Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a774701f-f622-36c1-9dd3-e162dab05b31.roa
File:                     a774701f-f622-36c1-9dd3-e162dab05b31.roa (raw, json)
Hash identifier:          Jo1C4pGKK9DEq9DPo73QfdBVDMaawCJ4G78IsFNyTlo=
Subject key identifier:   32:6A:CB:01:45:16:11:CD:C5:96:62:DE:3F:ED:69:E7:F0:97:DC:88
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584AB2217563DB84B4A0E133EE50
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a774701f-f622-36c1-9dd3-e162dab05b31.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     30036
IP address blocks:        97.64.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:21:75:63:db:84:b4:a0:e1:33:ee:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=5bae086c-bddf-4ab2-8581-246378618371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:29:b1:a4:92:24:2f:cd:db:1d:32:7f:86:65:
                    24:82:c2:54:4f:22:8a:c6:8c:b2:04:b3:cb:16:1a:
                    80:38:45:b3:d9:93:93:21:91:9d:33:49:b9:0d:f3:
                    35:25:10:74:02:15:2f:4b:13:94:47:ae:70:76:77:
                    82:a6:da:23:cd:fa:25:a0:e0:c1:be:b6:44:31:14:
                    e6:d6:12:a2:e1:71:64:ca:3a:59:bd:29:bf:26:33:
                    54:37:4d:b6:5a:0a:14:f5:5b:4a:f4:0c:50:75:e3:
                    3d:2d:cc:67:1d:c7:a1:75:0a:8a:de:ca:8c:63:66:
                    bc:69:d0:7a:eb:ed:3f:6b:86:52:72:69:38:0e:1f:
                    93:7d:d5:c6:16:b4:12:8d:81:5a:ef:9e:7f:29:93:
                    27:5a:5f:8c:e8:00:0f:fc:b1:65:48:3a:5d:70:e7:
                    64:43:e8:f6:74:33:3a:06:84:4e:39:aa:99:ac:20:
                    73:e8:12:92:14:a9:95:5c:e9:d9:6e:08:1a:14:2b:
                    ff:28:25:c9:b2:61:9d:6d:61:17:df:1c:70:f7:73:
                    94:9d:a5:81:b9:36:7d:f4:01:5c:1b:c4:25:77:6d:
                    18:2f:8c:e0:3e:2a:93:78:db:ce:dd:58:af:d8:72:
                    28:7a:f2:62:51:c7:b7:d9:6d:61:55:c4:64:82:46:
                    10:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6A:CB:01:45:16:11:CD:C5:96:62:DE:3F:ED:69:E7:F0:97:DC:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a774701f-f622-36c1-9dd3-e162dab05b31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:81:f0:df:71:4e:f3:25:2f:65:47:79:3d:1c:22:27:23:b9:
         4c:d4:e4:33:09:8a:53:1c:99:df:c5:39:8f:56:43:76:33:f7:
         1d:ea:74:3e:93:2e:35:32:ab:39:b1:a9:b9:08:a5:29:97:b4:
         d1:fa:f7:f7:32:6e:02:cf:6a:d5:5c:37:29:68:a7:54:53:35:
         07:90:5d:da:4e:85:6e:4e:74:36:aa:74:dc:ca:0e:d9:2e:a6:
         1d:07:87:53:37:16:b9:7b:2a:ed:ac:ee:f5:16:99:e6:8c:b1:
         5b:5e:33:64:d3:40:64:fa:c0:8c:f7:62:6c:13:36:ec:f7:54:
         7d:9e:a9:6b:fd:20:64:5d:32:a3:6e:21:0a:63:04:7d:e5:da:
         25:68:34:20:61:c4:ef:38:60:b9:40:5a:6e:46:6d:aa:fa:62:
         81:ba:b5:af:63:e3:63:1c:8f:33:13:b4:45:46:59:8b:0e:db:
         99:51:27:02:25:46:6c:bd:4c:ac:3a:9e:09:00:b1:b9:9c:20:
         b0:a5:c8:b1:b3:8d:10:36:ea:a1:19:29:26:c7:35:26:31:29:
         38:aa:de:a0:17:01:ab:0a:69:0e:d3:13:9c:32:85:0e:28:73:
         a0:a3:7d:68:55:53:1b:a1:f1:ea:0c:54:58:01:3d:8c:03:1f:
         b5:05:11:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:05:30 2025 by rpki-client