Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ba2f366d-8112-317b-babc-593dfcf2b05b.roa
File:                     ba2f366d-8112-317b-babc-593dfcf2b05b.roa (raw, json)
Hash identifier:          QhTypsdkXnXjdCEf26ngVhaa3YPCqNzI/wEFnbrOXRg=
Subject key identifier:   BB:A0:92:5C:EF:BC:29:EB:02:52:7A:74:66:47:5C:D9:EA:87:F5:58
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B95AAFE479FF3ABA49C4A4220
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ba2f366d-8112-317b-babc-593dfcf2b05b.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     30036
IP address blocks:        97.64.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:fe:47:9f:f3:ab:a4:9c:4a:42:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=82415375-b016-45a1-b905-2288ddb1cd6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ab:61:c1:52:d0:85:d1:93:76:df:78:af:e1:
                    1e:41:87:99:f6:51:b1:55:29:a8:ba:35:8f:e9:44:
                    f7:fd:23:e4:2b:22:6a:55:9d:d3:b0:b3:27:f9:b4:
                    9d:97:4d:ea:2a:39:79:6e:54:e7:61:12:23:df:cb:
                    12:20:73:e6:bb:58:f1:17:07:24:82:2a:ff:9c:b6:
                    88:09:12:a8:3a:c5:d1:73:5a:41:6c:1f:81:f6:a0:
                    83:c0:60:4d:71:63:c3:08:4c:64:9e:83:13:50:c3:
                    bb:d7:9e:47:a0:83:af:3e:ef:4e:75:16:57:cd:49:
                    cd:43:d0:a4:b9:9a:e3:ea:95:88:3d:08:af:40:5f:
                    2b:9b:0b:d0:8b:de:fa:65:2a:4b:54:52:93:3d:b8:
                    be:b6:a6:ef:2f:41:1e:72:1b:c7:aa:0b:95:7d:e2:
                    06:1d:3d:5d:ce:a0:05:52:5a:b6:cc:14:d9:b3:cf:
                    23:e7:65:d5:c6:cc:15:9d:3c:f7:b8:e9:19:a4:9c:
                    5a:67:ca:ab:50:c3:cc:f1:61:3e:e4:a5:f8:95:70:
                    d8:1c:c1:fa:51:9e:6d:27:17:25:7f:30:1c:57:42:
                    81:5a:fa:6e:6f:d6:aa:5d:4b:3c:9b:19:c6:71:df:
                    59:da:ea:66:8c:c5:01:a7:7f:4e:23:70:57:f8:31:
                    4b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A0:92:5C:EF:BC:29:EB:02:52:7A:74:66:47:5C:D9:EA:87:F5:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ba2f366d-8112-317b-babc-593dfcf2b05b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:79:2b:de:eb:ca:d1:8d:d9:50:9c:95:f5:4c:33:c2:f2:9e:
         b8:fd:83:ad:10:66:9b:7c:1c:8a:70:00:38:28:16:93:4e:38:
         e5:09:b2:2b:73:5a:11:57:ae:61:e5:e9:7d:4a:23:a7:ac:6a:
         2e:5b:c2:3e:aa:cc:36:a3:48:fc:63:c3:1a:62:da:5e:3a:f4:
         69:f3:df:0f:56:79:c3:94:de:84:a7:1c:10:55:93:25:ae:64:
         22:e0:d1:28:0a:3e:36:b1:47:01:b5:18:1f:60:e4:32:d3:46:
         e8:25:23:0d:26:78:86:9c:3a:84:7a:a8:ae:47:07:6b:89:14:
         74:0c:ca:3f:8c:7b:04:32:a0:1c:f4:c4:cc:31:38:49:7f:60:
         5c:4b:7e:a4:00:e7:9e:ea:ca:a0:ab:1a:f5:45:c8:ee:bb:4f:
         de:42:55:18:c3:32:a0:38:40:b6:aa:75:9f:33:10:48:92:ac:
         61:5e:cb:b3:3b:13:40:69:1b:c0:8c:81:a7:e6:18:65:08:b1:
         09:6e:74:b3:8b:26:84:ef:4a:29:a6:8d:f3:c7:e7:4e:e0:1b:
         31:fb:be:c4:9e:db:83:3b:f4:55:3c:1b:7c:e1:77:7c:f3:be:
         bf:07:d0:a7:0d:ec:ed:b3:91:a8:ac:52:bf:37:c0:2f:dc:6a:
         4d:53:51:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:51:27 2025 by rpki-client