Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/21e6fb60-ed5a-3c4d-98fb-b83d73f12db7.roa
File:                     21e6fb60-ed5a-3c4d-98fb-b83d73f12db7.roa (raw, json)
Hash identifier:          SqUpVOH9hf1uL0toQ59m8P1UhsZ6QblORLtY03dTu6k=
Subject key identifier:   9A:A2:46:E5:ED:8F:78:42:64:13:B1:4E:45:36:9B:22:3A:9D:93:B0
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AB220B5F3C1FC1BEE00454B00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/21e6fb60-ed5a-3c4d-98fb-b83d73f12db7.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     30036
IP address blocks:        97.64.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:b5:f3:c1:fc:1b:ee:00:45:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=5523467a-9351-4f7c-8ac1-b4aaeec16aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2a:e1:6d:e5:09:c2:17:07:56:10:d4:ae:e0:
                    f0:f2:db:61:66:b3:6b:7c:fd:5e:60:38:ec:92:cf:
                    e3:fb:6f:53:46:ae:ba:48:fe:a8:b5:1b:3f:f9:f2:
                    54:9b:a8:32:16:59:d7:57:a0:f3:ab:de:bf:da:d0:
                    c1:2c:be:d9:c3:66:a5:ce:30:b7:93:e5:2c:b5:67:
                    5d:6e:c1:b3:67:4e:f2:9e:60:34:e9:7a:22:b3:c8:
                    d5:0a:8d:a9:a9:f3:fa:03:15:34:0b:70:4d:41:89:
                    45:34:1d:a2:d5:23:0f:07:4d:37:fb:ac:fb:2b:73:
                    47:25:87:20:be:66:b6:30:87:d7:3a:25:5c:bd:ec:
                    7f:e7:ee:62:4e:6e:7e:fe:24:de:22:72:de:fb:67:
                    36:fe:03:e3:68:c1:5b:32:3b:ff:2a:ab:a0:09:f2:
                    25:09:e7:e2:d6:41:d8:35:a7:97:45:17:a2:02:96:
                    0b:14:8a:93:7a:d1:6c:44:7b:cf:34:df:60:63:84:
                    97:ee:d6:00:8e:5a:ac:19:57:a6:3d:d9:69:90:4e:
                    95:a1:e4:e4:57:69:76:ff:b6:1e:25:47:b1:9b:ec:
                    32:10:c7:17:8a:a8:73:a4:dd:bb:8c:c9:83:c0:8a:
                    96:61:b6:2a:58:66:41:b8:92:e8:73:83:d4:3b:dc:
                    fe:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A2:46:E5:ED:8F:78:42:64:13:B1:4E:45:36:9B:22:3A:9D:93:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/21e6fb60-ed5a-3c4d-98fb-b83d73f12db7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:5f:e6:ff:bf:c6:55:48:9e:06:58:62:18:66:06:a7:65:ce:
         18:03:0d:51:db:a6:f1:94:13:5e:6e:95:f7:dd:d4:4a:e5:91:
         69:9e:62:07:b7:49:3a:e2:f9:33:ca:89:97:e9:30:96:60:42:
         24:12:cb:ee:70:bc:93:24:8a:1a:17:9b:ef:15:3c:69:75:9c:
         2a:79:9a:88:7d:d5:41:03:76:1f:bc:be:96:74:cc:61:d9:22:
         40:5e:bd:14:19:3c:de:e4:c0:ab:37:f7:e5:0b:c7:ac:23:21:
         24:15:b5:14:c0:df:47:70:16:94:29:c8:da:ab:69:e1:2a:36:
         e5:a4:ac:27:f4:42:df:83:9e:39:5c:21:75:b3:d4:23:85:38:
         00:66:f5:8d:3d:42:8b:69:2a:89:62:3c:01:8b:9e:1e:8c:d7:
         01:8c:2b:31:73:41:f3:4c:8e:0d:28:cd:74:f9:92:0d:58:15:
         6a:66:33:6d:3c:d6:b2:a1:34:ab:c8:aa:7c:50:36:ea:01:af:
         1d:3d:7d:5f:f6:6f:83:94:df:b2:a8:13:5d:d6:2e:71:c3:ce:
         b9:6a:ac:70:87:85:90:d7:06:6c:83:be:f3:5b:02:36:ec:ca:
         b1:07:d3:f0:8e:5a:9f:3e:7f:e3:b1:94:c7:b4:c5:32:13:31:
         59:8e:10:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:29:35 2025 by rpki-client