Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/160d23d2-2aa2-30eb-9cb1-189d65a5a340.roa
File:                     160d23d2-2aa2-30eb-9cb1-189d65a5a340.roa (raw, json)
Hash identifier:          wPIbnal9+jcpW/wTeq21pKL5FncPpBGQfMd/rDA+zAc=
Subject key identifier:   63:2A:77:0E:B4:25:83:8F:1F:42:A1:0C:51:8A:C8:5C:DC:84:B7:AA
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D52434925E7B7EB28F5E1DA80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/160d23d2-2aa2-30eb-9cb1-189d65a5a340.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     30036
IP address blocks:        97.64.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:49:25:e7:b7:eb:28:f5:e1:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=1ce2b3fd-6bf0-4723-b058-13b3c470bd21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:51:10:78:f8:31:b6:5e:57:ca:1d:92:c9:28:
                    9b:be:36:11:b5:d2:31:d5:4d:16:f8:79:7e:53:fd:
                    df:ad:55:4a:4c:e2:07:78:bb:75:18:aa:24:a8:88:
                    29:93:8f:cf:eb:be:92:39:2b:ec:08:22:5c:36:5b:
                    14:cb:6e:36:f6:e5:e5:15:2b:a5:a3:31:9b:e1:4d:
                    de:42:a6:fd:ea:12:c7:9c:13:20:ce:62:26:74:6a:
                    81:73:6d:f6:cb:8e:c2:b1:a0:ac:d5:ff:b6:61:fb:
                    86:a5:54:f3:49:89:07:91:53:fc:91:b0:22:62:22:
                    1d:77:f9:ac:c1:28:f2:45:b9:5d:08:25:f9:14:60:
                    6d:0e:5a:76:59:f8:80:76:27:f8:84:40:d1:51:dd:
                    4e:fb:13:f1:78:55:d9:88:d6:c9:98:06:37:79:d7:
                    e2:fb:f7:74:c4:8c:4f:af:be:d2:11:dd:75:ae:77:
                    86:17:8c:3a:a1:be:5f:c8:eb:57:b9:d9:cf:d9:89:
                    4b:0b:e7:e1:c4:81:d2:6d:b6:fc:8f:c7:7c:17:4f:
                    82:4b:3a:c0:ff:c6:10:7b:4b:b2:4d:de:b0:a8:ae:
                    b0:5e:54:1c:6e:6e:ab:9c:e1:bd:26:89:98:9f:68:
                    62:14:19:e1:9f:5b:89:ef:11:5c:da:92:26:58:b2:
                    c2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2A:77:0E:B4:25:83:8F:1F:42:A1:0C:51:8A:C8:5C:DC:84:B7:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/160d23d2-2aa2-30eb-9cb1-189d65a5a340.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:9d:a5:14:5e:a2:28:c0:fb:4a:0e:00:9f:8c:68:3d:ab:09:
         47:88:4c:a8:4a:c7:c0:11:b3:53:73:d8:14:5d:a6:86:5e:71:
         48:91:cc:a3:59:ac:f4:c5:42:5f:e9:dc:7e:fa:40:6d:0f:8c:
         f3:b6:27:f7:9c:ba:b2:8d:74:21:25:52:37:a4:1d:b8:a0:ed:
         24:b4:dc:d3:63:68:d5:b8:fa:c5:fb:67:f8:15:ee:7a:b2:e2:
         78:54:30:46:16:d0:6b:c3:ef:1c:f4:0d:44:df:df:8f:dd:76:
         d2:3a:43:be:6c:9b:53:90:ce:22:f0:55:02:a0:35:25:c2:eb:
         94:be:b1:73:bf:6b:df:74:0a:78:33:28:1b:31:04:0c:dc:fb:
         e6:10:ab:a8:69:27:38:48:48:d8:41:0f:8c:3d:19:63:dd:8b:
         5d:ba:54:65:9f:ed:81:81:b8:92:11:ba:54:76:45:cb:7d:fa:
         40:77:10:9c:06:c7:54:96:fe:67:45:57:a2:e8:db:23:dc:84:
         1d:1c:73:df:af:53:2a:ee:55:a2:92:cf:69:5a:2a:2d:c8:3e:
         76:db:0f:f1:db:5e:18:2c:e3:d2:de:57:23:38:73:f2:54:96:
         3e:d1:de:f7:66:d8:91:ae:d3:53:ed:5a:fa:00:8f:e3:41:df:
         5a:87:f1:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ0kl57frKPXh2oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk
MWNlMmIzZmQtNmJmMC00NzIzLWIwNTgtMTNiM2M0NzBiZDIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilEQePgxtl5Xyh2SySibvjYRtdIx1U0W+Hl+
U/3frVVKTOIHeLt1GKokqIgpk4/P676SOSvsCCJcNlsUy2429uXlFSulozGb4U3e
Qqb96hLHnBMgzmImdGqBc232y47CsaCs1f+2YfuGpVTzSYkHkVP8kbAiYiIdd/ms
wSjyRbldCCX5FGBtDlp2WfiAdif4hEDRUd1O+xPxeFXZiNbJmAY3edfi+/d0xIxP
r77SEd11rneGF4w6ob5fyOtXudnP2YlLC+fhxIHSbbb8j8d8F0+CSzrA/8YQe0uy
Td6wqK6wXlQcbm6rnOG9JomYn2hiFBnhn1uJ7xFc2pImWLLCNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGMqdw60JYOPH0KhDFGKyFzchLeqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMTYwZDIzZDItMmFhMi0z
MGViLTljYjEtMTg5ZDY1YTVhMzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUD3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI2dpRReoijA+0oOAJ+MaD2rCUeITKhKx8ARs1Nz2BRdpoZecUiRzKNZ
rPTFQl/p3H76QG0PjPO2J/ecurKNdCElUjekHbig7SS03NNjaNW4+sX7Z/gV7nqy
4nhUMEYW0GvD7xz0DUTf34/ddtI6Q75sm1OQziLwVQKgNSXC65S+sXO/a990Cngz
KBsxBAzc++YQq6hpJzhISNhBD4w9GWPdi126VGWf7YGBuJIRulR2Rct9+kB3EJwG
x1SW/mdFV6Lo2yPchB0cc9+vUyruVaKSz2laKi3IPnbbD/HbXhgs49LeVyM4c/JU
lj7R3vdm2JGu01PtWvoAj+NB31qH8Zc=
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:47:03 2026 by rpki-client