Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3de56c50-0df9-3d5c-8242-8e3e9c64e9f3.roa
File:                     3de56c50-0df9-3d5c-8242-8e3e9c64e9f3.roa (raw, json)
Hash identifier:          m5d2fFOF8K0LKgWxmDj7g+N2AXP2Xbt7KOkXTJqzxEc=
Subject key identifier:   7A:91:A4:D0:95:B0:BE:FA:87:16:4A:14:0C:FD:F0:4F:B3:10:FF:17
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AB4EF02DB5D9AF843DAE55600
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3de56c50-0df9-3d5c-8242-8e3e9c64e9f3.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     30036
IP address blocks:        97.64.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ef:02:db:5d:9a:f8:43:da:e5:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=bf129106-6ca6-4689-b408-7b1a62bbbf88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:df:9e:8f:c9:1e:3c:b0:0e:8e:ca:3d:ae:5e:
                    e5:01:ff:98:77:47:51:2e:98:a3:ff:27:9c:7a:79:
                    62:e6:84:ee:43:79:96:f4:ca:37:26:a9:91:e4:40:
                    df:1d:29:48:ac:f4:4f:42:96:26:e6:b8:53:e0:ea:
                    44:0b:bb:f6:50:5d:52:8b:0a:92:74:f5:83:c0:1d:
                    ed:3b:4d:81:11:27:8b:db:8f:e5:f7:70:c0:34:e8:
                    83:55:18:35:ea:60:7e:7b:00:fc:a5:7d:bb:e5:3a:
                    ce:f9:e6:c0:4b:00:61:d0:0f:a8:42:aa:34:c3:5c:
                    16:fa:d9:af:c7:35:fe:2e:b9:9b:39:0b:c2:a5:ce:
                    be:72:c3:c7:f5:6e:24:96:cc:50:4c:82:01:3e:6b:
                    5c:9c:d3:90:a1:2c:b9:82:fa:a3:c8:f2:67:ea:1f:
                    b9:b4:88:e1:31:f2:62:ba:af:6e:ca:59:07:98:d8:
                    5e:91:d2:4b:ea:64:35:4b:1a:02:b8:09:b2:33:61:
                    68:8a:67:f8:d7:9f:b5:5e:d3:f0:43:08:82:01:95:
                    c8:3a:5f:22:17:08:4f:68:5a:cc:b5:10:df:b5:04:
                    7c:4b:f7:38:b0:dd:36:23:1f:16:51:f3:b6:6b:46:
                    83:6e:1f:47:57:f8:a6:6a:55:5d:3a:b0:01:c8:49:
                    92:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:91:A4:D0:95:B0:BE:FA:87:16:4A:14:0C:FD:F0:4F:B3:10:FF:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3de56c50-0df9-3d5c-8242-8e3e9c64e9f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:4e:0b:41:12:75:8c:5c:44:6d:2c:58:66:46:88:4a:21:72:
         48:61:e6:d6:35:7e:a6:ab:c8:fc:0a:e4:b1:ee:e7:51:62:ab:
         c4:9d:b8:5f:de:88:bf:6a:73:a7:b6:b9:95:3d:4f:5a:aa:26:
         68:7d:61:ca:0a:31:3a:0c:76:69:2a:f7:e2:cc:03:f3:90:ff:
         a5:fc:a9:15:8c:dd:b9:7c:7f:90:f5:a8:94:c2:4b:59:b2:dc:
         a7:3f:37:ad:6a:43:7f:75:78:8f:80:b9:57:fe:9f:da:aa:33:
         34:f2:b5:d4:7c:5a:1a:1b:bd:00:b6:6b:24:1a:77:03:74:e0:
         20:8a:95:68:bb:75:f0:4b:7a:51:82:ce:57:4c:f0:85:56:1f:
         eb:45:17:97:0f:8c:d7:c0:2d:f8:2d:95:44:a2:d0:f8:68:1e:
         82:db:77:9e:79:e5:48:44:ad:3e:e0:0b:d8:59:41:14:e0:d2:
         94:bb:e6:be:a1:e9:21:83:c4:f2:f5:52:86:83:60:97:53:5f:
         88:cf:90:1a:1b:78:5a:d9:50:10:0d:97:13:65:44:7d:fc:b9:
         56:d7:d5:f3:d5:75:5b:07:7f:bc:d0:14:95:de:99:82:14:88:
         c5:b5:c3:5d:ec:df:0f:23:c4:68:7b:42:e3:23:e8:44:3a:df:
         e3:5d:3d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:22:02 2025 by rpki-client