Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3222c895-a9b1-3590-888e-be355d099cbb.roa
File:                     3222c895-a9b1-3590-888e-be355d099cbb.roa (raw, json)
Hash identifier:          OIrQMfEjzx9AvPxEwVhEUybZJj+6Ud6ucEbknG1QntY=
Subject key identifier:   9C:E3:8C:29:C7:21:78:5B:95:46:6F:F9:1D:A2:4A:AE:89:E8:A6:40
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A7BB0A7094D4DA6A55A770990
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3222c895-a9b1-3590-888e-be355d099cbb.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     19905
IP address blocks:        97.64.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:a7:09:4d:4d:a6:a5:5a:77:09:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=f60dfa59-7850-45e5-a093-04fd147707d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:03:c3:39:a0:6b:7b:1b:e8:5e:c5:0f:24:ec:
                    16:c7:c3:9d:09:46:a4:36:31:8d:03:9c:b3:a6:a9:
                    65:b5:e2:80:bd:0b:d7:72:75:14:d8:98:1e:79:b3:
                    3d:fa:6b:72:f1:7d:8e:0d:b2:f7:08:17:24:43:e5:
                    29:ee:1d:f2:5d:84:6e:22:0b:95:9e:aa:27:d5:4c:
                    ed:2f:55:68:8a:f9:5f:01:fa:f0:e9:3d:4d:38:3c:
                    9d:fa:6e:d9:f5:f5:d4:58:51:a9:b7:d7:b8:c9:2f:
                    ae:69:03:e6:60:3c:fd:2d:d1:17:df:b2:29:2c:08:
                    91:4f:b2:04:1e:94:74:d1:7d:f7:29:7f:95:05:e2:
                    97:f9:aa:32:e4:7c:e0:85:c4:8c:ca:50:12:bf:68:
                    c2:57:fc:50:6f:1a:c3:07:5e:03:cc:c6:17:b8:98:
                    fc:d2:aa:e3:7d:14:ad:52:33:ec:64:7e:d5:54:09:
                    2a:4a:3e:18:a8:8a:05:3a:9c:d0:b1:e6:d9:d4:54:
                    7e:7b:77:07:31:9c:9e:7b:8a:b6:d5:d7:d4:5d:4a:
                    23:21:37:d1:92:ae:74:b9:2e:29:96:10:67:e5:d7:
                    74:60:b1:57:45:7b:6b:72:d2:37:13:64:6a:a6:d8:
                    bc:6e:07:a2:14:4a:a4:2e:29:51:2c:b1:4c:bd:3c:
                    bf:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E3:8C:29:C7:21:78:5B:95:46:6F:F9:1D:A2:4A:AE:89:E8:A6:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3222c895-a9b1-3590-888e-be355d099cbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:c5:31:2d:ba:7f:ce:a4:43:b6:6d:24:78:9a:ef:d4:8c:a1:
         38:f1:7c:c4:c4:e7:20:c2:53:66:58:a9:17:22:cc:5b:da:45:
         36:ab:f9:cf:0f:99:85:3c:41:5f:47:27:19:79:5c:78:c6:f3:
         06:f2:87:f9:86:4b:50:ef:6c:1c:d5:85:15:24:74:2a:5c:18:
         d5:d5:d0:7e:7d:0a:88:a0:c4:c4:29:56:e0:e7:39:5f:71:56:
         21:49:a2:27:54:f5:76:7f:27:e7:de:97:e1:c7:78:a9:82:79:
         33:5f:9c:6f:9b:1b:f9:82:44:80:db:dd:88:78:09:d5:4c:bd:
         1a:ec:85:c5:75:c0:19:b7:1e:88:3d:a0:a8:99:7c:6e:f9:87:
         3b:06:25:6c:18:76:f9:bd:86:16:d4:97:04:ce:1a:5d:fb:ca:
         9d:df:1d:5b:20:58:b7:93:a4:30:ad:e6:ad:86:53:40:56:41:
         19:79:1a:ba:b0:51:63:42:fe:ad:ea:ef:fe:af:e1:0e:65:fe:
         fa:28:9c:b7:31:5e:b1:1b:7b:36:c9:13:0b:2a:6b:17:4e:00:
         70:4e:07:c5:64:18:f8:9e:dd:99:d5:90:ad:60:bf:4b:dc:88:
         10:b5:70:4d:66:d5:a1:64:4e:ba:6a:82:ea:e6:7b:73:41:21:
         52:8e:64:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sKcJTU2mpVp3CZAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk
ZjYwZGZhNTktNzg1MC00NWU1LWEwOTMtMDRmZDE0NzcwN2Q1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowPDOaBrexvoXsUPJOwWx8OdCUakNjGNA5yz
pqllteKAvQvXcnUU2JgeebM9+mty8X2ODbL3CBckQ+Up7h3yXYRuIguVnqon1Uzt
L1VoivlfAfrw6T1NODyd+m7Z9fXUWFGpt9e4yS+uaQPmYDz9LdEX37IpLAiRT7IE
HpR00X33KX+VBeKX+aoy5HzghcSMylASv2jCV/xQbxrDB14DzMYXuJj80qrjfRSt
UjPsZH7VVAkqSj4YqIoFOpzQsebZ1FR+e3cHMZyee4q21dfUXUojITfRkq50uS4p
lhBn5dd0YLFXRXtrctI3E2Rqpti8bgeiFEqkLilRLLFMvTy/UQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJzjjCnHIXhblUZv+R2iSq6J6KZAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzIyMmM4OTUtYTliMS0z
NTkwLTg4OGUtYmUzNTVkMDk5Y2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUC7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEbFMS26f86kQ7ZtJHia79SMoTjxfMTE5yDCU2ZYqRcizFvaRTar+c8P
mYU8QV9HJxl5XHjG8wbyh/mGS1DvbBzVhRUkdCpcGNXV0H59CoigxMQpVuDnOV9x
ViFJoidU9XZ/J+fel+HHeKmCeTNfnG+bG/mCRIDb3Yh4CdVMvRrshcV1wBm3Hog9
oKiZfG75hzsGJWwYdvm9hhbUlwTOGl37yp3fHVsgWLeTpDCt5q2GU0BWQRl5Grqw
UWNC/q3q7/6v4Q5l/voonLcxXrEbezbJEwsqaxdOAHBOB8VkGPie3ZnVkK1gv0vc
iBC1cE1m1aFkTrpqgurme3NBIVKOZIE=
-----END CERTIFICATE-----
Generated at Fri Aug 8 19:26:20 2025 by rpki-client