Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0c8249a7-d7d0-3bcb-b2c0-fa447d2cb0cc.roa
File:                     0c8249a7-d7d0-3bcb-b2c0-fa447d2cb0cc.roa (raw, json)
Hash identifier:          dC5xuJ1/vWnX/Fktk1HL7Y5pBblTBwmF5J/+DDCakUc=
Subject key identifier:   93:0A:CA:66:F7:0D:9B:F9:45:A8:50:C6:21:C0:D3:9A:1B:EF:10:57
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AB220B994610AB65CF32BFA80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0c8249a7-d7d0-3bcb-b2c0-fa447d2cb0cc.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     30036
IP address blocks:        97.64.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:b9:94:61:0a:b6:5c:f3:2b:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=80a336e9-fe66-4d8c-acfc-07cdedd859f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2c:00:fa:e6:b4:02:6c:3d:20:d0:88:3a:5c:
                    d4:90:2d:78:05:fd:99:ca:21:5a:34:7c:06:34:ee:
                    be:10:65:30:ca:53:9e:8d:17:1a:30:4c:ff:7e:bf:
                    73:e5:42:12:8e:c7:53:a2:c8:bd:30:a5:a2:3f:2a:
                    04:4e:25:e5:ce:00:8f:b3:d0:de:97:4c:48:27:e8:
                    f3:9a:ce:ca:69:36:b9:4e:b7:5b:b3:ed:09:4f:20:
                    54:03:b5:de:03:b8:3f:80:da:48:a1:1f:b3:c0:62:
                    76:bd:60:5f:86:b3:cf:29:4b:33:12:46:3d:85:49:
                    5c:93:05:9e:34:20:88:9f:0a:72:f6:26:21:71:3e:
                    98:52:56:35:d3:f3:fe:0e:f0:be:4b:35:db:22:b5:
                    8f:e3:61:84:98:7c:11:39:63:a0:33:c0:ed:13:f5:
                    2f:6e:61:6e:de:55:c0:e5:09:4b:23:8a:6d:3a:5b:
                    d9:ff:8c:0a:be:42:d0:5c:8c:0b:e8:eb:46:fd:e8:
                    33:69:7f:eb:9c:c1:b2:dd:65:7a:36:dc:84:68:18:
                    f1:19:cc:13:98:2f:85:55:bb:48:7a:44:45:95:9f:
                    6b:59:99:bf:86:85:6d:7a:c1:6c:6b:df:bc:1b:8d:
                    98:81:ed:2a:87:6c:21:47:b8:b7:3d:a2:af:6b:a2:
                    26:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:0A:CA:66:F7:0D:9B:F9:45:A8:50:C6:21:C0:D3:9A:1B:EF:10:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0c8249a7-d7d0-3bcb-b2c0-fa447d2cb0cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:8d:d6:9e:26:a7:a6:dc:62:82:87:56:04:21:a1:8a:71:4d:
         2f:16:a7:c4:ff:e1:ee:eb:7b:05:f3:2e:1d:ec:3d:94:84:ff:
         bf:c8:9f:43:53:d1:ad:ae:84:86:a9:d2:e6:96:31:f6:84:6b:
         e1:43:e8:8a:f7:43:34:e1:80:61:66:71:fe:7b:c7:88:0f:ca:
         2e:a6:bd:35:a8:9d:8a:a3:ee:55:ae:49:27:99:61:1b:eb:a5:
         0c:97:07:2b:cd:96:15:f0:65:43:58:1f:07:cb:76:a3:bc:ef:
         0f:ea:e8:81:85:7c:72:5b:fb:02:0b:43:52:62:96:e0:63:9b:
         84:7b:60:d4:c1:d0:4d:fa:9d:6b:77:0c:cc:57:19:c5:53:03:
         25:63:cb:3b:75:f5:72:54:fe:8e:e2:bc:e8:26:0f:fe:7c:c9:
         ee:18:ff:9e:13:8e:ba:93:75:01:74:e2:74:c5:5a:20:52:54:
         f0:45:49:ed:ba:c5:84:ec:3b:0d:7d:6c:13:79:d3:c7:75:b6:
         aa:d2:24:f8:0d:05:54:44:65:c8:40:01:48:e8:22:1f:1e:5e:
         f8:e6:8c:78:e6:4e:74:0c:fc:68:7d:be:be:15:3a:69:fc:8c:
         d7:cc:bc:86:65:24:2a:aa:f2:cd:b2:d5:59:6d:c3:59:ba:e9:
         7b:cb:15:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:34:47 2025 by rpki-client