Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ab4b6932-970f-3162-8a65-5fbc3fbe2fcb.roa
File:                     ab4b6932-970f-3162-8a65-5fbc3fbe2fcb.roa (raw, json)
Hash identifier:          TwGtqV7ZoKBHJRVU0mEZrCSlbHcXl27j9PawM1y9aNo=
Subject key identifier:   33:42:88:2F:EF:4B:6A:17:74:86:9E:66:B2:54:5D:9A:46:B8:6D:B2
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D5243C55FB66DD137A030E600
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ab4b6932-970f-3162-8a65-5fbc3fbe2fcb.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     30036
IP address blocks:        97.64.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:c5:5f:b6:6d:d1:37:a0:30:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=76716297-f5d4-4963-827c-242b03801529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:db:fe:28:db:ab:8b:54:25:2d:74:aa:40:8f:
                    85:ff:c1:ea:92:f6:4a:dc:04:bc:81:7b:0a:dd:37:
                    4a:fa:d5:4a:61:65:ca:84:94:22:03:7d:de:27:ad:
                    93:c3:e3:43:ab:29:c3:7d:6b:8e:e5:f3:20:c9:1e:
                    93:a8:86:b5:f6:3a:e0:ec:3f:8b:9d:5c:15:9e:3d:
                    ce:39:1f:a0:af:d1:cc:8f:cb:5a:02:f8:92:23:92:
                    f4:a2:e2:0b:c1:b4:d8:51:17:eb:11:2a:a3:54:63:
                    7b:da:0a:c3:0d:2a:53:78:d5:b4:48:05:ce:7b:42:
                    71:69:f9:ca:66:f5:92:e0:91:6a:00:d7:42:7f:cd:
                    e7:10:2d:0b:26:cd:16:41:c9:d7:f0:43:78:83:6b:
                    90:b9:00:01:f6:70:25:cd:67:79:23:42:8b:dd:b6:
                    ea:c4:2e:31:2b:df:17:5e:78:3a:dc:b0:3b:10:9c:
                    23:57:c6:64:ad:3c:c1:dc:ac:b5:e9:c7:7f:ad:95:
                    a1:a0:1a:6a:b9:c1:49:33:96:53:ce:e8:7f:39:f2:
                    06:fb:81:74:d7:72:62:27:c3:86:6d:25:93:2d:c6:
                    72:a9:18:8e:da:e3:92:62:86:ae:b9:2d:33:ad:41:
                    92:f1:73:be:43:cb:e1:67:95:1e:7f:21:6c:c6:25:
                    72:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:42:88:2F:EF:4B:6A:17:74:86:9E:66:B2:54:5D:9A:46:B8:6D:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ab4b6932-970f-3162-8a65-5fbc3fbe2fcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:f5:33:61:8c:c9:63:b4:e3:4d:6f:56:6c:0b:05:98:56:4a:
         98:c9:56:fe:57:ca:d0:67:05:21:7b:bf:72:61:96:ab:3a:e8:
         00:b6:43:89:35:dc:31:ea:00:25:15:9f:25:77:14:3b:c8:cf:
         c8:01:de:6c:09:c0:47:c4:a8:65:de:96:a5:1c:31:f4:5f:a8:
         ce:bc:cd:06:d0:36:79:25:43:97:ca:6b:9d:b8:94:21:7a:a1:
         64:ee:03:dd:15:bc:22:75:eb:38:a7:d7:3b:ca:d5:ac:cc:9e:
         1f:1a:7d:50:2a:30:30:5f:03:c7:d2:c9:43:b3:54:df:15:e1:
         de:85:97:ca:e5:ac:53:61:9e:45:e0:f7:d9:b5:0a:21:16:20:
         60:1a:49:af:46:5f:3a:d5:68:0e:18:c5:1b:01:c0:ba:55:b1:
         31:19:53:77:0b:f8:ac:2b:f1:ba:50:57:05:3e:7f:b4:62:c6:
         73:dd:ad:0c:0e:3d:36:df:08:d0:1b:d2:42:6a:9d:62:85:ac:
         00:cf:c5:04:83:a2:c6:74:95:1d:1b:34:23:a1:45:b6:9c:f6:
         6c:61:3a:83:94:d5:39:3e:63:f9:82:70:bb:be:34:02:45:f8:
         eb:0c:83:38:48:af:0a:57:6d:a5:28:1f:ae:b8:4b:4e:04:37:
         c5:29:20:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:45:31 2026 by rpki-client