Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/76c00ad6-d530-3b4a-a481-731a8fdf8b40.roa
File:                     76c00ad6-d530-3b4a-a481-731a8fdf8b40.roa (raw, json)
Hash identifier:          AWi5H4O7S/mzOsmPdbcJIjomdwalgs2xKwBIEwSl1FQ=
Subject key identifier:   BE:30:85:3C:5B:3B:91:CA:C6:E2:4F:5A:E6:15:4E:E0:63:12:19:CF
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D55BCBA0F9266FC9F8B432C18
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/76c00ad6-d530-3b4a-a481-731a8fdf8b40.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     30036
IP address blocks:        97.64.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bc:ba:0f:92:66:fc:9f:8b:43:2c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=99338fe2-aa25-4af4-ad58-f084a6336d99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b1:68:22:d0:85:c9:e2:71:7c:66:09:58:48:
                    cb:01:79:25:ad:78:fe:3d:ef:a1:eb:97:96:89:e2:
                    56:5a:84:c5:75:15:9a:d6:66:27:57:a9:84:ef:8d:
                    ce:f5:23:ba:60:6e:b1:25:78:1b:ab:cf:57:2f:d6:
                    91:ee:cf:7d:ed:3a:e9:0b:2c:d8:c7:c0:ef:1d:47:
                    3a:6f:3d:9d:c2:25:1c:f6:9d:63:f2:74:f3:ce:78:
                    6d:43:33:79:ab:bd:c5:99:12:e1:29:d2:fe:09:cf:
                    1d:f2:21:f9:3b:2d:d7:d2:c1:35:97:99:c8:92:75:
                    37:70:a4:3e:47:9b:a3:c9:e6:fb:17:7f:de:7b:8d:
                    4f:90:12:4c:0a:5e:7b:ee:ad:8b:b4:78:27:04:9a:
                    d3:24:74:c3:e1:a8:ad:92:21:9a:42:fd:06:91:cf:
                    98:89:a5:d3:43:c8:76:40:b7:1f:4b:b4:b3:c1:d6:
                    bf:77:c2:ee:f2:92:16:88:5e:14:3e:a9:10:78:dd:
                    ac:bf:97:81:9d:81:8b:b1:0d:e1:13:70:54:99:bd:
                    ee:2c:59:cf:ea:47:5c:a9:ed:09:33:5d:ec:da:4c:
                    6c:7d:0e:49:4b:18:37:41:36:70:c0:84:1f:bc:96:
                    0b:15:ee:a1:5f:2a:67:cd:79:e8:fe:1b:88:71:47:
                    ba:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:30:85:3C:5B:3B:91:CA:C6:E2:4F:5A:E6:15:4E:E0:63:12:19:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/76c00ad6-d530-3b4a-a481-731a8fdf8b40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:0f:cd:f1:38:e9:18:fc:e5:a1:39:b1:6f:32:72:c8:b1:89:
         a3:f8:b6:5a:e4:e8:c6:6d:90:69:a4:76:6d:64:7b:05:72:37:
         2b:c1:ca:36:78:cf:ac:b8:4b:17:46:54:ec:3a:bd:0a:f1:ce:
         c5:fc:e4:61:41:91:9a:23:28:e8:a7:c6:79:66:2b:d0:5f:37:
         ea:dc:9d:d6:54:e4:aa:63:fe:fc:28:71:64:35:85:2f:0e:77:
         41:c8:56:dc:6d:b3:34:9f:69:e4:02:98:e5:75:fa:cc:f1:51:
         7a:99:43:cb:62:78:e8:df:e7:f1:70:76:af:cd:50:26:c2:d1:
         4f:6f:da:36:5f:5a:33:2b:31:d1:a3:7e:27:d0:cc:db:f9:f5:
         c0:d3:3a:b1:fe:76:b2:47:f6:4a:f4:30:ab:1c:47:7f:ea:48:
         98:2c:b8:e0:08:a3:99:63:c1:5a:a9:2a:4d:83:34:fb:14:80:
         bf:58:10:bb:f0:ff:5c:66:17:81:ce:27:2e:bc:4c:88:60:35:
         d0:a6:85:ed:b4:b4:94:1a:3b:7f:49:21:c3:af:13:15:1c:10:
         1e:c3:ab:e9:a3:44:4d:60:2a:79:ae:0e:13:3d:14:e7:8b:81:
         9b:f3:a8:86:14:d5:57:db:a2:95:60:8e:eb:f1:60:ac:e0:36:
         37:df:b8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:42:12 2026 by rpki-client