:55:ce:e5:
         7b:b3:99:bd:de:3b:5c:54:37:10:5b:5f:14:a4:99:74:d7:64:
         89:94:63:c8:0a:6d:2d:67:74:60:3b:ab:1b:cf:90:8a:01:0a:
         8a:72:db:1b:06:59:10:c9:49:e4:cb:62:9d:1c:e5:32:5b:46:
         ab:0e:31:d1:b4:c9:3e:56:2c:e8:9a:58:35:91:d0:1c:c6:f8:
         a6:15:a9:cd:cd:d6:7e:74:42:77:7b:2f:05:30:ab:92:57:d3:
         77:ac:30:3c:2d:45:5c:8e:45:6a:42:8f:59:7b:a3:79:52:30:
         d4:f6:b2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 03:21:59 2026 by rpki-client