Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/88d74743-bb10-391c-9e0f-6c29e62707bc.roa
File:                     88d74743-bb10-391c-9e0f-6c29e62707bc.roa (raw, json)
Hash identifier:          HqDhXGCCkd2ioob0UZxX0J0TeWrUj6U/3AllLrksyxg=
Subject key identifier:   01:C6:12:3F:34:58:68:D3:AB:FB:F3:97:10:BA:DA:FC:9B:DD:3C:F8
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AB220BACC1B833B04377DF600
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/88d74743-bb10-391c-9e0f-6c29e62707bc.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     30036
IP address blocks:        97.64.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:ba:cc:1b:83:3b:04:37:7d:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=33983168-31b9-4322-a74c-b89892017d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0f:89:7e:c2:3a:e5:fe:c8:c9:e2:b3:11:ec:
                    15:5f:59:18:54:49:0a:c7:65:23:8b:3f:35:26:5a:
                    d1:86:07:75:be:62:8f:d1:6d:d4:b8:e4:2c:fe:29:
                    06:b1:b3:de:e7:8f:41:4e:82:c2:cf:a7:2a:c8:a4:
                    15:d8:b7:ab:1f:6d:e5:a0:ad:08:c6:cc:b1:7a:77:
                    d8:78:b0:97:30:d8:0c:ae:98:da:9c:30:ca:b5:19:
                    55:33:23:0c:e9:b4:a4:74:68:0a:e4:58:bc:d0:67:
                    28:54:34:da:4b:91:63:d5:83:5d:d6:17:22:92:2e:
                    75:90:48:fa:27:eb:b1:d5:17:56:dc:ba:42:1c:de:
                    08:3e:81:07:9b:2c:6b:25:6a:dc:04:eb:71:18:c6:
                    3f:7e:33:32:23:85:87:20:ea:78:5c:2a:a3:73:57:
                    48:7e:a7:05:ae:fc:a1:93:4a:6e:73:35:b0:a8:bd:
                    59:83:92:bf:59:c0:c1:fb:55:c6:14:e6:df:f1:2a:
                    da:62:0d:4a:78:ec:2a:d1:bd:46:2c:7a:15:28:80:
                    88:85:da:59:42:9b:1e:e7:8f:5a:a9:57:dc:18:33:
                    24:c8:69:39:6c:d8:43:7a:56:b5:63:25:f7:c2:9d:
                    cb:f9:e8:66:c7:45:35:1e:18:09:12:8e:26:c1:4f:
                    a3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C6:12:3F:34:58:68:D3:AB:FB:F3:97:10:BA:DA:FC:9B:DD:3C:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/88d74743-bb10-391c-9e0f-6c29e62707bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:db:40:9d:12:e9:18:1c:7f:ff:d2:f5:15:65:44:83:54:53:
         d4:8d:16:c6:54:ce:be:ec:6e:44:f3:1b:0d:97:58:24:ea:08:
         c3:e2:bc:a5:e5:fc:b6:f6:e4:92:d7:e4:c5:80:d6:7a:e2:c7:
         ea:66:6c:19:d4:45:56:7c:1b:41:01:d4:df:aa:fa:0b:aa:1e:
         f8:2d:7c:0d:82:36:17:7a:b2:91:58:51:af:0b:da:73:2d:7e:
         fb:82:17:bc:ce:c0:07:49:e2:cb:5c:69:50:7a:89:ef:d2:e5:
         0d:ac:5a:8b:c4:1c:cb:05:19:9b:a1:fa:a5:e9:ce:f5:2f:4b:
         cd:ae:2c:75:46:bd:04:cc:36:f6:cc:50:75:0c:67:a7:3d:71:
         e6:a4:0e:36:18:ec:ca:48:60:79:43:43:0f:b4:f4:9b:23:01:
         e8:33:f1:af:8b:47:e2:06:a3:0c:95:5f:36:61:67:9e:f0:1d:
         a9:90:9e:aa:a1:bb:15:c5:15:4c:46:71:33:f0:ce:8f:e1:88:
         dd:4f:bf:4e:fd:a9:62:94:65:33:63:73:75:2c:72:89:09:ac:
         5e:50:17:13:1f:24:09:9a:b2:9e:64:e4:51:35:83:58:fa:de:
         9d:2c:32:ad:be:89:bc:9e:80:dc:32:3a:23:68:ed:ee:14:62:
         c9:ec:55:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyILrMG4M7BDd99gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk
MzM5ODMxNjgtMzFiOS00MzIyLWE3NGMtYjg5ODkyMDE3ZDhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQ+JfsI65f7IyeKzEewVX1kYVEkKx2Ujiz81
JlrRhgd1vmKP0W3UuOQs/ikGsbPe549BToLCz6cqyKQV2LerH23loK0IxsyxenfY
eLCXMNgMrpjanDDKtRlVMyMM6bSkdGgK5Fi80GcoVDTaS5Fj1YNd1hciki51kEj6
J+ux1RdW3LpCHN4IPoEHmyxrJWrcBOtxGMY/fjMyI4WHIOp4XCqjc1dIfqcFrvyh
k0puczWwqL1Zg5K/WcDB+1XGFObf8SraYg1KeOwq0b1GLHoVKICIhdpZQpse549a
qVfcGDMkyGk5bNhDela1YyX3wp3L+ehmx0U1HhgJEo4mwU+jMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAHGEj80WGjTq/vzlxC62vyb3Tz4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODhkNzQ3NDMtYmIxMC0z
OTFjLTllMGYtNmMyOWU2MjcwN2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUD0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJHbQJ0S6Rgcf//S9RVlRINUU9SNFsZUzr7sbkTzGw2XWCTqCMPivKXl
/Lb25JLX5MWA1nrix+pmbBnURVZ8G0EB1N+q+guqHvgtfA2CNhd6spFYUa8L2nMt
fvuCF7zOwAdJ4stcaVB6ie/S5Q2sWovEHMsFGZuh+qXpzvUvS82uLHVGvQTMNvbM
UHUMZ6c9ceakDjYY7MpIYHlDQw+09JsjAegz8a+LR+IGowyVXzZhZ57wHamQnqqh
uxXFFUxGcTPwzo/hiN1Pv079qWKUZTNjc3UscokJrF5QFxMfJAmasp5k5FE1g1j6
3p0sMq2+ibyegNwyOiNo7e4UYsnsVYA=
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:04:17 2025 by rpki-client