Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/57fbf6cc-4339-31be-9226-440d19f88674.roa
File:                     57fbf6cc-4339-31be-9226-440d19f88674.roa (raw, json)
Hash identifier:          MDkC0m6zVCPOfUwF2rjkzURsNv6ICblByWnHlgvaX5E=
Subject key identifier:   54:9D:04:83:10:4D:13:B7:8F:99:C2:72:97:F1:0B:CA:8B:6B:67:6C
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D52434C9A093C985B49301A80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/57fbf6cc-4339-31be-9226-440d19f88674.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     30036
IP address blocks:        97.64.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:4c:9a:09:3c:98:5b:49:30:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=66626ec6-fc18-47d8-b3dd-7d59343b47ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bf:94:c5:8a:f1:87:f4:ef:24:da:c7:8a:be:
                    3f:e1:e3:9a:22:fd:92:61:3c:91:b3:8c:e1:e5:5a:
                    d6:8c:36:86:ba:6c:c6:77:8f:da:f4:5b:63:ac:70:
                    6f:a1:e2:51:24:f1:6a:da:71:cc:06:67:87:2a:cb:
                    8e:fb:f0:c6:1f:f2:4d:db:de:45:89:f0:21:14:f9:
                    22:e8:24:fa:49:18:2a:56:6b:7c:70:1c:8a:64:ad:
                    5f:e5:0c:e1:01:46:c6:86:0d:7c:ac:5d:b0:2b:aa:
                    05:70:31:62:9e:53:b3:ca:cc:b6:f8:cc:b3:83:a2:
                    6e:1b:f2:a3:62:3a:5d:e3:93:18:fc:7f:6e:2a:ef:
                    0c:c1:ce:da:8b:cd:61:01:84:0c:b2:9a:05:b4:bd:
                    84:2d:54:60:09:73:58:c6:59:2c:dd:01:19:63:10:
                    6c:bf:12:2b:fc:11:4f:54:37:4a:23:c3:aa:22:d0:
                    60:c4:a4:ee:8e:d2:ca:60:74:48:ec:82:75:ed:4f:
                    3a:1c:65:07:90:0e:7e:e5:ce:97:13:c7:63:36:1a:
                    22:60:23:b3:0a:69:0d:38:55:42:5e:0f:da:6c:46:
                    30:ef:bb:9d:0d:85:e0:2f:00:bb:eb:5c:d0:78:b7:
                    cc:57:e1:38:79:ea:26:e2:65:77:1b:50:36:ab:3b:
                    37:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:9D:04:83:10:4D:13:B7:8F:99:C2:72:97:F1:0B:CA:8B:6B:67:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/57fbf6cc-4339-31be-9226-440d19f88674.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:5a:58:43:a5:1b:22:d6:23:05:0d:2d:f4:db:74:14:00:92:
         47:04:21:48:70:f4:c6:56:4d:f3:97:00:38:b5:50:c2:09:38:
         43:d0:6b:88:36:c0:74:24:1c:51:c7:63:a2:7b:d3:12:d0:ca:
         50:8e:b3:71:f0:66:e0:a8:c2:2b:1d:00:6f:d9:14:7a:48:b0:
         56:28:f3:e4:26:e1:58:9a:2b:4a:9a:46:fd:ed:17:cd:18:00:
         85:0a:65:b9:8b:21:e4:5f:80:68:bb:b9:b3:a8:9d:c2:89:d7:
         58:38:6c:ad:2a:a9:2f:7c:c9:9a:75:0b:70:b4:d1:64:7c:7e:
         71:a6:d9:a4:ea:91:0b:bf:17:c7:4a:4d:f0:2f:bc:e8:6f:fe:
         e6:2c:34:8c:7c:29:b1:9e:bf:c3:f5:8b:1a:27:c6:59:16:03:
         9c:9f:d7:70:62:da:19:61:e7:fe:28:96:ad:0d:c1:0e:7d:7e:
         f3:4d:48:ca:32:3b:f2:ed:99:07:3c:e3:71:46:0b:4d:3f:ee:
         c9:b1:9a:f8:ba:ce:3d:91:e2:16:fe:83:c8:70:9b:8d:ab:2c:
         08:40:bf:dd:67:55:7b:de:24:a9:b1:7c:ed:12:ee:77:f7:e7:
         1d:c6:69:43:17:25:c9:21:34:ba:75:03:74:96:ff:35:52:f1:
         32:d7:3b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:10:31 2026 by rpki-client