Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/78a5ac02-3e9e-336b-82a3-aed9b5644cbf.roa
File:                     78a5ac02-3e9e-336b-82a3-aed9b5644cbf.roa (raw, json)
Hash identifier:          ec8zh1ad91rOI8o9g7z/8ulIc6vgcODclS8/qE/GZYk=
Subject key identifier:   31:E9:41:E8:0B:88:39:52:ED:87:EF:DB:C4:BB:66:0A:8B:BF:6D:B3
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AB22177CDDAA1AD8410290080
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/78a5ac02-3e9e-336b-82a3-aed9b5644cbf.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     30036
IP address blocks:        97.64.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:21:77:cd:da:a1:ad:84:10:29:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=f749733b-798b-462f-bd97-703e683c9dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:bc:0e:48:88:68:e4:ab:c0:35:92:fd:9c:84:
                    1b:14:f2:c7:5b:f1:a9:1f:28:a2:a7:f7:fb:21:b2:
                    ef:8e:d2:0b:b9:3c:13:0e:ed:51:e4:29:ac:e6:76:
                    13:7d:f1:e4:82:bc:fb:af:ff:8b:0d:8b:10:ec:c4:
                    5c:e9:ab:3c:d2:d6:0a:4f:dd:91:f6:ce:3a:e6:f0:
                    33:37:55:c5:8f:35:30:a6:87:53:b2:71:9b:5f:ea:
                    c4:bb:35:c1:97:a7:1b:80:17:fa:96:42:0e:1f:2e:
                    63:c1:b5:96:d9:8a:05:b6:ae:bc:36:ad:80:9e:a0:
                    24:b0:f1:b9:3b:16:a0:11:90:6d:84:72:10:a4:3d:
                    fd:f2:78:ed:1e:7a:c3:1d:b1:24:79:2d:15:11:3e:
                    02:f7:96:05:29:df:54:93:b9:ad:b9:6f:7b:f7:60:
                    74:5d:06:5a:fe:0d:05:df:db:6e:b4:65:04:0f:d8:
                    ac:0a:29:93:63:8c:87:53:a8:20:04:ac:c5:6e:82:
                    6f:9b:7f:14:6c:40:eb:3e:09:b7:66:55:a9:26:c1:
                    9e:07:c9:a4:2e:d8:92:31:95:eb:53:dc:b4:20:b7:
                    07:ea:91:f9:7d:48:c1:7c:3e:ab:5d:9b:72:ba:2c:
                    6d:85:b1:ed:e5:a9:d5:37:30:5e:de:4a:75:00:7d:
                    b6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E9:41:E8:0B:88:39:52:ED:87:EF:DB:C4:BB:66:0A:8B:BF:6D:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/78a5ac02-3e9e-336b-82a3-aed9b5644cbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:83:67:62:ce:7c:4b:d4:2b:b9:7c:9c:bb:9f:d2:02:7c:42:
         f1:f7:9e:e5:15:f3:0b:4c:5b:fd:42:ba:5d:75:6c:39:05:04:
         d8:95:6f:e0:b5:d3:05:d7:d2:ca:b4:bf:1a:6a:5e:9e:5f:11:
         03:76:85:02:3f:80:26:66:79:91:8c:ee:95:a0:82:79:26:7d:
         35:b1:3b:d9:38:7c:7d:e0:18:93:59:c9:03:09:02:b5:1b:19:
         55:c7:c0:83:79:b3:3b:fb:6e:67:13:2c:12:19:bf:c5:e3:1a:
         fe:68:85:b8:cb:4e:1e:4e:50:ee:2d:32:0c:37:7f:0e:d8:93:
         de:b8:4f:eb:eb:93:4f:70:80:ea:f2:5f:0a:a7:91:c2:76:9c:
         33:2c:4e:ca:d5:8a:29:ff:86:e2:17:36:2b:b8:60:57:8e:12:
         ae:34:35:0b:13:47:33:15:a3:45:45:9f:32:9b:01:54:6b:0a:
         7a:fa:7e:12:95:74:a4:f1:13:51:5f:7a:44:16:2e:30:f7:28:
         93:1d:f4:f8:34:45:60:c9:60:6e:89:9c:1b:dd:b8:7d:a7:33:
         9e:c4:41:84:48:36:5e:62:c7:94:49:18:92:09:c4:68:22:77:
         1a:37:86:66:0e:98:ad:b2:9f:63:e0:2a:4f:ea:4d:1f:e3:5e:
         25:b4:34:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIXfN2qGthBApAIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk
Zjc0OTczM2ItNzk4Yi00NjJmLWJkOTctNzAzZTY4M2M5ZGNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbwOSIho5KvANZL9nIQbFPLHW/GpHyiip/f7
IbLvjtILuTwTDu1R5Cms5nYTffHkgrz7r/+LDYsQ7MRc6as80tYKT92R9s465vAz
N1XFjzUwpodTsnGbX+rEuzXBl6cbgBf6lkIOHy5jwbWW2YoFtq68Nq2AnqAksPG5
OxagEZBthHIQpD398njtHnrDHbEkeS0VET4C95YFKd9Uk7mtuW9792B0XQZa/g0F
39tutGUED9isCimTY4yHU6ggBKzFboJvm38UbEDrPgm3ZlWpJsGeB8mkLtiSMZXr
U9y0ILcH6pH5fUjBfD6rXZtyuixthbHt5anVNzBe3kp1AH22wQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDHpQegLiDlS7Yfv28S7ZgqLv22zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNzhhNWFjMDItM2U5ZS0z
MzZiLTgyYTMtYWVkOWI1NjQ0Y2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUCrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGeDZ2LOfEvUK7l8nLuf0gJ8QvH3nuUV8wtMW/1Cul11bDkFBNiVb+C1
0wXX0sq0vxpqXp5fEQN2hQI/gCZmeZGM7pWggnkmfTWxO9k4fH3gGJNZyQMJArUb
GVXHwIN5szv7bmcTLBIZv8XjGv5ohbjLTh5OUO4tMgw3fw7Yk964T+vrk09wgOry
XwqnkcJ2nDMsTsrViin/huIXNiu4YFeOEq40NQsTRzMVo0VFnzKbAVRrCnr6fhKV
dKTxE1FfekQWLjD3KJMd9Pg0RWDJYG6JnBvduH2nM57EQYRINl5ix5RJGJIJxGgi
dxo3hmYOmK2yn2PgKk/qTR/jXiW0NHo=
-----END CERTIFICATE-----
Generated at Thu Aug 7 02:01:26 2025 by rpki-client