Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1fab52a7-6398-3a6d-bf9c-d9a7ed3d694b.roa
File:                     1fab52a7-6398-3a6d-bf9c-d9a7ed3d694b.roa (raw, json)
Hash identifier:          wULZ5cQuiU+F8Jg9gf1aEoF2ac/yJNmL80DsoYVa0q0=
Subject key identifier:   85:6C:1A:2D:33:ED:E1:6D:E3:BC:1F:D0:00:B1:76:25:E3:D3:5B:EB
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F23C28663A7C59E5F9591B740
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1fab52a7-6398-3a6d-bf9c-d9a7ed3d694b.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     30036
IP address blocks:        97.64.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:86:63:a7:c5:9e:5f:95:91:b7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=edc27bc5-c84e-45e5-803d-678f846aa00c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:26:57:80:27:19:56:3e:ad:1d:0f:05:59:97:
                    fc:9f:9d:fb:d5:82:a3:26:75:3e:54:1a:27:d2:cc:
                    8e:f6:80:26:30:d0:f2:9e:7a:33:c2:49:a3:bf:66:
                    90:59:e3:c3:ea:6d:4d:ac:69:e1:b3:51:ae:f5:fd:
                    62:44:0c:60:a5:6f:5c:47:f9:0a:d6:8e:5a:98:5e:
                    4c:c5:9f:7e:89:42:d4:9c:b9:10:5f:4b:09:a5:aa:
                    6d:3a:de:cf:aa:ec:23:d2:ff:d2:75:57:fe:a3:8d:
                    1f:61:2b:5c:e7:24:50:4c:04:94:b5:af:1b:db:26:
                    85:aa:80:b5:20:75:ee:8d:fa:96:86:66:13:2a:45:
                    e4:c7:0a:23:4c:95:b8:6f:dd:94:16:00:71:d2:4e:
                    c4:b5:e1:f4:02:42:d2:e6:61:1c:84:67:38:1a:ca:
                    fe:35:f0:bc:6c:e7:22:1b:7f:76:9a:37:04:75:0a:
                    2f:5f:ea:bd:a1:c6:64:54:35:58:ea:9e:80:9d:f0:
                    76:f3:fb:32:9b:0b:02:f0:6a:ec:80:82:1a:76:f8:
                    06:6e:93:9f:ea:82:ca:47:01:0e:81:4a:4d:ec:14:
                    13:6e:95:18:96:ed:ec:9f:23:9c:24:2c:e8:51:50:
                    40:26:bc:21:48:8c:b7:0e:2d:6f:a1:c1:f0:0a:19:
                    c3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:6C:1A:2D:33:ED:E1:6D:E3:BC:1F:D0:00:B1:76:25:E3:D3:5B:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1fab52a7-6398-3a6d-bf9c-d9a7ed3d694b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:f6:8a:3e:e1:95:7f:a5:be:ba:9b:69:21:6a:89:96:03:af:
         9a:d1:9a:86:b7:11:e8:3b:03:2c:16:2b:a0:23:ec:48:4d:b5:
         62:f8:8a:a7:4d:53:9d:02:47:40:f6:2d:47:42:2c:47:91:85:
         89:fb:02:91:3e:84:6f:ce:ec:d2:b9:02:00:6a:c8:8f:6b:61:
         2c:1c:2c:8a:40:ec:82:2f:35:72:61:10:da:92:cf:92:24:97:
         37:08:48:ae:b9:3b:90:dd:d2:77:49:f9:4d:6c:dd:7b:76:89:
         03:7f:59:b8:1f:67:0c:fb:69:62:1d:2d:35:dd:83:b1:e2:85:
         ea:9f:e3:dd:af:a9:b2:e2:9b:4e:ff:f1:62:b9:e0:dc:d0:ea:
         f6:2e:27:ab:c7:bd:b4:ac:73:25:82:de:9d:e2:14:90:96:df:
         4f:f6:c9:cb:b8:f9:8b:55:be:ed:54:ac:0c:cb:23:5c:a3:e7:
         c5:01:0d:d5:ff:c4:18:1a:5f:80:a5:84:f9:ef:da:4b:c1:09:
         35:77:75:50:b3:29:13:d5:16:2a:7e:e2:a7:c9:73:49:53:ae:
         42:3f:96:48:e2:47:10:4f:98:a6:62:a8:e2:33:ac:18:57:a0:
         bb:21:78:e2:e3:95:dd:fb:a9:a0:26:80:a5:cf:8f:3a:40:e4:
         15:c6:34:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:17:29 2026 by rpki-client