Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7abb6d2e-ab0d-336e-be1b-6935eef49bf0.roa
File:                     7abb6d2e-ab0d-336e-be1b-6935eef49bf0.roa (raw, json)
Hash identifier:          i6iwmhwbQYSPkAwxQwsBtTRF7NbAyPhBdpYK8JgtWmU=
Subject key identifier:   15:11:0B:C6:51:C2:BA:1A:33:D8:92:08:F7:A0:FC:00:3F:64:2B:87
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AB4EF0343670ED014B96EFD10
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7abb6d2e-ab0d-336e-be1b-6935eef49bf0.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     30036
IP address blocks:        97.64.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ef:03:43:67:0e:d0:14:b9:6e:fd:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=faafe07c-66a1-488d-8123-428c263418e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:1e:e0:72:47:41:35:8b:b5:ca:8f:15:27:08:
                    af:de:44:51:70:28:c1:78:55:85:2f:dc:8a:83:6e:
                    f8:a4:f3:16:f6:67:1b:71:b7:35:b9:57:65:c4:25:
                    8a:8c:bc:85:b7:40:39:4e:8f:ac:24:6d:44:a9:fe:
                    ca:a4:fc:de:dc:32:b1:c9:ba:4d:f9:37:55:50:6d:
                    0d:e5:b7:43:2e:2f:d9:c3:cd:70:04:45:c6:9b:ff:
                    c1:e8:9d:30:25:55:04:c6:c0:5b:a0:98:71:00:31:
                    8b:0b:70:bd:27:8b:57:95:fb:0a:41:e9:19:36:a9:
                    52:f9:f9:d3:f0:68:0e:d7:fa:44:74:4e:fc:57:f3:
                    e3:21:c3:4b:e1:15:80:01:2d:8f:0a:a0:7a:b7:3b:
                    20:45:8a:8e:f7:5a:08:78:a9:ca:2c:33:8a:3e:c2:
                    b0:4a:11:7a:81:29:2b:27:ea:13:49:0e:b3:87:d7:
                    2f:f6:a5:53:58:db:18:0e:41:2b:9e:f4:8f:2f:34:
                    b8:a6:d5:14:27:c4:44:52:18:76:5d:e4:ae:fd:9b:
                    96:31:6e:9e:17:a4:96:3c:8c:14:7c:7b:72:07:db:
                    ec:eb:a0:0c:9e:78:a8:b4:bb:15:8f:bf:e8:32:50:
                    e8:30:cc:40:b5:76:29:ac:3c:ba:7a:91:48:c9:1b:
                    f9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:11:0B:C6:51:C2:BA:1A:33:D8:92:08:F7:A0:FC:00:3F:64:2B:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7abb6d2e-ab0d-336e-be1b-6935eef49bf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:55:28:33:60:94:c1:cd:c7:b2:fc:10:d8:ef:b9:c1:b3:e4:
         fb:75:07:59:6a:87:77:54:23:c1:53:f2:16:f1:c4:50:0f:88:
         87:4a:55:21:de:3b:1d:d4:ce:96:4c:0c:96:48:12:34:c9:d3:
         3e:1c:a5:49:64:c9:0a:61:79:0d:03:59:b2:09:f8:c8:6f:ef:
         17:4c:eb:d3:26:84:6f:88:76:ee:2c:66:8a:00:fd:1a:c4:19:
         63:b4:39:62:47:b1:30:1a:d5:cb:a1:64:83:8b:ed:12:72:3d:
         72:b0:82:c9:1d:df:00:4d:4c:5b:aa:05:03:32:3c:16:c0:85:
         a6:af:e2:82:b4:bd:d2:a9:5b:49:f5:6a:f6:ee:97:01:06:6d:
         f2:53:00:91:21:e3:a8:5d:63:6c:56:cd:e5:ec:fc:1a:3f:0c:
         3b:9c:10:bb:d7:88:0c:9c:c2:9a:1d:98:c3:8c:b5:0c:d1:97:
         09:94:34:ae:6d:f5:c0:42:4d:ab:40:93:72:90:d3:ed:bb:d7:
         7e:69:ca:55:c0:db:5f:cb:3a:33:ec:87:a7:5c:3a:74:68:2d:
         5c:7b:99:44:82:c1:01:96:aa:a9:72:ca:30:ff:66:26:65:33:
         b5:d1:3e:f0:51:c1:b6:bf:24:70:92:88:e3:d8:15:18:9b:ba:
         44:3f:15:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:46:52 2025 by rpki-client