Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/64346e3e-cc75-3a58-aa63-75d7c78e367b.roa
File:                     64346e3e-cc75-3a58-aa63-75d7c78e367b.roa (raw, json)
Hash identifier:          CRuI8DeAFh1pmQdAy/E4EkQm4sbQIMYP8ILLyGALa/8=
Subject key identifier:   32:E9:50:B6:AB:40:45:06:C3:C3:70:61:58:98:93:B2:C8:D5:74:0F
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D5243C37B0F666D68E4F1AA80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/64346e3e-cc75-3a58-aa63-75d7c78e367b.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     30036
IP address blocks:        97.64.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:c3:7b:0f:66:6d:68:e4:f1:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=9688ac7a-2412-45a8-af92-e6961e382665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:23:5f:07:d2:66:78:2d:38:20:af:cc:f8:37:
                    73:37:37:70:e1:28:a4:bf:f8:05:64:8f:2c:ed:c8:
                    9d:c1:33:69:c8:ef:d1:7c:59:6e:fb:5d:dc:d4:71:
                    75:df:a0:23:a3:54:a0:0a:25:b1:ee:5f:ad:fb:14:
                    5f:11:8d:12:e7:3b:d1:7b:23:a9:b8:0d:2c:63:ee:
                    df:7c:8b:fe:44:c5:97:c3:5b:d6:88:11:d0:af:37:
                    29:81:d4:25:1e:41:2d:30:f0:c6:ce:b8:78:54:96:
                    4e:bd:59:94:83:f8:d0:4f:e2:4b:38:ea:cb:63:32:
                    e7:3e:06:ca:8b:28:69:6c:f7:69:5a:c1:12:f5:ad:
                    de:15:71:86:6c:26:21:46:cd:43:a5:89:7f:5f:ca:
                    a8:3c:e8:a5:aa:f8:25:c6:f6:29:17:f7:7c:c6:8b:
                    4b:6a:64:4c:9e:9f:a3:e8:bf:d2:2b:51:37:1d:69:
                    0e:0d:e7:6b:a4:45:4e:32:7c:fd:22:37:b7:06:1c:
                    4e:a3:fa:96:6c:bd:76:df:40:bb:c8:b6:b9:fe:8b:
                    2f:06:e0:6d:df:94:d7:a7:c0:40:67:6e:93:49:c4:
                    ac:d1:79:0b:3f:a5:07:55:7f:78:7a:46:28:ba:53:
                    f6:fd:19:b4:81:46:d6:38:a3:1d:28:70:e8:e2:08:
                    5d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E9:50:B6:AB:40:45:06:C3:C3:70:61:58:98:93:B2:C8:D5:74:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/64346e3e-cc75-3a58-aa63-75d7c78e367b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:91:ea:de:a3:13:d2:32:bf:29:dd:5d:ad:ab:66:4a:65:ec:
         65:11:85:22:ce:80:65:ca:35:0f:88:e2:eb:8a:9d:22:fc:e4:
         c5:3d:88:1a:a2:97:e6:f1:ba:fb:14:ad:af:a1:05:85:e9:2a:
         61:35:f5:9e:37:d0:97:7a:47:1d:1c:ef:58:91:5f:c2:9f:3c:
         98:60:46:87:a2:a7:94:35:be:4d:e1:c8:57:eb:19:40:aa:1f:
         c3:a3:4d:27:e3:ab:fb:83:ce:25:94:9d:72:6c:c3:c5:05:89:
         e2:d6:c9:3d:ad:99:f0:76:13:86:e0:0a:a0:9f:c0:92:56:a3:
         1b:6e:3c:66:0c:fb:b9:f2:ba:67:91:6f:70:8b:87:d8:ff:98:
         0a:b7:97:49:8d:91:10:cb:ba:0f:c0:d8:b9:2b:a5:7d:64:9d:
         da:29:23:af:be:80:91:c2:fe:2f:d9:35:c3:99:7b:e3:42:e7:
         1f:9e:04:cd:41:49:44:e1:f3:aa:cf:f9:cd:87:19:5f:12:e0:
         79:54:ed:29:b4:8e:f5:25:93:3f:df:b9:a6:4a:47:34:07:0e:
         b2:0d:72:8d:3d:8b:61:f3:55:07:67:9a:49:a9:c2:4e:be:9d:
         97:59:df:86:5f:bc:09:61:9f:c6:5b:32:bb:3c:61:b4:2b:77:
         ad:59:85:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:43:36 2026 by rpki-client